Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          si1uEsDp43evCJQjfYrIaimgt1Oo+3u6jrGp078Phs4=
Subject key identifier:   02:F9:5F:1D:95:4B:5D:4D:32:17:D8:E9:E4:A1:35:0C:63:B9:2B:01
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       01A0C669B97041A5D9269703CA7081FE3F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          1A6E
Signing time:             Tue 22 Sep 2026 00:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:12 +0000
Files and hashes:         1: Bgs-N-K--JvXm1e8lxirplvgNpE.roa (hash: wsCRUYCoHyBINaAD8dOfItVUslWhgJ5eq0i3ZMxZtAE=)
                          2: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (hash: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws=)
                          3: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: odrvksFHFiR2xRCg/SJUb/sEJReao3GhBuNXEPoC4DQ=)
                          4: a_bZi_JF-htWi2WNdUEbarLHqjE.roa (hash: 2XF8puYADeEdrWHojv63xz3QjBToR9sg7lU4Wxe4W+4=)
                          5: fWjrIUWb0Uxvfjvry6nROOIzUx4.roa (hash: gTxk/gRGNSiFKqGiLyaw7PhZ38jlD9pkvVrGhe/pqVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:69:b9:70:41:a5:d9:26:97:03:ca:70:81:fe:3f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Sep 22 00:00:12 2026 GMT
            Not After : Sep 23 00:00:12 2026 GMT
        Subject: CN=02f95f1d954b5d4d3217d8e9e4a1350c63b92b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:43:83:9f:ec:25:02:5f:ac:a1:a6:89:75:
                    39:cf:f0:b1:0e:0d:db:a2:12:11:3a:56:69:51:38:
                    ad:63:7d:e0:ef:cf:bc:08:4d:74:3d:23:1b:5f:0b:
                    31:92:58:d8:0d:7a:1a:e4:9c:f6:86:d6:eb:45:7c:
                    60:16:29:3d:85:cb:6a:99:76:f4:e8:01:4f:14:aa:
                    33:47:65:e5:dc:5b:b9:64:ac:59:4a:3a:a4:4b:1e:
                    7e:0c:13:49:e4:c5:04:fd:2a:f8:08:2d:6d:ef:d7:
                    9b:12:c1:1e:ac:a6:79:36:45:22:50:3c:dd:54:cb:
                    bb:d9:1b:74:53:fe:c5:b4:c4:7a:44:15:57:13:77:
                    f4:b7:28:b2:23:17:e2:0c:6e:51:ec:f0:9b:1f:30:
                    55:b0:ca:be:8e:8c:40:e7:96:39:8c:74:a1:20:16:
                    77:fb:dd:42:7e:31:7d:6e:36:ac:3d:60:29:79:45:
                    47:c3:07:3d:8e:99:bc:12:82:0a:ed:17:77:69:1c:
                    85:59:c9:a1:9f:7b:58:80:7e:8d:41:74:2f:5b:63:
                    30:e9:fa:b6:89:69:8f:6e:32:56:f4:ef:29:8d:fe:
                    b1:8e:14:ce:e6:f1:b8:35:3e:4c:06:5e:60:c8:99:
                    12:aa:b7:00:29:f6:91:87:67:23:cd:82:80:58:36:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:5F:1D:95:4B:5D:4D:32:17:D8:E9:E4:A1:35:0C:63:B9:2B:01
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:49:3d:f0:6e:d8:78:14:08:cc:76:51:55:b5:4b:6a:70:
         a9:7f:b4:9d:89:cb:06:68:89:03:58:e7:6b:bb:7d:d4:02:22:
         c5:0d:01:60:8b:ec:c9:54:29:0e:6b:0a:36:a1:64:a0:6f:5d:
         fb:cb:37:2f:e9:11:6b:f8:b8:cf:42:2b:17:f9:3c:c1:18:b8:
         f5:e8:21:94:bf:81:38:81:53:07:f0:76:2b:8f:6a:59:9c:67:
         60:59:38:56:26:2d:77:8f:cd:b9:4c:9e:ae:22:d6:c8:84:f9:
         2f:18:f9:ea:50:e8:3d:a6:de:16:87:0e:b8:21:5a:8f:f9:b9:
         3f:6c:b1:a8:28:04:a5:03:b0:30:b6:d2:37:a6:20:96:2a:95:
         4d:80:a7:a2:87:db:c9:f9:93:2a:e2:ff:05:05:90:f2:d9:4a:
         34:f3:06:ac:df:44:18:35:7a:67:17:4e:f9:ca:65:20:dc:de:
         a3:03:06:b0:e2:21:3c:dd:92:42:fa:f2:13:0d:8b:d6:3c:c5:
         91:5b:05:b8:2a:a2:4a:ec:0d:b1:db:6d:5a:55:34:3f:9e:e0:
         18:27:f3:f4:b0:f4:51:64:d5:31:12:9d:54:db:7a:61:d3:e4:
         e4:d5:39:bb:40:37:56:0f:22:ea:cf:fc:9f:22:30:ab:69:9a:
         4a:37:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:46:43 2026 by rpki-client