Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          4xemmhISoDzwRA/U9SA7YrKVZl5EfHVoMJhr8L3UeTA=
Subject key identifier:   38:9A:B4:66:32:7D:64:F0:14:01:DE:BF:60:B0:40:BA:8A:04:46:14
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       01A0D83C0D03CD236B7B7CD1ADF1BBDB7934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 11:03:29 +0000
Manifest this update:     Fri 25 Sep 2026 11:03:29 +0000
Manifest next update:     Sat 26 Sep 2026 11:03:29 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: Q6ONOk06l4iNEzCIXo2itOpSc/H8Jh++qXEYlQZtMn0=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: klEMb23dXP9uu-TDOiKli7hNty8.roa (hash: FLiEWfLtfUugEAipWZ3eK7tJPfoBV08kfh4jDSGYtIY=)
                          6: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 11:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3c:0d:03:cd:23:6b:7b:7c:d1:ad:f1:bb:db:79:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Sep 25 11:03:29 2026 GMT
            Not After : Sep 26 11:03:29 2026 GMT
        Subject: CN=389ab466327d64f01401debf60b040ba8a044614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:7e:57:ca:38:53:0d:97:c8:99:6f:79:25:
                    0a:07:9e:3f:bc:95:07:d6:8b:8c:e5:b7:ea:82:01:
                    56:e3:78:0e:ac:37:c3:ba:82:80:32:57:cb:40:a1:
                    87:5f:60:8c:9b:41:c7:4d:4a:d4:70:d5:e4:bc:06:
                    87:35:1b:f0:46:f7:4b:97:c2:13:e4:04:66:99:72:
                    75:d1:22:f2:9a:b9:93:a8:4d:f0:3d:f6:fc:89:53:
                    9d:77:98:5d:f5:5f:53:1a:91:99:11:b8:06:01:0c:
                    9e:ab:05:aa:69:a8:76:c8:59:b9:ae:cf:74:eb:0d:
                    0c:80:2b:71:71:3c:8c:da:80:ee:a1:2c:2a:62:ed:
                    d8:3a:9b:25:dc:a0:86:81:46:61:18:3e:9a:1c:2b:
                    01:98:3b:1b:92:50:d5:1e:96:b8:94:08:10:2e:f2:
                    e7:e9:97:40:12:ae:01:5b:68:78:c5:f4:c4:8e:d7:
                    46:28:53:61:ff:7d:19:9d:0e:93:86:a8:d1:bf:c3:
                    04:99:0e:9d:ed:46:8a:5a:0b:d5:61:78:7e:33:49:
                    d9:2d:b6:3c:34:79:74:cf:d8:32:e2:5e:da:1d:67:
                    64:f0:23:7e:c5:ab:0a:b6:e1:1b:e5:69:b9:ee:ba:
                    b9:be:0b:92:f6:19:44:e3:81:4e:a6:f5:d0:76:a3:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:B4:66:32:7D:64:F0:14:01:DE:BF:60:B0:40:BA:8A:04:46:14
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:13:bc:be:38:10:73:18:10:06:57:8f:7e:b1:59:65:34:b2:
         a0:53:82:7d:fc:74:97:d3:78:c1:e6:73:43:bd:aa:7a:4a:d6:
         a4:f5:e0:a0:d1:77:36:91:56:67:45:0b:e0:81:e9:de:66:10:
         e8:54:99:3c:a4:a7:c8:b4:54:08:49:a7:38:98:71:f1:48:48:
         09:21:07:7e:6f:e4:f1:ba:b7:42:3e:46:92:35:ee:e4:a9:cb:
         09:0a:b1:c2:07:11:14:f6:1c:66:03:7a:8c:ab:a7:52:41:70:
         df:e9:65:98:a9:b6:92:65:6f:ed:d4:a1:37:f0:f6:7d:48:10:
         92:c6:3e:39:04:9b:04:d9:16:6d:3b:9c:13:f4:61:c6:78:cf:
         71:ed:9a:5e:fe:8c:ac:60:eb:19:9e:67:9b:01:b9:36:35:75:
         e5:65:6f:85:2b:7f:26:2d:ba:f4:da:25:48:ce:df:74:54:a0:
         71:cd:28:01:f3:37:b5:18:ce:7f:07:81:cc:35:67:58:28:23:
         9e:70:25:a7:88:85:7d:75:e6:94:d9:36:17:7a:3a:51:2e:df:
         8a:14:0b:cb:3a:60:fd:4e:79:c5:bd:8e:9b:94:85:94:6d:d4:
         06:b3:7b:d3:b5:3a:01:d1:a9:dc:dd:29:ed:f0:47:a4:f9:13:
         e8:ce:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:23:59 2026 by rpki-client