Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          tRxVjFs04qbs07llPH6gW7YEy+k9LT/IqOXtX1nlV+M=
Subject key identifier:   66:B4:99:9F:C6:70:26:93:27:18:C0:55:BE:0D:F6:FE:0B:C9:B6:10
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       01A0C96B7C230F9885B8909992156BC1A978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          1A77
Signing time:             Tue 22 Sep 2026 14:00:59 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:59 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:59 +0000
Files and hashes:         1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
                          2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
                          3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
                          4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
                          5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: Lj6cj9GS48CKA8jg0VX38ZvguJtZeAOKHow7QTdVrbk=)
                          7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
                          8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
                          9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
                          10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
                          11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
                          12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
                          13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
                          14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
                          15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
                          16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
                          17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
                          18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
                          19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
                          20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6b:7c:23:0f:98:85:b8:90:99:92:15:6b:c1:a9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Sep 22 14:00:59 2026 GMT
            Not After : Sep 23 14:00:59 2026 GMT
        Subject: CN=66b4999fc67026932718c055be0df6fe0bc9b610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:41:a5:19:ff:7c:3c:e9:1e:81:cc:1b:fa:d8:
                    18:d5:b1:fc:6a:bb:ac:b0:72:d3:47:41:3b:73:12:
                    77:1c:4c:58:e8:7c:20:14:53:56:39:82:15:77:f2:
                    79:6f:9f:ac:57:38:47:05:2c:84:58:d7:50:bd:8c:
                    36:d7:f7:e1:99:d3:91:4d:a5:67:d1:9b:d0:6c:80:
                    97:fe:35:ed:51:fe:da:50:45:e2:1c:0c:17:47:d1:
                    13:99:2a:9a:6c:f4:dd:19:bb:25:78:b5:26:24:5a:
                    18:c1:ab:cf:fc:ac:36:a4:ea:ee:eb:97:c7:25:f7:
                    c9:a9:04:22:8b:d9:88:12:0b:f7:e3:a8:67:74:c0:
                    ee:4c:5e:dc:f8:68:43:56:cb:fb:6e:f8:65:b2:ab:
                    e5:5f:66:30:7e:b7:48:72:60:bc:1b:8e:86:75:63:
                    1f:40:c6:d0:e4:84:85:a8:99:d5:51:87:f9:47:15:
                    a6:63:3b:78:de:52:41:eb:cd:3a:50:e3:a3:b3:38:
                    80:bb:51:1e:66:87:48:3d:0f:4e:86:c5:b9:6a:73:
                    bd:31:4f:f1:1d:e6:c9:95:83:ab:00:89:5d:e8:71:
                    c8:18:a4:e0:fc:7f:af:66:fa:4e:33:f1:9a:28:e0:
                    e5:cd:58:28:04:56:46:4c:ab:4b:04:9f:94:9a:68:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:99:9F:C6:70:26:93:27:18:C0:55:BE:0D:F6:FE:0B:C9:B6:10
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:fd:dc:88:22:54:b3:54:6c:46:8d:c4:0d:3b:9c:a2:5d:
         c5:98:af:63:63:9b:4a:a1:e8:7f:45:42:94:56:3e:60:fa:42:
         b6:88:ef:2e:40:c5:dc:d6:6b:a0:4f:90:4d:93:e3:16:3d:75:
         d3:e6:2d:45:51:af:95:31:4b:d4:ba:a5:f0:26:f1:e8:e0:73:
         ca:cf:17:ca:23:1e:fa:24:6b:3a:6a:15:68:2f:72:65:2b:e7:
         fc:5c:a8:d3:f6:b6:a4:bd:65:6e:e4:3a:93:51:56:f2:f5:f7:
         eb:5f:ae:40:d7:53:34:a5:5d:ed:d5:a0:37:ca:c3:d3:92:24:
         09:66:b1:aa:62:7d:fe:be:a8:7e:b0:24:66:13:25:9f:4a:be:
         0f:ef:2b:92:96:9a:ea:02:d7:df:45:01:9e:73:af:77:d8:75:
         92:d5:d4:76:dd:b7:03:db:0a:3e:dd:dc:2b:68:29:fe:01:7a:
         57:0b:94:35:68:c5:3c:90:be:31:68:5e:02:2d:0e:57:38:9a:
         fb:ed:83:68:34:e7:e1:07:2d:46:07:30:7e:47:c1:84:ef:f7:
         f2:02:52:bf:a7:cd:f9:49:7b:b6:ad:76:e1:d6:7a:d9:67:00:
         be:09:95:92:15:af:bc:14:6c:84:a7:f4:a1:56:82:77:0d:9f:
         40:3f:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:04 2026 by rpki-client