Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File:                     IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier:          20p5uewY4D0O1wsOoK2gGMXFnT8tjg3UMBf/MYi5uF8=
Subject key identifier:   FC:AB:8B:04:10:E3:B1:BC:C9:D4:80:97:D4:C3:40:59:AE:84:04:CE
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer:       /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial:       01A0CB2258D089A1FA61DD584208EA62CB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number:          193E
Signing time:             Tue 22 Sep 2026 22:00:20 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:20 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:20 +0000
Files and hashes:         1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: fjvtL+ucnB6XGRsAR3TL8ASFxsIpfysEDlh7wAwvtOI=)
                          2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
                          3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
                          4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:58:d0:89:a1:fa:61:dd:58:42:08:ea:62:cb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
        Validity
            Not Before: Sep 22 22:00:20 2026 GMT
            Not After : Sep 23 22:00:20 2026 GMT
        Subject: CN=fcab8b0410e3b1bcc9d48097d4c34059ae8404ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:db:c2:d8:6d:e4:00:44:49:16:89:dd:d4:
                    74:6a:9a:aa:39:1d:15:16:1d:bd:38:a5:94:2d:7b:
                    27:13:76:b1:b5:eb:7b:55:a0:fa:c3:5c:69:ce:50:
                    85:f9:e5:f2:06:67:1a:63:ef:50:c8:6e:7a:35:01:
                    35:ba:a0:9d:c1:5a:c2:6f:dc:ce:b9:b6:80:00:0a:
                    d2:58:45:eb:1d:5d:bb:6d:d2:47:a3:ac:69:8a:66:
                    95:6c:df:2b:c9:c7:a9:1a:fc:9d:8b:27:16:39:0e:
                    94:14:01:2c:ce:64:61:cd:0b:90:cb:a4:73:32:4f:
                    1a:80:08:ff:c9:b2:73:40:35:e5:58:2a:ff:5e:16:
                    2c:05:c9:9b:8d:c1:2e:1a:32:17:18:32:77:5e:92:
                    9e:c7:4b:bb:dd:ad:5b:05:ff:1e:5c:80:c7:06:18:
                    12:27:f5:47:58:0a:27:5f:10:fd:17:49:cf:58:ce:
                    db:6f:e7:d1:c9:10:18:30:11:a6:54:87:20:5b:43:
                    b5:ab:0a:7d:d3:a4:13:39:81:01:bc:3f:2b:24:df:
                    32:af:d1:0a:1f:c5:07:ed:92:df:c8:64:a1:5d:8c:
                    af:5a:9e:91:7b:92:a5:5a:2d:11:7f:53:e5:32:fd:
                    86:67:0a:98:94:76:14:d8:e0:df:df:a4:20:00:aa:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:8B:04:10:E3:B1:BC:C9:D4:80:97:D4:C3:40:59:AE:84:04:CE
            X509v3 Authority Key Identifier:
                keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:bd:fd:55:97:e8:22:d5:82:21:89:13:f3:b8:39:b5:5b:
         74:a3:01:f6:a9:2e:38:23:06:a5:9e:6c:79:0c:73:17:21:83:
         dd:0a:05:cb:c7:c0:6e:3b:80:12:22:c8:a9:dc:2f:e3:64:62:
         1c:95:99:8f:b8:4b:ac:4e:6e:33:c2:6c:5a:86:af:92:4e:9e:
         5c:f2:75:fa:c8:37:be:a4:0b:48:77:43:e3:26:f5:ce:9a:c1:
         99:78:ac:ce:9a:12:a4:e6:5e:c1:c9:ba:4f:b7:8c:a3:63:e8:
         27:b1:b7:46:ca:82:4c:4c:ae:bb:7e:d2:b1:23:e0:45:c8:37:
         68:1a:86:c3:92:bb:e5:d4:de:c9:ab:6d:5a:0d:00:2a:e2:86:
         fc:d6:13:73:66:6b:65:46:d8:0a:85:f4:80:18:4a:28:5d:33:
         17:07:1d:fe:b7:97:d0:0f:68:94:9a:9c:4c:78:d1:73:44:4f:
         94:75:43:33:95:32:43:9d:25:af:bb:f6:7e:b0:7b:d6:bb:51:
         ca:41:83:ff:a8:8d:32:b9:23:41:d0:16:bb:88:0d:2a:ea:eb:
         a6:1b:91:77:85:43:d7:ae:53:39:a2:ba:8f:24:60:8a:f9:e9:
         bc:54:79:e3:7a:c6:bd:48:f0:e1:16:8c:e2:2e:e3:fc:12:c8:
         70:ed:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:21 2026 by rpki-client