Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
File:                     iCdfXxLHVuoJSy-iztIXc9aa6JY.mft (raw, json)
Hash identifier:          vlnGnQrQskLrtZ95f2b/EYNZdn8jsSe3tV6Sm0g8zXA=
Subject key identifier:   38:5C:B6:25:C9:FB:AF:13:92:D8:AE:6C:67:E6:07:95:93:18:59:18
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Certificate issuer:       /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial:       01A0C3A0680A2EA292435044A7CC3E92649B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 11:01:04 +0000
Manifest this update:     Mon 21 Sep 2026 11:01:04 +0000
Manifest next update:     Tue 22 Sep 2026 11:01:04 +0000
Files and hashes:         1: 19Dn9N6dl9oiU6iQGyDjjizh__o.asa (hash: W0qSPQc+lFKsKuaIgxN97z+JpoLSaaJRLrE264hXbQM=)
                          2: B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa (hash: AH8e1SFxP7mwVEgpLVC0rJF7pyGIB69p63iAMsbetvc=)
                          3: CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa (hash: vpk8KShRqahOvvvQQ5KHNcIKAntGCFPSkwmHDUnFRTk=)
                          4: iCdfXxLHVuoJSy-iztIXc9aa6JY.crl (hash: Jo0yU6a30kCL8v/5mNc0M+RJKnN6WbfmCs4oiCnbKMQ=)
                          5: wRv9fBJmvre20xMdwIU9laC5e10.roa (hash: PtCj3wS6CUonUfFeQe3p1omlsL2UMohFubS3Dus/vvU=)
                          6: zSxXam422uceBcDgVTQwKML7HzQ.roa (hash: GpllbBF29LkUDq+WEWLkHp5EqGZXeUURJtYTQzOT19Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:68:0a:2e:a2:92:43:50:44:a7:cc:3e:92:64:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
        Validity
            Not Before: Sep 21 11:01:04 2026 GMT
            Not After : Sep 22 11:01:04 2026 GMT
        Subject: CN=385cb625c9fbaf1392d8ae6c67e6079593185918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:5c:88:72:0b:91:8f:73:44:1e:88:55:09:
                    0d:24:dc:7f:ab:25:17:cb:14:6e:2d:0f:14:db:1c:
                    c6:c2:f9:d6:eb:6a:b3:3f:03:7e:63:b8:89:71:93:
                    e1:af:1e:37:41:8b:bb:81:4a:1c:06:8b:e0:40:54:
                    86:a7:fd:c1:32:46:13:d8:7b:54:29:a9:a4:96:46:
                    74:f7:0a:a8:29:79:5c:4b:4f:c5:e2:1d:ec:fb:46:
                    5c:b6:22:e2:e4:86:e0:9a:ef:45:7b:84:06:86:29:
                    e7:28:26:6a:5e:2e:c3:0c:88:10:3d:f9:b1:f6:26:
                    96:a1:53:1e:e6:57:fa:fc:72:77:8b:5c:70:88:16:
                    61:a3:30:ab:32:fe:8e:e9:65:12:e3:b6:e1:8f:6c:
                    c6:74:ea:4f:69:01:a6:cd:fd:f1:58:7f:ca:de:ab:
                    a2:91:e3:fb:63:ec:a2:0f:73:cf:4b:18:0d:7a:26:
                    21:bd:36:a4:f3:16:cf:f0:d6:89:e9:1a:8e:56:72:
                    2d:ac:c5:11:68:ac:85:34:45:e4:50:09:cc:a2:cc:
                    6d:7c:5c:63:ea:1f:48:23:9c:b3:b0:4a:55:c9:48:
                    2c:17:a4:8c:9d:93:46:db:37:91:72:32:39:c2:0a:
                    96:5a:ca:58:90:bc:47:ac:ac:d8:7d:2d:ef:4c:da:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:B6:25:C9:FB:AF:13:92:D8:AE:6C:67:E6:07:95:93:18:59:18
            X509v3 Authority Key Identifier:
                keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:87:12:fc:26:68:96:c4:1a:62:03:89:c5:9e:14:33:9f:
         fd:52:32:67:ef:d0:f2:c0:21:b9:f8:68:3b:47:42:3a:a5:eb:
         bf:6c:86:d0:68:60:55:51:4c:50:f5:98:6b:29:4c:30:17:66:
         24:4a:6d:1b:41:8d:06:25:15:b1:35:f2:db:23:b0:d2:5c:52:
         e8:be:64:72:8a:c2:07:83:fa:a1:46:32:80:7f:9a:54:e2:e0:
         09:16:65:29:75:10:90:b5:c0:a0:06:c7:fe:43:de:bf:b9:05:
         ee:cd:86:57:bd:7f:72:43:64:d9:6d:2c:25:12:25:c9:6c:6c:
         80:53:70:19:8e:0f:2f:2a:e9:c3:75:97:19:cf:85:22:e6:50:
         13:9f:be:8c:1a:79:8d:cf:67:7c:13:32:33:89:53:ef:ce:84:
         b6:08:38:1c:de:84:26:a1:75:45:76:fc:ff:ca:1d:90:cc:1e:
         fc:56:61:b8:fe:bc:d6:9d:65:34:5c:e7:81:d8:00:63:ad:8a:
         11:43:23:98:bd:e5:af:93:a0:08:6b:ee:6d:fa:a2:0d:78:52:
         90:c6:a1:94:e9:43:a0:5b:b8:28:69:d9:cf:59:6f:9f:09:9c:
         e6:16:ec:f3:66:53:66:2a:4c:fc:7e:26:e9:01:ee:48:79:40:
         62:67:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:22 2026 by rpki-client