Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
File:                     G7P94IsmaTklYxHhuyyD47IBmqA.mft (raw, json)
Hash identifier:          wiSV1+MuciVGEluDlq7MGZFkY5T0yH9k6jVCfHi+2P0=
Subject key identifier:   F0:59:88:8B:A3:B8:E3:8C:2A:04:C0:92:6F:EF:B3:B3:4A:F6:95:60
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Certificate issuer:       /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial:       01A0DD6079B7C35639F492A25273720F3ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
Manifest number:          7E
Signing time:             Sat 26 Sep 2026 11:01:22 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:22 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:22 +0000
Files and hashes:         1: B2hGT1eFkagIo84BoxNvaIDMVIA.roa (hash: 573/CB1s6/sMNo4YjJ1CvHqqPGc0rLf2pK2SmcbOPLw=)
                          2: DmH5gRDpFfiT_eE74zyVFAM6RvE.roa (hash: Ln0A2hJEipplcNI/2hrqaUeztAp4seGSTDWnqMRb1zE=)
                          3: G7P94IsmaTklYxHhuyyD47IBmqA.crl (hash: oDt1YNBlcJn/z6nyEgqr76YG+u2iEep1gGJmHr3199Q=)
                          4: RGj9rL1wMLQwVhDUkBrVStUmsnk.roa (hash: MikgO3NO0X9g8TO+4NRN4OmI0IeK7x+Z+Rwx4lGXqJA=)
                          5: eQm7ECQvHhq1dyKk8vMd04vqJAc.roa (hash: CmWXX4RJjI+TQOnk4iGUT3yi0OCbnJ7wMFgBAsopRvw=)
                          6: g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa (hash: AFVhMc4KzVQiDDONWoVw7yjTSkqbbvsOLoCm0WsRWrk=)
                          7: pj30e_0kadqwjq0L3J55WAoKI8E.roa (hash: 5DdRoX+R76hdeHDFTO1xAik3lfSUfaDcDKvdi+WYi1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:79:b7:c3:56:39:f4:92:a2:52:73:72:0f:3e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
        Validity
            Not Before: Sep 26 11:01:22 2026 GMT
            Not After : Sep 27 11:01:22 2026 GMT
        Subject: CN=f059888ba3b8e38c2a04c0926fefb3b34af69560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:28:18:dc:8e:2c:85:bd:e9:1d:05:28:23:
                    c7:7b:69:f6:ad:6c:9a:3a:21:91:11:28:a0:f3:ae:
                    a3:7e:1b:0d:de:67:ec:d5:75:f8:71:47:f2:44:12:
                    25:ef:ab:5e:6e:d4:58:c5:24:21:06:90:ac:24:ae:
                    60:6f:df:57:6d:f5:29:b8:1c:b9:f8:d7:48:36:b1:
                    83:71:8b:f2:c3:88:c7:38:3d:c5:3e:97:3e:5c:96:
                    b3:c0:0c:c7:3e:36:f9:18:69:78:b6:cc:82:ec:60:
                    db:ce:3e:3d:e2:ff:7a:d5:4b:f9:11:54:9e:ab:d7:
                    15:66:c2:0b:f5:0a:8b:37:d6:49:a2:ff:85:24:8b:
                    36:93:44:f2:60:b9:2c:b0:83:a1:e2:68:29:80:54:
                    78:fa:3a:29:78:a0:f2:b9:00:80:aa:44:a4:83:fe:
                    30:c3:c6:af:94:08:4e:8b:53:be:9f:3a:ab:06:e1:
                    ab:ea:6e:5f:57:1d:82:d1:d9:2a:ee:b1:ca:ef:93:
                    98:e6:b9:de:3a:16:33:53:a7:72:e1:a0:35:95:03:
                    a2:48:f4:e4:9a:20:07:6b:94:60:72:4e:67:fe:7d:
                    19:e0:6f:90:92:2b:82:b1:a8:43:bf:a0:02:8c:ce:
                    d9:3c:c2:3c:7b:c3:e9:bc:b3:fd:97:29:76:36:51:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:88:8B:A3:B8:E3:8C:2A:04:C0:92:6F:EF:B3:B3:4A:F6:95:60
            X509v3 Authority Key Identifier:
                keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:60:b7:bb:1b:f3:60:49:01:02:51:46:f1:5d:14:bb:24:
         bf:f7:c1:34:4b:e8:6e:f4:c4:be:e0:7a:6c:12:22:cd:49:57:
         25:34:2b:7c:82:65:fe:d5:af:5e:38:05:ff:ae:c4:0d:ad:88:
         c1:b2:6e:d5:21:6c:af:55:af:bb:83:3c:11:d8:42:bb:16:05:
         89:60:d3:f3:9a:fe:c6:4c:31:0f:56:14:61:ff:71:27:8c:58:
         fb:c7:ef:8c:c4:0f:6f:ea:55:f9:84:d4:72:92:3e:39:86:e7:
         18:64:79:ea:8d:1a:5f:25:b9:44:9e:df:22:1d:02:8a:ae:0d:
         52:c4:bb:39:d0:c1:e3:e9:3a:29:90:9e:c4:8f:71:fc:9d:f3:
         29:ea:20:a9:54:8c:8d:a7:d3:ce:c7:db:11:e5:7c:94:6d:9e:
         f2:bf:bd:59:9f:32:fe:19:a8:62:81:a2:ac:85:d4:4b:ed:f7:
         30:0c:fb:ac:45:cd:ad:7b:20:9a:20:fd:6e:54:bf:d3:a5:21:
         31:40:d2:07:6e:aa:42:1d:5b:9c:62:c0:b6:55:8c:5a:06:f7:
         57:6a:ef:e1:58:47:47:b3:d9:40:d6:e9:47:53:5d:70:05:af:
         0c:f4:56:68:3a:51:17:06:f8:58:eb:5d:ac:48:9b:3f:ff:ac:
         84:19:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:16:28 2026 by rpki-client