Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File:                     iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier:          DSgxUyAASjf6vlT7eP9gZL/D+c1j+I3h3C80A0tnlVw=
Subject key identifier:   77:09:49:EF:66:DB:F5:96:C5:63:E1:7E:5B:EC:26:51:F8:BF:A5:BC
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer:       /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial:       01A0C39F94FA980ADBCC0C82E82329EA8503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number:          018D
Signing time:             Mon 21 Sep 2026 11:00:10 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:10 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:10 +0000
Files and hashes:         1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
                          2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: sDnzwkibptvWyD5N4pVi061G97aBtkJCgolTFJRT1uA=)
                          3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:94:fa:98:0a:db:cc:0c:82:e8:23:29:ea:85:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
        Validity
            Not Before: Sep 21 11:00:10 2026 GMT
            Not After : Sep 22 11:00:10 2026 GMT
        Subject: CN=770949ef66dbf596c563e17e5bec2651f8bfa5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:9f:50:39:44:ad:ac:52:2c:75:b4:3d:17:
                    a3:c2:c3:d7:45:d2:5d:b4:eb:3b:66:57:1d:ea:65:
                    8d:70:ed:9d:b3:11:df:b2:37:e1:89:61:34:22:a1:
                    6c:c9:54:4b:e6:4e:50:19:38:91:56:82:33:80:3d:
                    49:21:67:47:68:18:5e:0b:de:85:0c:f8:5d:1b:c9:
                    68:df:35:d2:e3:a2:b7:87:de:fd:eb:3d:6c:76:19:
                    59:4a:cf:40:7a:3d:a0:28:6a:9d:43:05:bc:42:46:
                    85:0d:b7:f5:26:7f:62:6e:09:3f:00:c3:0a:72:f9:
                    17:d8:72:95:e9:3c:02:18:27:c3:80:61:15:9f:f7:
                    29:ab:ab:29:75:1d:8a:48:40:36:3c:f6:a7:4d:07:
                    e2:4d:12:34:fe:53:ee:70:1b:a1:12:d6:6c:ea:67:
                    83:c9:2e:44:cf:07:03:61:9a:90:33:fe:10:46:4b:
                    b8:9f:ed:89:bb:2f:20:d2:3e:b8:97:39:1f:72:01:
                    54:5e:15:ed:de:ed:92:78:c7:0d:75:a8:61:f5:19:
                    0a:53:ec:90:68:89:20:5c:90:e7:0f:df:6a:a8:2f:
                    ca:27:21:a2:e5:92:26:71:fe:ed:d7:ea:10:aa:cb:
                    44:b2:ba:9c:59:90:e6:45:ee:ce:3b:58:d3:02:b3:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:49:EF:66:DB:F5:96:C5:63:E1:7E:5B:EC:26:51:F8:BF:A5:BC
            X509v3 Authority Key Identifier:
                keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:dc:40:43:b0:0d:8c:6b:12:cd:03:c5:e4:56:66:33:9e:
         0c:4c:55:64:71:60:71:af:65:24:dc:28:8f:dd:87:c0:bc:53:
         86:6d:65:f1:80:c7:b5:c0:51:00:9a:bb:b3:09:f1:d2:7f:c7:
         35:3f:47:7d:5e:a3:4e:e8:e5:a5:fe:5e:12:e2:f2:e3:5f:61:
         82:6b:6c:b9:e0:88:8c:7d:3f:b7:a9:96:53:da:33:a2:16:2a:
         9a:41:61:08:ce:1b:3e:84:d8:a8:5a:63:eb:57:c0:a2:e3:2c:
         a4:b1:9d:1b:8e:8c:8e:5b:b4:86:1d:94:35:1a:2c:02:e1:3c:
         06:95:07:61:69:00:2c:cb:f6:a3:c5:a8:9b:28:77:21:54:d5:
         cb:94:d2:63:52:1e:14:e7:1c:c7:27:65:d4:10:01:0d:2f:c5:
         06:3c:17:2a:b6:2e:8f:ab:59:bd:41:9f:2e:e3:4f:df:af:5b:
         c0:07:50:7b:8d:62:49:a6:80:af:76:1e:6e:1b:8e:11:e7:ed:
         3f:2e:b2:8b:0f:1d:a8:83:6b:0a:7f:cd:34:bb:b1:2e:b9:59:
         a2:fe:c5:18:2e:0f:be:99:09:ff:8f:b6:0b:62:7e:bd:ef:ec:
         1d:36:53:b4:ac:78:50:5a:96:62:15:c6:21:2f:1e:e0:0b:e0:
         ea:4b:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:01 2026 by rpki-client