Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File:                     mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier:          xNWyw4iUFFV1rSeXlwW2UjbhkFou2+7RYGK5A+3CTzo=
Subject key identifier:   15:8E:5F:95:9D:D7:A9:43:B4:F7:E5:A3:C0:6F:CA:C3:1B:A9:E7:89
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer:       /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial:       01A0D8DF35355E8BC3584FEBCB8D881D3286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number:          026A
Signing time:             Fri 25 Sep 2026 14:01:41 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:41 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:41 +0000
Files and hashes:         1: SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa (hash: Hf8LYx/xiTjwePK0BFELGOeJyS6c95X3LSkrmw3EoHE=)
                          2: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: QzveTYFrkadWw2DV59KXE8b2ccxeyO2E9NLtwGNJbME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:35:35:5e:8b:c3:58:4f:eb:cb:8d:88:1d:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
        Validity
            Not Before: Sep 25 14:01:41 2026 GMT
            Not After : Sep 26 14:01:41 2026 GMT
        Subject: CN=158e5f959dd7a943b4f7e5a3c06fcac31ba9e789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:8c:25:32:61:20:c1:35:12:1e:2f:aa:be:
                    0c:2b:f0:bd:40:c1:fc:5f:25:37:e5:ff:0e:52:99:
                    fc:4c:e2:c9:77:92:46:ce:b9:68:44:99:7f:a9:dd:
                    a8:5a:2c:ce:7f:c3:49:ca:55:78:6b:fb:dd:d6:9b:
                    4f:de:f7:16:cf:3b:0f:96:69:e9:a8:a0:5f:47:cc:
                    d3:f9:33:61:44:9c:f2:2b:d0:db:51:10:14:8c:92:
                    8a:97:94:67:87:71:13:94:46:a1:e1:05:42:95:da:
                    85:a9:f7:c4:76:5d:e4:b4:23:fc:80:9c:12:f9:4f:
                    8e:4c:f5:0e:50:9f:97:f0:4e:f5:4f:70:05:c0:e7:
                    4e:a4:cf:31:33:f6:7c:cb:0a:53:91:8b:28:9c:2e:
                    bb:76:a8:9f:26:a8:c7:e1:c0:4e:84:fd:fd:d4:df:
                    df:c8:19:8e:4a:f1:e4:d2:2c:86:9a:fd:8a:e4:40:
                    c4:4c:7a:f1:c1:f9:6a:34:fc:9a:6a:7d:1c:b0:7a:
                    b7:45:e3:0e:7a:d3:6d:cd:22:07:d9:e2:c8:58:7f:
                    65:a6:fc:49:4c:27:fb:44:63:e7:63:b3:c3:dc:d7:
                    bc:d8:02:4c:a2:1c:34:04:32:16:d1:fd:21:ba:c3:
                    d3:2c:16:74:7f:a2:41:48:fa:df:ac:b4:59:60:fc:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:5F:95:9D:D7:A9:43:B4:F7:E5:A3:C0:6F:CA:C3:1B:A9:E7:89
            X509v3 Authority Key Identifier:
                keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:69:9b:a4:97:b8:b4:f7:91:e5:2f:bd:53:70:d9:3e:1c:5f:
         e0:ce:77:d8:b2:53:ad:10:e8:d1:49:28:ae:c8:ba:d9:b5:2b:
         04:3f:bb:03:5f:23:4c:6c:84:64:60:27:27:93:fa:ae:35:59:
         b1:83:cb:76:7d:3f:48:fc:d4:82:ba:13:c8:6b:3e:00:41:17:
         f4:55:15:f8:21:fe:4d:9b:c8:9e:19:7b:6b:ab:c9:5b:31:99:
         b3:98:e7:98:b0:8d:56:ea:3e:e2:97:36:59:e8:6d:bc:b2:4e:
         88:27:62:66:68:4a:8a:15:6b:3e:df:bb:ef:2a:38:2d:b5:47:
         a5:56:0d:be:ee:fb:46:24:27:dd:be:6d:dd:88:35:e3:be:cd:
         3b:05:83:68:51:27:ec:3d:6c:1b:b9:3d:c7:2e:77:fd:5a:6a:
         a1:17:73:4f:18:78:44:ec:c4:1d:39:44:da:57:b4:4c:cb:df:
         99:8b:6d:d7:a7:2d:fa:7d:4e:0a:17:65:0a:e6:19:3a:5c:e8:
         2a:1b:62:89:fa:de:1c:e9:ac:7b:04:1f:d4:5a:0f:69:fa:cb:
         29:df:8e:e2:0a:ef:11:88:6f:3d:7c:62:e8:07:32:89:fc:4b:
         35:1f:b7:6c:85:35:2b:70:00:f4:a2:77:76:2d:a4:a3:93:0e:
         42:96:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:47:08 2026 by rpki-client