Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File:                     ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier:          LnMfTVly0MFAVGW5cC7e6Eky3pJcE7KSK0i6ygUKheQ=
Subject key identifier:   32:07:80:6E:AA:DE:E7:06:2D:D5:D5:5A:56:1A:2E:2F:31:56:CF:1B
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer:       /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial:       01A0EF3043DBDC22A56340EB8A8AE0C1511A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number:          05B4
Signing time:             Tue 29 Sep 2026 22:01:52 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:52 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:52 +0000
Files and hashes:         1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
                          2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: SkllawtL9ECBE2IzFZqnBQrLyx1e74GSMuq724nZqdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:30:43:db:dc:22:a5:63:40:eb:8a:8a:e0:c1:51:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
        Validity
            Not Before: Sep 29 22:01:52 2026 GMT
            Not After : Sep 30 22:01:52 2026 GMT
        Subject: CN=3207806eaadee7062dd5d55a561a2e2f3156cf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:c2:50:c8:04:1c:af:d4:78:3e:9f:99:ff:
                    5b:77:0a:51:46:f3:b2:6d:b7:04:b3:d2:d2:fd:e1:
                    9c:10:e0:0a:d4:dc:31:30:69:ee:64:df:89:39:7f:
                    ed:b7:bd:e0:2f:56:bd:25:d6:70:6e:b0:c2:8b:59:
                    19:ae:82:5f:48:1f:a9:99:59:f4:9e:0f:c3:5c:52:
                    d1:d3:fe:94:90:2b:c1:5b:1f:b7:c3:09:68:c7:bb:
                    95:38:ff:76:fe:bc:c9:fa:6d:8e:dc:3b:15:b9:27:
                    c2:1a:f4:13:a5:c7:6f:bc:c9:10:59:3d:fe:fa:a2:
                    e3:47:f0:49:29:34:c4:ca:20:5a:95:1a:28:4a:80:
                    6e:99:be:ef:1d:b4:a1:ba:4e:6d:3f:f5:0e:3f:e8:
                    e5:ae:af:be:33:4f:56:a2:b2:99:23:f2:38:8d:36:
                    61:d6:4a:44:42:b5:4e:a2:f9:c4:a3:35:b1:8b:b8:
                    e3:fc:3a:99:12:4b:01:00:76:0d:03:10:ff:ef:4b:
                    1b:b0:f3:cb:d0:2a:3d:16:a9:19:83:97:06:b6:31:
                    55:53:1e:17:6d:92:cb:92:a1:da:8c:64:d9:62:56:
                    f7:e0:02:2c:d0:bd:9a:b8:7e:1b:2d:fd:ee:ae:a1:
                    e5:f1:85:87:42:74:69:4d:e1:1b:a1:3e:a3:6e:51:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:80:6E:AA:DE:E7:06:2D:D5:D5:5A:56:1A:2E:2F:31:56:CF:1B
            X509v3 Authority Key Identifier:
                keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:f4:b6:d6:99:ed:4b:f2:fd:3b:07:09:c2:2b:05:8f:46:
         51:3c:bf:2b:cf:ce:15:38:a6:f2:c9:2e:1d:07:fa:a8:37:68:
         97:85:fd:42:f5:3f:38:c7:90:ed:7d:c3:4f:1d:a4:9b:1e:ae:
         e3:c6:40:a7:a8:c7:de:0c:4e:de:35:07:7b:55:3c:8b:00:25:
         7b:89:a9:1a:79:49:fb:10:82:87:e4:09:fa:06:b1:f8:e7:15:
         77:7b:b1:b5:3a:78:86:5f:15:92:75:db:eb:76:db:40:8f:e4:
         97:cd:9c:33:2a:40:57:a3:c9:c2:df:f4:b3:e0:65:6a:bd:82:
         ce:e8:1b:da:32:b1:c5:2e:20:76:99:c7:8e:4f:82:de:e0:7b:
         1c:ba:49:5b:f0:82:d8:32:b3:ba:f1:17:00:c6:f1:71:c3:d8:
         d4:97:46:df:c8:bc:3d:12:c5:ee:11:e5:ec:4f:e7:8b:82:ac:
         a1:7a:64:32:04:31:0b:27:a5:c6:18:e0:27:dc:4a:28:3b:cc:
         27:2e:3a:84:c8:0c:1d:af:17:50:21:d3:4f:cd:65:c6:1c:32:
         90:68:aa:96:b3:30:86:ee:05:61:ab:fe:37:b8:2a:ac:03:84:
         a3:6b:54:da:bf:e8:0b:19:12:71:e6:21:6f:2e:d8:6f:c3:b4:
         80:be:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:55:19 2026 by rpki-client