Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          goq5gkuEABlZDsqnFNxNfuyicUbs+zWfQK8cQFcICpU=
Subject key identifier:   91:00:8D:EB:D9:48:3B:EC:A0:AF:92:FA:EC:A5:99:DF:BF:F8:C5:74
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       01A0EE8B268AAF9F69986687931E42E28F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0E89
Signing time:             Tue 29 Sep 2026 19:01:31 +0000
Manifest this update:     Tue 29 Sep 2026 19:01:31 +0000
Manifest next update:     Wed 30 Sep 2026 19:01:31 +0000
Files and hashes:         1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
                          2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: q/IosobZXSxpokZJaay8bDa/sYv0TzdDWyxMxkpYqTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:8b:26:8a:af:9f:69:98:66:87:93:1e:42:e2:8f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Sep 29 19:01:31 2026 GMT
            Not After : Sep 30 19:01:31 2026 GMT
        Subject: CN=91008debd9483beca0af92faeca599dfbff8c574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:a6:d2:47:ee:55:59:60:6a:8f:32:c0:26:
                    5e:41:da:44:0a:30:90:63:84:41:45:6d:c3:39:6d:
                    b4:76:c6:b2:5c:0e:8c:46:79:83:85:9d:5b:93:02:
                    0b:f0:dd:82:74:b7:d9:f3:42:59:6d:3c:df:f4:1f:
                    61:88:73:46:40:21:bd:fc:79:ae:8f:58:fd:1d:57:
                    85:d9:c1:b4:4d:ad:dc:20:8c:22:3b:52:3b:22:20:
                    c0:db:7c:49:71:57:d8:3b:68:6f:bd:08:37:e5:d8:
                    a6:8b:6a:97:7d:0a:68:7a:25:0a:f6:1d:25:02:1f:
                    ef:24:3b:c6:b8:45:5d:5e:4e:c1:c3:03:d8:11:96:
                    93:52:9c:a6:ad:73:0a:03:93:1a:6d:d1:51:d6:4c:
                    78:73:37:9d:e7:a6:5f:87:f7:85:55:3e:0e:16:0c:
                    4c:a3:34:14:60:ea:0c:52:9d:7f:70:a4:52:60:e0:
                    a4:0a:a9:f7:6b:cb:b4:46:9a:3a:ac:d0:d5:c6:c9:
                    a3:85:3a:e2:ae:fc:f0:1f:51:d2:ea:78:c5:f4:a1:
                    d0:47:10:0c:c9:9a:6a:3e:3f:8d:20:e2:17:e3:55:
                    f1:dd:e0:75:df:1c:ce:f3:18:a3:39:8b:27:58:10:
                    aa:92:51:c1:62:14:b8:64:96:f6:80:12:8f:02:22:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:00:8D:EB:D9:48:3B:EC:A0:AF:92:FA:EC:A5:99:DF:BF:F8:C5:74
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:1a:9c:58:c3:9e:bb:30:91:e6:ff:93:1e:ad:bb:c7:55:
         d8:09:01:1b:9f:6c:63:b3:4f:84:f5:a8:4e:0f:4f:32:e4:98:
         58:13:2a:03:33:fe:c2:be:cd:06:3e:62:b8:a2:74:57:32:41:
         4a:25:05:b6:40:8c:8e:76:04:64:a8:1e:8a:b6:b0:74:1f:f7:
         cf:ca:94:ec:f4:e9:a5:87:a7:3e:f6:f6:8e:cc:7c:4f:ec:25:
         be:5c:d6:20:0c:8f:ae:ce:44:b5:b4:59:6e:2c:f9:e0:03:70:
         54:3a:42:83:da:64:3e:2b:05:c5:8c:dd:2f:fe:63:40:43:eb:
         d8:d5:42:27:5e:40:1d:7e:43:d7:89:51:ba:c8:ea:20:98:81:
         33:bb:31:9a:1f:f3:1b:e2:c0:4d:d6:57:a4:9b:e4:31:79:a3:
         d2:90:47:3d:83:d8:3f:4c:12:c0:74:04:49:1f:70:95:ab:27:
         89:5a:fd:fa:d9:58:cb:45:e6:07:12:07:8e:23:84:28:11:c4:
         2b:36:fd:63:af:ea:00:c4:f3:87:df:13:1f:9d:ac:99:1b:f2:
         21:6d:80:07:be:24:49:57:f8:ac:e5:fc:23:14:26:fe:a6:07:
         08:40:00:50:fb:68:51:90:f2:1e:50:32:fb:de:64:bd:fe:0c:
         04:36:d5:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuiyaKr59pmGaHkx5C4o9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjYwOTI5MTkwMTMxWhcNMjYwOTMwMTkwMTMxWjAzMTEwLwYDVQQD
Eyg5MTAwOGRlYmQ5NDgzYmVjYTBhZjkyZmFlY2E1OTlkZmJmZjhjNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9am0kfuVVlgao8ywCZeQdpECjCQ
Y4RBRW3DOW20dsayXA6MRnmDhZ1bkwIL8N2CdLfZ80JZbTzf9B9hiHNGQCG9/Hmu
j1j9HVeF2cG0Ta3cIIwiO1I7IiDA23xJcVfYO2hvvQg35dimi2qXfQpoeiUK9h0l
Ah/vJDvGuEVdXk7BwwPYEZaTUpymrXMKA5MabdFR1kx4czed56Zfh/eFVT4OFgxM
ozQUYOoMUp1/cKRSYOCkCqn3a8u0Rpo6rNDVxsmjhTrirvzwH1HS6njF9KHQRxAM
yZpqPj+NIOIX41Xx3eB13xzO8xijOYsnWBCqklHBYhS4ZJb2gBKPAiK4OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEAjevZSDvsoK+S+uylmd+/+MV0MB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUQanFjD
nrswkeb/kx6tu8dV2AkBG59sY7NPhPWoTg9PMuSYWBMqAzP+wr7NBj5iuKJ0VzJB
SiUFtkCMjnYEZKgeirawdB/3z8qU7PTppYenPvb2jsx8T+wlvlzWIAyPrs5EtbRZ
biz54ANwVDpCg9pkPisFxYzdL/5jQEPr2NVCJ15AHX5D14lRusjqIJiBM7sxmh/z
G+LATdZXpJvkMXmj0pBHPYPYP0wSwHQESR9wlasniVr9+tlYy0XmBxIHjiOEKBHE
Kzb9Y6/qAMTzh98TH52smRvyIW2AB74kSVf4rOX8IxQm/qYHCEAAUPtoUZDyHlAy
+95kvf4MBDbVcA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 01:32:56 2026 by rpki-client