Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft
File:                     1iak9e5xTQtEXBumEMv5sVr0Zxw.mft (raw, json)
Hash identifier:          iADSHcKh3E8RdD5sexPPpagJCXcf5Z23Qq1uxXi9w58=
Subject key identifier:   A0:21:9B:26:3D:FF:39:9F:90:DF:6E:A0:B9:08:27:17:CD:17:38:EE
Authority key identifier: D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C
Certificate issuer:       /CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
Certificate serial:       01A0C09EB87794FAC8D5217DADA3EB92E960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft
Manifest number:          44
Signing time:             Sun 20 Sep 2026 21:00:22 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:22 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:22 +0000
Files and hashes:         1: 1iak9e5xTQtEXBumEMv5sVr0Zxw.crl (hash: yZwlUs9xY7Mct2wxERcG/PcHb+16LtOQcnXTqmXQMJU=)
                          2: UndtBE71rgFq3VSP56Yl4Zum6UE.roa (hash: XSw+U9DSF8M8zGn1H59NzXKmpA+1JDfRKuxfQGuYCAE=)
                          3: Z7awbOu3jb0D33lIfgYf7h7mP_A.roa (hash: PNsk8h/fACfugNBmH6Czdc0G0GsLs3SVC6pLNJJc6Rc=)
                          4: lPHyWeYU-MMSNpmCyj0tSFAJ__c.asa (hash: qSuKvazHBnyctn1mpG4zSwp0bizpM/CExGf+j2UfeNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:b8:77:94:fa:c8:d5:21:7d:ad:a3:eb:92:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
        Validity
            Not Before: Sep 20 21:00:22 2026 GMT
            Not After : Sep 21 21:00:22 2026 GMT
        Subject: CN=a0219b263dff399f90df6ea0b9082717cd1738ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:a0:09:35:cf:da:ae:c7:44:ec:9e:72:28:
                    a1:5d:3e:9b:72:cf:c2:65:37:ac:6f:06:25:dc:66:
                    c1:33:87:f9:c1:d9:2c:d8:05:94:3f:f5:69:01:5a:
                    25:66:7b:97:44:e4:67:70:00:e8:8c:f8:46:53:cb:
                    d1:3e:fb:9a:9c:c6:ec:49:06:e8:2a:e5:b9:8a:70:
                    f2:b9:01:aa:d2:13:58:02:52:4f:e5:e4:63:59:b1:
                    14:ee:d5:53:2b:42:39:b7:f4:c4:b7:34:7b:4f:b4:
                    89:b8:69:9b:07:34:38:b3:97:68:90:36:fa:2a:dd:
                    fc:1d:da:ec:62:f6:84:5f:7f:67:dd:13:49:cd:75:
                    87:18:ed:89:78:23:2c:64:2d:b2:54:c3:8b:32:15:
                    bf:84:ab:a5:ca:87:2c:30:66:5a:d5:66:b4:5f:16:
                    8d:b7:d2:fb:37:47:af:55:06:6a:85:27:ad:10:8b:
                    cb:fc:34:f6:21:73:98:41:34:57:d1:8f:3f:3e:27:
                    9a:20:bb:6c:9c:8c:16:1a:42:65:59:d6:d2:42:e6:
                    f4:07:36:5a:09:36:36:83:09:d0:bf:36:d8:f6:36:
                    71:29:3b:e3:f2:71:53:72:93:aa:ad:a8:94:d4:2e:
                    db:2e:e5:21:0d:10:99:6f:2c:9a:45:4f:d5:67:21:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:21:9B:26:3D:FF:39:9F:90:DF:6E:A0:B9:08:27:17:CD:17:38:EE
            X509v3 Authority Key Identifier:
                keyid:D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:df:ed:8e:3c:63:dc:63:f4:6f:7b:a1:04:06:9e:b3:c8:5f:
         05:83:ac:58:ce:1b:0b:54:42:63:18:97:ec:cf:45:89:67:f2:
         80:01:06:ca:65:ad:ba:f1:cf:d1:0c:49:7a:2f:d1:db:a7:1a:
         4c:94:5b:c7:51:1f:44:93:40:4f:81:60:98:6e:73:61:aa:d5:
         c6:51:f2:a5:9a:3f:68:9c:69:40:b1:7c:4e:aa:03:3f:1b:ce:
         32:19:42:a3:a8:c7:b1:c0:7d:03:4d:73:91:53:da:2e:d6:2a:
         77:94:05:46:fd:5a:d5:f4:63:a6:e3:00:41:97:73:cc:38:85:
         b5:23:51:17:4e:dc:37:53:d4:19:36:69:e2:a1:b2:74:8b:eb:
         04:3a:a6:81:7f:f8:94:59:da:b6:2d:fa:fa:4d:8e:fd:a3:a8:
         b8:b4:8e:7a:04:4c:59:70:74:7b:c3:75:33:40:0c:8c:8b:71:
         49:d0:ba:09:0c:b3:8d:78:3b:a3:e8:20:40:10:15:73:2e:a6:
         dc:06:46:f6:fa:fe:f9:d0:02:87:63:08:a8:e4:3b:27:d1:c9:
         c7:99:7e:13:28:1c:cf:af:5e:cb:35:c4:a8:72:83:d5:e3:16:
         32:83:1f:d1:f8:29:78:f5:01:25:53:b7:8b:f5:cb:38:39:d0:
         ee:e9:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:43 2026 by rpki-client