Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File:                     iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier:          tUENphK1BVUsZYhtstdf67E2IsPpd76axgwFg9Drmqs=
Subject key identifier:   A7:14:7D:09:7B:10:D8:D4:1F:8C:37:4F:3F:8C:9F:3E:83:E9:5C:54
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer:       /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial:       01A0D4CB005FF44E3AE1EC5BC5F49ACF7C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number:          1140
Signing time:             Thu 24 Sep 2026 19:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:08 +0000
Files and hashes:         1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
                          2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
                          3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: tI+gsg7nsyZn6IQ5n5rfv2pmU9/H1xBJPd2Zzqv3Hqg=)
                          4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:00:5f:f4:4e:3a:e1:ec:5b:c5:f4:9a:cf:7c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
        Validity
            Not Before: Sep 24 19:01:08 2026 GMT
            Not After : Sep 25 19:01:08 2026 GMT
        Subject: CN=a7147d097b10d8d41f8c374f3f8c9f3e83e95c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:a1:a8:a9:a1:16:07:4e:aa:f9:ec:49:2d:
                    7d:c1:c4:d4:80:ff:79:5b:9f:80:71:dd:dc:c7:15:
                    92:78:9a:87:33:da:5d:84:39:fd:0d:6c:73:8b:2f:
                    9f:39:4d:19:09:ee:a4:18:0b:36:55:16:58:26:b8:
                    de:38:9b:d9:a0:c3:5d:78:fb:08:5a:8d:a4:5e:5b:
                    06:05:c1:29:a7:9f:a5:93:72:05:1a:60:db:d1:73:
                    ac:4b:6f:4a:bb:f6:80:34:3d:f4:d9:f2:79:f1:60:
                    53:41:33:20:75:1e:63:31:fc:e6:80:7a:26:4b:dd:
                    83:b5:fd:dc:be:ef:9d:ea:23:4c:99:43:d8:7d:35:
                    08:f1:83:f3:21:76:18:66:6a:16:ff:cd:ad:fa:a1:
                    13:f5:2a:33:d4:38:23:7f:b2:05:1d:7a:09:92:dd:
                    13:ed:a4:e1:77:51:cd:59:08:de:fa:d6:af:25:2c:
                    d6:5d:20:e1:e6:23:8c:a5:02:ba:34:1b:a6:d1:0b:
                    9b:8f:32:c9:9f:55:d7:2d:81:6c:e2:14:d4:af:93:
                    88:24:05:0c:f4:b5:e1:3e:66:f4:78:42:36:10:5a:
                    2c:83:22:35:37:f0:97:03:e0:5c:4a:e5:be:60:8d:
                    5c:66:18:81:81:5f:aa:d2:51:40:9c:32:69:7f:26:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:7D:09:7B:10:D8:D4:1F:8C:37:4F:3F:8C:9F:3E:83:E9:5C:54
            X509v3 Authority Key Identifier:
                keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:81:2e:cc:67:d6:1a:bf:be:42:36:67:a2:fe:2b:55:8c:
         28:1f:e9:94:24:cb:a2:bb:1a:15:7f:18:ff:d2:cd:7c:79:be:
         6d:09:04:d3:1e:42:1c:f0:2c:e7:e3:5a:51:e3:40:fb:b9:63:
         d5:40:73:d4:43:fa:00:56:77:4f:72:10:be:fe:98:19:dd:02:
         62:bd:4f:c6:cb:4f:8f:87:d8:6f:4b:1b:19:b8:bd:59:77:5f:
         ec:13:60:a7:57:61:14:a6:16:1d:30:d3:a7:73:15:d1:99:4a:
         6d:dd:64:f7:ec:05:e2:c0:e6:9b:45:d0:67:3c:ac:c7:9f:8b:
         84:0b:2d:3a:fe:47:5e:fe:8b:09:ca:68:76:fc:ad:b2:e8:37:
         b6:4e:d5:6a:e3:3d:4b:b6:40:24:e2:e7:da:52:b9:5c:7e:df:
         88:4a:ea:5d:b3:9e:a7:86:28:c5:92:da:52:10:22:a1:cb:06:
         ae:b8:d5:29:b7:38:3f:0b:1b:44:db:ce:f6:b4:3d:fd:3a:b8:
         1d:60:59:ec:af:80:14:2c:74:3e:f6:3e:45:10:7d:3a:3b:98:
         f6:b1:00:d5:14:d6:b6:c6:e5:e0:dc:90:f6:6b:f4:3c:35:b7:
         b8:93:35:c6:8f:3a:63:4a:44:1d:50:55:05:52:b0:cc:71:58:
         13:a6:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:34:11 2026 by rpki-client