Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
File:                     ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft (raw, json)
Hash identifier:          gjRDj3hu/NuY5LjG8uDFaBNReN9HsDGG6vBCUg3CN6g=
Subject key identifier:   46:20:51:D5:0D:7D:01:D3:8D:10:66:02:52:B0:A8:7C:91:DD:D5:17
Authority key identifier: 8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
Certificate issuer:       /CN=8b18de6736e258b5f1a008d529922229a2932393
Certificate serial:       01A0BDD4D58E436AB2638B339820F332552A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
Manifest number:          0119
Signing time:             Sun 20 Sep 2026 08:00:37 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:37 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:37 +0000
Files and hashes:         1: IpDjDaen4M-VqbxT-HsQgW2lzN0.asa (hash: rQjAT1n9bsLsCJwTibsu+CoF2MQ8QmY/T0w14G7X9uY=)
                          2: ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl (hash: pWifEjxoy/35Lo+YDCaMaLHL0/WeKQ4NV/ApKc25sho=)
                          3: taKgYCsZGDvagGUF19ZXEeasAPU.roa (hash: nJ/FzSD5iy11Q8Vrz1U8qvB/SWPV18wb+knyLGsBd54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:d5:8e:43:6a:b2:63:8b:33:98:20:f3:32:55:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b18de6736e258b5f1a008d529922229a2932393
        Validity
            Not Before: Sep 20 08:00:37 2026 GMT
            Not After : Sep 21 08:00:37 2026 GMT
        Subject: CN=462051d50d7d01d38d10660252b0a87c91ddd517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:24:f2:e1:ba:84:1c:62:5c:f8:38:ce:54:
                    39:9e:67:64:93:37:d5:27:99:00:30:da:fa:45:32:
                    55:2e:c7:34:35:2f:5d:88:80:97:66:a2:1e:a6:d4:
                    c5:39:d7:27:39:99:a0:c3:d1:5d:ea:74:f6:3d:04:
                    90:70:71:b3:6a:95:12:70:58:1f:47:db:c8:44:13:
                    5b:16:d2:dc:2b:93:38:b9:a1:c0:b7:2b:13:68:1a:
                    ba:0e:88:08:a4:74:d5:89:6e:2f:8b:e7:63:0a:3a:
                    90:99:f5:1d:95:91:8d:04:d2:95:cc:64:30:55:80:
                    b3:37:8d:71:87:7b:44:67:28:aa:4f:1e:8c:0c:9d:
                    d6:c5:13:44:58:e6:ba:1c:3c:0a:b5:40:03:a1:92:
                    79:f7:b1:a9:4b:92:69:a1:cf:43:28:1b:90:61:2f:
                    65:b9:d2:02:71:ff:29:5d:c7:91:18:ec:3e:a5:99:
                    4a:90:0c:fb:d1:b4:ef:12:b3:fa:d2:1a:36:99:50:
                    6e:f8:7c:47:9e:a8:46:1f:4c:62:f0:a4:8f:cb:8b:
                    d0:2d:b5:a4:04:ff:21:72:c7:b3:ea:55:c6:72:03:
                    fd:03:36:62:20:f8:e9:d3:1a:67:27:b3:87:8f:7c:
                    e1:71:0a:3d:5d:13:ce:84:96:3c:25:22:64:89:6c:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:51:D5:0D:7D:01:D3:8D:10:66:02:52:B0:A8:7C:91:DD:D5:17
            X509v3 Authority Key Identifier:
                keyid:8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9c:4e:50:9f:e4:6d:a4:a6:fb:aa:c3:d5:51:74:1a:09:5b:
         bc:eb:b2:1a:c0:85:1e:36:62:54:c9:29:2b:96:d6:f5:96:5a:
         5a:77:30:48:19:30:e5:94:11:75:6f:83:f5:08:aa:4c:13:13:
         8b:5a:2e:22:4a:37:44:08:19:fd:01:8e:9b:42:8e:68:8b:d0:
         84:ff:6b:8d:c9:60:30:9e:d5:9d:5e:7f:c2:c8:27:c0:17:aa:
         a5:fc:0d:bb:90:50:c1:fb:e2:f9:52:a2:84:79:62:7e:ca:30:
         a0:23:2b:be:19:64:37:80:d6:be:21:5b:9f:5f:30:1e:17:f1:
         c4:ed:54:78:7d:78:11:89:fe:3c:49:2f:bd:68:0e:11:50:2e:
         3d:c6:b2:cb:44:f0:d3:5f:64:ce:38:b0:d1:6c:c6:4a:aa:74:
         d5:7a:b4:f9:95:6b:41:d2:1e:d6:f2:8a:14:fb:82:8e:b8:e6:
         37:a6:30:e9:2e:fd:32:81:9b:72:91:a9:fd:3c:19:41:0f:34:
         5f:94:65:4c:30:db:51:1d:7f:a9:ed:c4:81:a8:d9:8f:23:d0:
         90:df:77:82:7d:2b:89:ac:de:4b:48:9d:1d:24:9a:02:e2:2d:
         aa:c2:d6:b0:5b:c5:c9:e2:f3:86:72:e8:4c:72:25:25:d6:42:
         fb:04:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:10:08 2026 by rpki-client