Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          NyRAEJnShsCt/V+9bHPyszAi9CFDVWXq9mxSOWEhYU4=
Subject key identifier:   B0:81:39:48:D9:23:E4:1C:EB:06:61:90:BB:AC:4E:D2:D0:02:8C:48
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       01A0E51A58C239521CDF8CFF4EA0C5A13EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          086B
Signing time:             Sun 27 Sep 2026 23:01:44 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:44 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:44 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: DszoWjPyXGGFf1spFVuSwor0wnyTMKEg/bAISheAF9c=)
                          2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:58:c2:39:52:1c:df:8c:ff:4e:a0:c5:a1:3e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Sep 27 23:01:44 2026 GMT
            Not After : Sep 28 23:01:44 2026 GMT
        Subject: CN=b0813948d923e41ceb066190bbac4ed2d0028c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:21:c8:15:2a:89:17:bf:ff:fa:fb:49:0a:
                    b9:0b:59:db:56:79:46:a0:de:20:65:d8:5c:40:43:
                    87:70:c7:a9:f3:5f:25:55:fb:e6:69:31:1e:02:e3:
                    3e:80:1b:f1:03:66:96:1d:1a:3d:58:81:21:49:b5:
                    25:ac:36:67:b1:89:f0:ae:fb:c8:89:f3:e8:f6:4a:
                    03:18:2b:07:6c:5b:40:3a:6f:54:af:02:eb:1a:6a:
                    66:64:80:56:c7:45:7a:3e:fe:61:55:c5:f1:4a:77:
                    6a:91:77:c1:d2:fd:cb:3b:ff:a9:2e:f3:d2:3c:71:
                    54:8a:f2:42:d5:2b:ad:61:0c:06:01:3a:69:94:55:
                    fa:8e:3f:2d:01:45:42:2a:46:29:da:54:d6:88:83:
                    df:fe:41:2c:ff:db:6c:f1:cf:2a:5f:44:e3:e5:5f:
                    49:d1:b5:59:77:5a:8f:f5:fd:6f:30:aa:91:2d:a8:
                    8e:a8:3d:c2:f5:33:41:1e:6e:97:e8:a5:51:87:78:
                    53:ef:2f:75:a1:80:59:ff:d4:b7:36:62:bc:68:41:
                    48:ea:1d:dc:9a:32:ac:85:f7:48:8a:f8:f3:c1:33:
                    dc:1e:5b:af:75:79:6e:61:4a:ec:e0:5a:4a:ef:6c:
                    c5:26:a3:04:dc:2c:17:a7:42:ce:d8:2e:5c:22:69:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:39:48:D9:23:E4:1C:EB:06:61:90:BB:AC:4E:D2:D0:02:8C:48
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:e3:8c:3b:0c:3d:e9:13:d1:12:f7:a0:40:5b:76:92:6f:
         35:80:29:a9:d2:9d:2f:dc:a4:0a:05:70:20:71:26:5e:91:1a:
         78:69:a9:55:d9:79:a5:15:cb:a5:72:49:77:b9:b6:76:95:aa:
         0d:00:00:52:b0:e2:56:be:09:1c:ce:2f:2e:57:19:71:24:02:
         49:f4:5a:56:56:fb:f3:f5:49:2d:ed:b6:03:b4:02:5a:29:d3:
         84:ab:d1:27:be:09:0b:94:b9:9e:36:72:28:af:ac:79:21:b0:
         fc:f0:d3:62:b6:52:9b:86:10:e1:ae:eb:ca:a9:58:b8:c3:d1:
         d2:9c:f9:9c:88:19:9e:34:9e:2e:a8:54:de:b4:05:86:31:dc:
         c7:73:a7:41:37:0f:55:0b:e2:d6:23:b5:bb:10:c5:34:87:bb:
         15:22:57:79:fc:54:ed:0c:5b:58:f3:9c:9c:44:f6:c2:29:82:
         da:7d:30:c1:c5:e6:1e:d8:43:1f:d8:3e:60:b0:d8:bc:2c:3d:
         96:c2:4a:0a:ce:9f:12:94:62:76:f3:28:91:6d:35:3a:c6:80:
         a2:32:34:73:c6:86:2e:a4:93:5f:60:70:f1:6b:63:3e:84:3d:
         3b:e0:0c:76:dd:ab:2e:6f:29:ed:f1:e2:49:4f:6a:da:14:5c:
         f8:ae:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:06:18 2026 by rpki-client