Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File:                     IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier:          gfPJX+hDWsSgPwkET5+kf/3kfsgISFQ8y3FVBDTsmLE=
Subject key identifier:   45:BE:15:F0:3B:20:33:3D:44:71:77:EA:D8:15:89:80:AA:E7:64:67
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer:       /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial:       01A0C9343EF6D7ADB6769DBE47F4138F51B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number:          193D
Signing time:             Tue 22 Sep 2026 13:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:39 +0000
Files and hashes:         1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: 8aMsUiLrUXWVC+dLu0OhB6brqtL48P5HO44nM8QZQYI=)
                          2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
                          3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
                          4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:3e:f6:d7:ad:b6:76:9d:be:47:f4:13:8f:51:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
        Validity
            Not Before: Sep 22 13:00:39 2026 GMT
            Not After : Sep 23 13:00:39 2026 GMT
        Subject: CN=45be15f03b20333d447177ead8158980aae76467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:ed:94:2b:38:d6:19:cf:c6:ea:85:32:e9:
                    71:71:65:28:47:2d:bc:ff:87:cc:a7:70:b1:dd:b5:
                    86:84:b3:cc:49:52:30:69:b9:2b:92:da:60:a9:45:
                    5d:40:7c:8e:7c:26:c4:31:67:a5:61:e5:51:68:bd:
                    b6:d2:8c:c7:35:d4:79:27:15:55:c3:ab:11:7e:60:
                    ad:b6:25:e0:77:70:2c:25:c7:96:ee:d3:60:a3:2f:
                    a1:ae:11:fd:c7:39:a8:9a:5b:fd:f3:4b:30:ba:9c:
                    d3:10:0f:d4:d6:21:b5:86:5d:58:94:2d:05:78:3d:
                    83:96:cb:90:79:f7:ea:c0:2e:e9:c6:fc:22:33:83:
                    de:dd:26:39:88:d8:d4:b5:31:dd:ce:21:7c:d5:f4:
                    6f:6e:84:30:19:da:e6:a0:65:df:24:79:82:b6:0d:
                    40:29:fd:27:98:cc:ef:d0:18:55:d5:b3:4f:9d:b1:
                    34:16:c8:3c:f7:98:c2:cf:90:86:f9:72:f2:01:fd:
                    bf:e9:68:19:5d:61:24:fc:4d:75:0e:1c:8e:e0:ef:
                    f2:cb:94:98:d7:31:a6:98:68:83:06:90:40:b8:19:
                    09:46:84:cb:f1:03:e8:61:30:0f:8d:c2:4a:32:e1:
                    e1:c8:38:02:25:d8:6c:1e:59:43:22:da:62:dd:bd:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:15:F0:3B:20:33:3D:44:71:77:EA:D8:15:89:80:AA:E7:64:67
            X509v3 Authority Key Identifier:
                keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:26:ff:e9:02:ee:60:61:4c:95:86:88:2d:48:42:ed:eb:
         22:0f:96:88:d6:f4:b1:79:29:7b:c7:a0:46:59:32:ca:54:f8:
         a3:50:60:f8:50:81:1f:e7:2f:6a:15:e9:05:67:85:2d:be:d6:
         0b:e4:11:b7:06:76:ec:07:92:a3:4f:7a:d7:f3:5b:02:5e:04:
         d0:bf:1e:26:2f:12:b9:00:9f:9f:07:53:3d:36:38:48:ec:fe:
         e4:a2:ab:b3:51:79:f5:00:b7:a7:81:f1:72:43:26:66:85:62:
         26:c2:d1:58:7c:ee:6d:76:d8:b1:85:79:0b:be:e0:7b:87:fd:
         8e:74:13:6b:7d:33:11:57:bc:35:d7:62:a8:98:a7:bf:eb:8f:
         29:d0:29:a9:81:ff:a6:3c:17:ed:ae:c4:d0:6f:44:7b:fc:08:
         54:2c:fb:34:d4:f2:2e:71:d7:be:a5:35:f7:f6:02:fe:95:12:
         bd:47:0e:3d:99:b8:40:7c:76:b0:33:61:5c:73:5d:7e:d6:37:
         86:8b:b2:14:41:1b:44:e3:b9:fd:5e:c4:d1:5a:c1:fe:93:46:
         46:f3:de:17:7c:f6:7b:60:08:e6:84:24:d1:2a:29:57:28:a2:
         f3:38:7d:9e:c1:c8:eb:93:4e:4f:7d:67:d8:b7:1c:74:6a:a5:
         d8:1f:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:12:11 2026 by rpki-client