Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File:                     IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier:          lWKnj8Gz4hbMU8XQc1paRis+PzHRDDjM+I/FOJxlIsw=
Subject key identifier:   0B:BE:D1:D4:81:03:F5:27:88:55:33:61:1D:15:98:64:C5:39:6C:AF
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer:       /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial:       01A0F18BA8CFAC30D2C3DFDE2E554CC91923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number:          0480
Signing time:             Wed 30 Sep 2026 09:00:56 +0000
Manifest this update:     Wed 30 Sep 2026 09:00:56 +0000
Manifest next update:     Thu 01 Oct 2026 09:00:56 +0000
Files and hashes:         1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: INhNHbsrv5TVKySfPuH60IQ4Bc7NtDLXqvfZJWMJrXU=)
                          2: _rLpPddQQHnYtK6c1M2OfbveI78.roa (hash: cy/Yh9TRIkqxvWrNpFvB7cECUr1O0AAoYui7fpbBSbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8b:a8:cf:ac:30:d2:c3:df:de:2e:55:4c:c9:19:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
        Validity
            Not Before: Sep 30 09:00:56 2026 GMT
            Not After : Oct  1 09:00:56 2026 GMT
        Subject: CN=0bbed1d48103f527885533611d159864c5396caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:2a:f7:12:9c:a4:4a:cf:57:49:d0:e0:78:
                    a9:bf:54:ca:85:81:c5:a3:69:23:a3:48:02:bd:38:
                    77:7b:ad:f1:8a:bf:9a:77:c3:0f:b4:e5:e0:5d:87:
                    63:d0:8b:12:6f:f8:42:ee:3e:0a:ec:04:21:9f:eb:
                    df:b5:22:52:b2:a6:79:2b:1a:d2:f3:1a:33:58:f1:
                    62:a7:2b:76:9c:65:17:94:a4:07:dc:ee:8c:c9:bf:
                    4d:f6:39:02:22:0d:9c:0a:0b:e6:21:dc:f7:3b:bf:
                    a2:c4:bc:3c:15:9a:cf:e4:8f:1e:be:91:93:db:08:
                    16:b4:4a:a8:2d:d3:4f:92:14:64:2b:86:c9:8e:c0:
                    29:d4:d2:46:9c:98:ae:f1:c5:af:9a:2c:16:2b:d3:
                    b5:0a:7c:41:f0:1a:a0:8d:bc:96:3f:89:42:f5:9a:
                    0b:2c:14:21:ab:33:63:51:3a:23:4b:54:3a:6f:6a:
                    3b:59:70:7f:74:b6:cb:d7:db:35:92:fa:af:72:c9:
                    8e:3f:cf:5e:3d:ff:e2:62:46:50:3b:7e:51:0d:f2:
                    f2:21:1f:19:6e:07:4a:c9:6b:47:65:0b:2c:9d:2d:
                    cb:17:5a:64:95:dc:b8:20:27:2b:8e:f9:2f:58:27:
                    45:51:48:9f:cb:4a:01:ae:18:b5:22:d4:eb:2c:50:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:D1:D4:81:03:F5:27:88:55:33:61:1D:15:98:64:C5:39:6C:AF
            X509v3 Authority Key Identifier:
                keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:99:4f:7e:ba:4b:c4:70:b4:df:6e:2e:12:bf:ee:73:98:a9:
         9a:0e:bb:bc:07:b0:9b:3d:2b:b9:ee:10:48:35:4c:ac:b5:be:
         56:65:09:90:09:54:50:3a:93:ad:74:c9:0f:7a:5a:48:30:8b:
         1d:19:c3:e3:7b:08:6a:1b:89:16:cb:47:10:1f:bf:7f:8b:51:
         d4:e1:5b:70:98:fb:81:83:bd:3a:22:78:94:6f:57:5a:94:b2:
         e0:53:94:80:41:82:a6:c5:c2:5d:a7:bb:9d:97:30:48:f2:d7:
         6d:72:23:82:1e:47:12:da:1c:c0:60:91:a5:1b:15:d5:df:fb:
         86:47:e5:63:49:c0:df:7d:27:e7:f5:64:46:fd:f4:fd:95:61:
         7a:34:e4:9d:c1:a8:ad:d5:c5:54:bb:fa:b8:ae:94:12:29:99:
         a1:4f:b0:b0:5d:0e:c4:bd:2b:6c:78:a4:fc:cc:d3:26:0c:0c:
         58:0e:22:e4:98:a3:cf:92:b9:d8:7c:f0:d2:b9:68:28:f2:0a:
         ce:f2:6c:fa:78:22:79:6e:02:7a:00:a7:f2:31:31:3c:a2:5d:
         b8:9a:b6:06:89:64:22:68:3f:78:a6:c9:53:1b:ba:ec:9a:cb:
         bc:58:50:eb:bf:b0:a1:57:1d:04:9c:91:25:73:9a:e3:fc:c1:
         49:e7:d8:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxi6jPrDDSw9/eLlVMyRkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1
ZDg2OTQwHhcNMjYwOTMwMDkwMDU2WhcNMjYxMDAxMDkwMDU2WjAzMTEwLwYDVQQD
EygwYmJlZDFkNDgxMDNmNTI3ODg1NTMzNjExZDE1OTg2NGM1Mzk2Y2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ikq9xKcpErPV0nQ4Hipv1TKhYHF
o2kjo0gCvTh3e63xir+ad8MPtOXgXYdj0IsSb/hC7j4K7AQhn+vftSJSsqZ5KxrS
8xozWPFipyt2nGUXlKQH3O6Myb9N9jkCIg2cCgvmIdz3O7+ixLw8FZrP5I8evpGT
2wgWtEqoLdNPkhRkK4bJjsAp1NJGnJiu8cWvmiwWK9O1CnxB8BqgjbyWP4lC9ZoL
LBQhqzNjUTojS1Q6b2o7WXB/dLbL19s1kvqvcsmOP89ePf/iYkZQO35RDfLyIR8Z
bgdKyWtHZQssnS3LF1pkldy4ICcrjvkvWCdFUUify0oBrhi1ItTrLFCwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu+0dSBA/UniFUzYR0VmGTFOWyvMB8GA1UdIwQY
MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt
Yjg4OGEzMTI0NDU0LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0
LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGplPfrpL
xHC0324uEr/uc5ipmg67vAewmz0rue4QSDVMrLW+VmUJkAlUUDqTrXTJD3paSDCL
HRnD43sIahuJFstHEB+/f4tR1OFbcJj7gYO9OiJ4lG9XWpSy4FOUgEGCpsXCXae7
nZcwSPLXbXIjgh5HEtocwGCRpRsV1d/7hkflY0nA330n5/VkRv30/ZVhejTkncGo
rdXFVLv6uK6UEimZoU+wsF0OxL0rbHik/MzTJgwMWA4i5Jijz5K52Hzw0rloKPIK
zvJs+ngieW4CegCn8jExPKJduJq2BolkImg/eKbJUxu67JrLvFhQ67+woVcdBJyR
JXOa4/zBSefYKA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 13:33:23 2026 by rpki-client