Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File:                     isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier:          IlIRUzP22UqfrjyiaSkr5ldLWK6Co7Koz/kjXddGIKQ=
Subject key identifier:   9A:9D:DA:33:79:7E:19:51:31:D8:A5:55:95:17:1F:4D:78:34:0F:C5
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer:       /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial:       01A131B4A8AFC8155762F1A5255B6E093991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number:          1785
Signing time:             Mon 12 Oct 2026 20:01:25 +0000
Manifest this update:     Mon 12 Oct 2026 20:01:25 +0000
Manifest next update:     Tue 13 Oct 2026 20:01:25 +0000
Files and hashes:         1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: m0RDcyGM5YGzItX+ZQE+AEYRK3XEnUE/rbf0VsbXr/k=)
                          2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:a8:af:c8:15:57:62:f1:a5:25:5b:6e:09:39:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
        Validity
            Not Before: Oct 12 20:01:25 2026 GMT
            Not After : Oct 13 20:01:25 2026 GMT
        Subject: CN=9a9dda33797e195131d8a55595171f4d78340fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:8e:e7:c6:9c:e0:18:ed:37:f4:cd:44:f2:
                    42:85:1c:48:69:85:18:88:d2:10:15:14:1c:2e:8d:
                    b9:32:44:69:fe:ab:5b:ee:46:6c:d1:9d:2f:e3:13:
                    9f:af:f2:28:fc:a2:a5:73:45:b4:9d:3d:d8:95:23:
                    b7:18:b3:ce:a4:af:c3:b5:96:07:48:c5:7a:c5:21:
                    e4:37:6f:61:39:38:21:79:5e:01:34:28:21:4a:d5:
                    c0:7b:be:4d:bd:ae:b6:ea:95:d5:0e:d7:56:fa:ff:
                    29:28:a6:b0:00:a1:88:b9:22:11:ec:a9:bb:7c:be:
                    fe:61:90:a4:73:31:1d:71:ca:4b:b1:e5:93:dc:9b:
                    c8:7f:5b:fa:3e:d1:d4:05:73:a5:fa:f9:4d:bd:c4:
                    a6:d4:bb:96:f0:86:fa:47:f9:8a:80:d8:c8:af:0f:
                    1b:68:7e:e4:75:be:82:1c:0f:e8:6f:77:70:ec:a9:
                    56:4b:dc:9e:bf:20:8c:03:2e:86:2c:8b:dc:99:4c:
                    49:0d:e1:38:84:88:33:1e:e1:e2:ab:bb:58:53:9d:
                    62:6e:50:08:37:90:a0:3d:bc:35:85:5c:61:b5:24:
                    a3:c7:5e:8e:16:fa:92:61:39:8c:58:67:77:41:e3:
                    fe:2b:80:6e:41:7b:60:39:49:ad:3b:14:9a:51:7f:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9D:DA:33:79:7E:19:51:31:D8:A5:55:95:17:1F:4D:78:34:0F:C5
            X509v3 Authority Key Identifier:
                keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:93:6c:34:80:4d:35:72:7b:af:f1:4c:a1:26:1b:00:3e:
         62:ce:b8:1e:c9:af:72:fd:a2:9a:b4:45:58:0f:a5:a9:24:b4:
         bf:eb:6a:f7:54:55:cf:07:90:2c:11:d1:fd:ba:5a:00:25:64:
         e2:c0:54:05:08:08:5b:1f:69:bb:8b:ed:bd:5d:9e:04:e2:05:
         a1:bc:1b:43:6c:41:85:a9:b4:73:27:f0:89:3a:45:f7:06:18:
         16:1b:f2:25:57:18:dc:6c:07:17:a6:91:10:e3:07:a3:c4:ad:
         ef:a7:9f:e5:62:5c:a7:a6:47:97:68:bd:64:b3:27:e8:2a:b0:
         95:78:96:38:a7:25:5c:23:2a:e3:9c:8e:63:ca:8e:90:7e:5c:
         bc:6e:a1:3c:c9:2d:2f:0a:cb:0d:ed:ad:16:c1:96:4a:d1:6d:
         49:4c:d9:61:9a:cb:24:01:81:8f:65:60:f8:29:03:32:13:38:
         99:a7:01:25:69:f1:a6:5e:45:7a:3a:fc:ba:12:6f:0d:7d:9d:
         f4:6c:3a:f1:1d:30:7d:0f:0e:ce:c3:ab:0b:ad:8f:53:66:c4:
         c5:7c:ba:64:4e:f9:9d:71:6a:01:da:c4:7d:a3:b5:9d:77:18:
         65:f6:67:f9:f1:52:4d:af:eb:a1:83:92:26:fd:7d:fb:9f:43:
         c0:85:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:40:32 2026 by rpki-client