Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          tQSNfsEa1Q9Fw4+qkBRYmqlLaVCeGC/KNfxBETg1Hrw=
Subject key identifier:   A0:88:1B:C1:03:62:CB:23:22:FC:1C:93:AE:EC:4A:BC:D5:5B:DE:DF
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01A0E81CA0D88388046F58B43C484970934B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          1382
Signing time:             Mon 28 Sep 2026 13:03:05 +0000
Manifest this update:     Mon 28 Sep 2026 13:03:05 +0000
Manifest next update:     Tue 29 Sep 2026 13:03:05 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: AfTWxVZ1mJic5yYrzK/n7ovqw+GP6jcvL5hRO2qFkt4=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:a0:d8:83:88:04:6f:58:b4:3c:48:49:70:93:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Sep 28 13:03:05 2026 GMT
            Not After : Sep 29 13:03:05 2026 GMT
        Subject: CN=a0881bc10362cb2322fc1c93aeec4abcd55bdedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:23:be:a2:b9:9b:21:0b:7c:e9:5d:bf:f0:
                    aa:b0:5a:2f:4e:5c:5f:35:45:0e:d7:e5:f0:b5:1a:
                    9f:ac:5f:b6:d6:64:32:e2:0e:4f:8e:7d:b9:05:84:
                    90:e8:d3:6d:d4:82:e1:c8:89:bb:91:70:af:77:26:
                    47:1f:a1:a0:42:b9:27:4f:c3:d8:fe:0b:bd:cf:81:
                    85:8e:dd:89:f0:93:16:20:a1:a2:99:f6:a7:f3:2f:
                    59:9f:83:b3:9d:db:f6:93:b0:cf:c4:d7:54:90:5c:
                    7e:77:da:de:3b:df:d2:de:75:7a:93:3b:48:f2:5d:
                    88:87:7b:7a:2f:97:3e:dc:99:d2:76:b9:2e:02:66:
                    56:1a:f3:32:ad:e1:85:82:75:4b:d4:f5:57:c4:a1:
                    c2:bb:65:70:2c:2a:5b:0b:fb:3d:50:d4:8b:a5:43:
                    d5:cd:2f:95:69:4b:73:84:b4:3a:2b:94:2f:ef:51:
                    30:c8:59:81:9a:6d:d3:53:02:71:98:35:97:24:d3:
                    9d:68:ac:4d:9e:57:dc:30:ab:d4:47:69:25:99:32:
                    9e:e6:96:64:15:cf:c0:45:a9:d2:5b:f7:79:d8:3e:
                    ee:25:58:a5:28:94:6c:15:6b:1e:00:d9:e5:be:37:
                    86:f9:3c:22:f4:e1:26:7c:35:37:78:05:8b:bc:34:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:1B:C1:03:62:CB:23:22:FC:1C:93:AE:EC:4A:BC:D5:5B:DE:DF
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:e7:79:b5:38:a6:0b:b4:40:3a:d7:fe:25:fa:1d:68:c2:
         20:14:74:a8:ee:32:4e:21:cc:bd:65:27:cf:5a:54:44:9e:de:
         4d:68:40:5c:fb:12:c3:01:95:9e:54:2b:b0:d5:bb:b2:09:83:
         75:55:60:7f:6a:cc:1b:06:77:d7:21:b2:58:80:57:0e:8c:8b:
         d0:64:90:ba:a6:68:cc:9c:ef:ab:dc:39:e0:6f:97:92:d0:6d:
         95:6d:ea:a1:32:f1:92:21:01:9c:c2:fa:66:ae:fa:60:0c:6c:
         f2:85:fa:22:8e:e7:0e:1d:cd:84:1b:69:8c:e8:17:70:6a:d6:
         15:08:cb:9c:ee:02:3d:fb:a0:a6:74:27:7e:54:8a:eb:c4:3d:
         2c:8e:46:b8:c0:d3:70:89:e1:c0:54:fc:76:bb:b8:43:9b:2f:
         c2:51:cf:6e:50:41:7a:49:06:2d:15:9d:ec:28:ea:5c:8f:ff:
         f6:ae:3e:a2:44:c4:3e:10:f8:c7:e5:47:3d:32:10:e3:6d:2e:
         9e:f9:90:70:35:71:2c:d5:65:95:a2:54:61:28:f8:2f:ca:70:
         16:e1:39:98:2a:13:37:2c:ae:66:e3:00:4c:54:4c:3f:71:d2:
         c3:cd:29:b2:62:29:01:19:f7:16:ac:f1:db:ed:62:19:49:c7:
         c4:53:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:45:40 2026 by rpki-client