Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File:                     i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier:          oHIT9rlD5AyS7mYw5O7yCNLVYjN3Hxe5TNZGvJnJL3U=
Subject key identifier:   F2:6A:59:1A:50:B0:01:53:DD:90:2D:38:92:BB:1D:DE:3A:15:3E:C5
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer:       /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial:       01A112978901226810EF44B756324F6A64B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number:          0593
Signing time:             Tue 06 Oct 2026 19:01:23 +0000
Manifest this update:     Tue 06 Oct 2026 19:01:23 +0000
Manifest next update:     Wed 07 Oct 2026 19:01:23 +0000
Files and hashes:         1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
                          2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: mnOeloPc8VRZgkKUZtrPwrfwkw8uN2Bi70J7CJTvZY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:97:89:01:22:68:10:ef:44:b7:56:32:4f:6a:64:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
        Validity
            Not Before: Oct  6 19:01:23 2026 GMT
            Not After : Oct  7 19:01:23 2026 GMT
        Subject: CN=f26a591a50b00153dd902d3892bb1dde3a153ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:94:cb:34:a7:9a:2d:42:5b:3f:76:de:5e:
                    99:73:ba:7a:10:e5:65:21:99:17:98:36:84:5d:74:
                    8c:b0:10:c1:13:eb:cd:e1:7d:68:71:4a:57:f4:aa:
                    72:0d:5e:ce:9f:73:4c:22:f5:5c:6e:48:e7:34:52:
                    cc:f7:31:fa:93:57:ea:2a:1a:9c:d6:67:00:0f:fb:
                    2d:47:1c:2d:f5:97:2e:4d:d4:c5:0a:75:d4:7c:fa:
                    a2:4b:55:77:f5:bc:8a:94:dc:96:76:e4:71:4e:b7:
                    fa:5d:dd:ef:ac:f4:14:6b:b2:60:66:7a:13:21:fc:
                    04:09:f5:96:ae:2d:08:fe:ca:50:48:4c:fb:12:6a:
                    53:fc:7c:69:fe:bb:d5:ac:7a:57:2a:b9:3c:35:91:
                    97:62:17:32:52:a8:86:74:b1:ba:2b:fe:6f:43:11:
                    8d:39:2b:b3:e7:6d:5f:9c:24:78:ef:a6:10:97:64:
                    8d:cb:49:33:c5:28:ee:28:4e:ac:c5:1d:6a:0d:1b:
                    0d:61:d4:75:79:29:e7:fa:a7:a4:e9:32:2a:9c:38:
                    d6:97:c7:2e:7c:56:67:93:89:42:ab:b3:01:f1:68:
                    b3:27:2d:88:42:05:5d:95:93:8a:b3:c7:b5:21:2f:
                    2d:93:cc:c3:7f:56:fe:93:ac:fc:59:df:69:f7:4b:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6A:59:1A:50:B0:01:53:DD:90:2D:38:92:BB:1D:DE:3A:15:3E:C5
            X509v3 Authority Key Identifier:
                keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:94:7d:6d:93:20:fc:6a:bf:70:3d:6f:72:45:ed:54:e8:2b:
         a4:47:ee:6a:40:e9:a5:a0:73:0e:c3:37:14:60:b5:fc:90:61:
         0a:26:33:ee:cd:b0:ce:d8:ec:de:4b:79:94:73:62:ae:2a:b2:
         05:08:0a:f6:d3:07:45:f2:36:e7:83:29:8f:7c:2e:e1:b2:f9:
         8a:53:b5:3b:fe:3c:c8:6a:ad:02:5e:39:c5:2d:af:3f:94:fc:
         dc:9a:ec:50:5b:d2:6a:5d:19:ad:09:82:e1:96:b5:20:05:05:
         34:4a:4d:00:ea:c2:d2:24:4d:c7:75:5d:2b:2e:6a:01:41:5a:
         78:18:e4:d8:f4:3e:a0:3b:14:6f:21:6f:df:ba:8a:fd:67:be:
         6c:eb:89:84:36:94:7e:20:18:e8:1c:ec:74:5a:83:ef:3d:fd:
         ad:0a:df:d5:28:06:85:d4:7a:04:e4:76:43:55:4f:4d:3b:c2:
         38:d3:9a:19:d1:ec:c8:89:c4:5f:e8:d9:6a:6f:c3:56:91:a5:
         02:b9:dc:10:b6:20:46:21:20:a2:ef:4f:24:f3:ec:99:27:ca:
         72:df:75:f8:3c:36:b5:97:57:98:bc:ac:e7:d2:e7:54:3e:29:
         02:77:7c:74:b1:d4:ab:0c:a4:12:86:64:2b:6e:d5:7c:1f:db:
         e5:1c:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:03:48 2026 by rpki-client