Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          KS5zeJvw053FI8Hl88a3ZqKmNT1iEIIMczbS0v9yLSw=
Subject key identifier:   D9:B6:F4:F0:BD:28:D5:C3:6A:86:F2:23:DA:F9:72:9F:4B:90:95:6F
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       01A0C9D88DDA4CFAE8D1220B22AD7C7CE27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          08F6
Signing time:             Tue 22 Sep 2026 16:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:07 +0000
Files and hashes:         1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: Ee/gq5NV7BUY8ZAb2vnilTJjKSf7kh6o/BmAa9pDEMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:8d:da:4c:fa:e8:d1:22:0b:22:ad:7c:7c:e2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Sep 22 16:00:07 2026 GMT
            Not After : Sep 23 16:00:07 2026 GMT
        Subject: CN=d9b6f4f0bd28d5c36a86f223daf9729f4b90956f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:68:71:ec:db:98:ed:2b:9d:d3:ef:eb:cf:
                    3a:e6:c0:53:67:2d:07:59:90:2e:a8:66:c4:df:06:
                    19:20:fc:70:a9:1d:32:19:57:aa:15:73:3f:d0:1f:
                    4d:5a:f1:28:6a:2b:87:b6:07:0a:2b:95:7f:a6:99:
                    e8:ac:5e:0b:75:92:29:4b:16:31:dc:50:c9:57:6c:
                    11:d1:fc:0d:a5:bd:96:01:78:40:2d:84:ef:b7:a0:
                    81:bd:80:d5:ad:fa:18:da:71:34:d7:de:73:7c:dc:
                    dc:02:8f:8c:cd:8b:96:f5:8b:8f:99:6d:46:ff:bc:
                    47:17:08:60:f8:d3:82:8c:9a:c8:59:0a:d8:5b:dc:
                    50:a1:e7:0f:a5:f7:f5:3e:07:81:e8:50:3c:25:e3:
                    19:e2:f8:e1:d6:97:70:fe:af:71:51:af:59:3c:9b:
                    80:6d:61:29:8e:e2:f7:bc:66:72:be:81:77:d6:50:
                    7e:40:32:98:f8:90:2b:d2:d3:80:0d:2b:b9:1a:5c:
                    06:21:4d:8e:5d:85:cf:09:21:88:73:d9:70:be:a7:
                    1a:d2:ad:02:bb:b4:51:ec:4b:52:fa:66:73:1f:52:
                    42:5b:4c:61:ce:cf:26:88:65:f1:3c:e0:df:64:bc:
                    21:48:39:d4:b5:15:59:58:6e:64:31:d2:39:23:2f:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B6:F4:F0:BD:28:D5:C3:6A:86:F2:23:DA:F9:72:9F:4B:90:95:6F
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:34:04:87:60:aa:a0:a3:05:14:70:74:59:bc:31:83:73:
         6f:58:6a:1b:11:0e:9f:5a:d8:ff:dd:18:49:36:4e:0b:5f:2b:
         d9:e3:1e:9e:fd:5b:37:2f:7e:e8:c3:4e:c7:b7:e5:13:e8:24:
         52:dd:f3:55:87:2b:af:04:b2:9a:a9:05:3b:4b:e2:3c:3c:db:
         eb:dd:62:48:f0:53:f7:6c:32:b7:7c:1d:13:53:e3:19:cf:02:
         dd:36:f9:fe:ea:d6:86:67:a2:78:de:18:52:01:f3:1a:e3:ca:
         19:91:da:5e:85:99:ea:e3:18:77:9d:58:02:31:a7:b7:e7:f4:
         d7:d0:82:ba:35:f4:91:64:ce:0f:39:08:17:f4:96:c2:fe:b0:
         52:bd:6a:fa:01:9a:73:46:aa:df:07:ba:80:df:8d:9d:49:aa:
         bd:28:7d:69:32:94:a3:5b:34:04:35:6a:c7:05:26:ad:b2:e4:
         f2:33:4f:ca:b6:c3:56:c1:ad:e2:a0:02:32:e0:8b:c7:82:24:
         82:ad:bb:9b:da:8f:b5:76:6f:59:3b:92:92:08:81:3d:92:af:
         2b:67:e4:79:33:8a:38:a8:cb:c6:47:33:ac:d3:c1:85:f8:68:
         ba:f8:b9:86:a9:72:80:be:fa:48:3a:1b:be:80:43:be:94:32:
         01:e9:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:52 2026 by rpki-client