Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          LKEZog+WPT/BZkdR2EoonagRH8mIQinYmYATdIOGfVs=
Subject key identifier:   BA:4D:D7:66:17:29:A0:AE:8B:CC:BE:B4:E8:A7:E0:93:16:1E:F4:2E
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       01A0CB2272045F868125F724D5A29E847C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 22:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:27 +0000
Files and hashes:         1: 3ysBshLGfFUkO4R9WFntyTKDLJg.roa (hash: o/4zJLtevorj8ig3Iu9MQ3MlmidPOIfdoU+Dc49NbUo=)
                          2: EbE_4FlcTeGEtF61cdD338tmF78.roa (hash: UyLGRhRXp3uuZDt1rn1PuLux78VD/m3miAA3O+vEphU=)
                          3: KrSk2jRU2oEHfGvgx800e5GKxhA.roa (hash: Kyx+62+FYOcUJqo2tHJtaKxWwFEQu2NCl98mkWMufAs=)
                          4: RMVjby5XmGEGFEWAsZ-rMJCgUuI.roa (hash: 8V+ZY4rClYbDacZGSf5P4gTGWDrq9UPHV6tcofi/O1Q=)
                          5: TQRQUvnH1PO5qcuLM2kiPL408f4.roa (hash: 1Z+GYULrtYzOcdfSIr9RZ1XILJVYjGdvmENAEPPng/M=)
                          6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: 4v2QQc6s5EGBVSebft7vuCr5apDJ549XTqVog7fO8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:72:04:5f:86:81:25:f7:24:d5:a2:9e:84:7c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Sep 22 22:00:27 2026 GMT
            Not After : Sep 23 22:00:27 2026 GMT
        Subject: CN=ba4dd7661729a0ae8bccbeb4e8a7e093161ef42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:18:62:f9:40:97:02:81:e0:a2:96:29:38:
                    f6:4e:f6:d3:0e:4a:c9:c0:74:39:5c:f1:17:3b:a4:
                    b2:95:f1:be:f3:a9:33:42:f5:35:04:8c:b8:aa:27:
                    92:91:d4:0e:d5:31:6f:8a:ab:0f:18:38:a2:3e:27:
                    02:f2:05:74:40:f3:43:81:a9:97:bf:00:1b:f3:eb:
                    43:32:e0:83:26:37:88:35:42:86:cb:d4:c7:36:c9:
                    51:eb:c4:e9:94:79:96:3b:aa:05:4e:16:4c:09:49:
                    fe:a4:00:8e:f4:67:3c:80:8a:03:3b:64:50:a6:ec:
                    e2:c6:bb:20:63:d4:b1:eb:c3:96:12:33:f6:6f:7a:
                    8d:3b:6a:76:85:a9:bc:c1:aa:97:ed:6f:fa:4e:92:
                    29:31:76:5a:1e:56:e5:6d:83:7e:9c:18:9e:da:16:
                    86:ba:66:d0:36:68:0a:df:8d:f7:e6:45:2d:ef:14:
                    a7:39:de:d0:70:2c:85:13:22:ec:8a:d0:09:9b:ab:
                    a6:a8:10:5c:6e:b2:e7:7f:f7:17:4e:e2:77:29:7a:
                    b1:3d:4d:27:0f:67:51:3d:b0:7f:98:41:d2:c2:57:
                    d1:42:19:ec:0d:a5:12:c7:14:a8:8b:e8:16:a9:9c:
                    62:c8:94:7a:5c:5d:24:20:4f:d9:41:56:b4:bd:82:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:D7:66:17:29:A0:AE:8B:CC:BE:B4:E8:A7:E0:93:16:1E:F4:2E
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f5:46:ba:7c:67:35:e2:89:40:e7:60:1d:d5:98:6b:af:6e:
         c9:f4:68:8c:27:4e:df:33:87:5b:91:d0:1f:23:11:4f:fe:32:
         8b:71:b3:44:96:70:11:fd:ff:7a:84:93:db:ff:fd:36:42:67:
         83:e0:23:12:c0:04:12:de:c0:fa:d0:70:cb:d9:99:4d:a0:a9:
         11:b9:16:31:90:ef:10:7c:31:21:4b:a1:52:9d:26:4b:a0:8b:
         bd:bc:03:5a:99:66:ec:7e:88:87:d5:3f:ff:6d:a4:88:fd:fc:
         d8:f6:69:52:55:79:26:60:b7:44:d4:e7:95:ab:b4:01:7a:c8:
         71:f1:38:68:ad:e1:b9:00:23:c4:9c:0b:0c:95:11:d6:14:3a:
         33:da:e7:6a:10:e5:b5:aa:83:ba:62:da:45:19:80:e9:76:8f:
         bd:cb:9a:8c:3b:c4:d8:6e:6b:00:80:e5:36:59:9a:8b:de:25:
         03:3b:e2:70:c5:6e:37:d6:8d:d7:8a:a6:9a:37:e7:e5:a0:b8:
         d2:d3:ce:2d:82:4f:64:8c:17:b2:ad:d1:1a:9c:d5:f5:9e:9d:
         4b:d2:28:32:4a:5c:72:61:03:20:c0:8b:e9:41:2f:53:6c:ed:
         ad:47:de:60:88:6d:cc:ba:db:c8:5e:6f:57:6e:af:2b:d6:e6:
         56:99:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:40:38 2026 by rpki-client