Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File:                     ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier:          KnmnKFlqwSimDjnzvX8I0Mf/1/bgEo0vVq0lD5bvG0s=
Subject key identifier:   AB:CA:27:86:EF:4A:C5:AD:7D:BD:73:50:1F:C1:45:3D:FF:5E:6A:44
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer:       /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial:       01A1243033908F99E5CC8E0D0F70719FD9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number:          1A96
Signing time:             Sat 10 Oct 2026 05:01:40 +0000
Manifest this update:     Sat 10 Oct 2026 05:01:40 +0000
Manifest next update:     Sun 11 Oct 2026 05:01:40 +0000
Files and hashes:         1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
                          2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 2kD/MUcwPerEAocnMIS6NIeZXMkHPR+8xml3CQTcRfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:30:33:90:8f:99:e5:cc:8e:0d:0f:70:71:9f:d9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
        Validity
            Not Before: Oct 10 05:01:40 2026 GMT
            Not After : Oct 11 05:01:40 2026 GMT
        Subject: CN=abca2786ef4ac5ad7dbd73501fc1453dff5e6a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:7f:d8:19:f3:43:42:1c:e8:68:91:69:a5:
                    e5:47:e1:0d:07:df:b6:76:af:25:b0:46:77:0c:44:
                    6e:f5:6c:42:5d:f3:4a:a7:53:b6:91:aa:56:c8:44:
                    6a:82:15:20:08:9c:48:ac:8a:5b:f2:7a:39:b6:7c:
                    9f:de:33:3b:95:a5:80:9e:ae:4e:0b:d4:1b:f0:5d:
                    44:93:0b:4e:13:92:a3:98:91:85:7a:d6:fa:08:8f:
                    21:87:a2:a9:07:e1:62:77:c8:a0:5d:13:d2:aa:19:
                    00:1c:42:ee:f4:45:60:bf:05:ff:7f:cf:f2:b4:9e:
                    3f:2b:12:c5:0b:6c:d5:cd:bc:5b:8e:18:a6:3f:84:
                    1e:51:73:27:c2:85:f2:64:0b:f1:e7:c0:fd:08:44:
                    12:10:94:3f:7b:fa:34:67:ed:65:a3:92:0d:c5:ce:
                    4e:49:c1:60:fb:67:06:32:1e:ea:60:42:11:5e:01:
                    28:0d:90:7e:bc:79:31:76:4c:d2:56:84:d7:39:80:
                    75:77:53:dd:22:b7:17:1c:7c:6d:2f:8d:33:16:30:
                    90:91:70:56:4c:0a:8c:2a:94:dd:8a:2e:f8:ef:1c:
                    38:f3:cf:58:42:0b:c6:ba:ed:2f:66:1b:02:84:b8:
                    98:66:6b:25:0d:29:a0:ca:4f:0a:3d:05:da:9e:c0:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:27:86:EF:4A:C5:AD:7D:BD:73:50:1F:C1:45:3D:FF:5E:6A:44
            X509v3 Authority Key Identifier:
                keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:74:95:d4:1b:e5:76:e9:98:4d:dd:d9:4b:1a:c9:c3:5f:e9:
         80:ce:dd:e5:92:37:d9:4d:22:d7:89:ae:0a:e7:fd:63:c9:dd:
         ee:a5:0d:eb:54:e1:f3:1b:95:36:53:8a:5d:11:17:5d:c2:82:
         13:64:d7:0c:0d:8e:db:96:1c:e8:98:39:ae:f9:31:72:d3:02:
         c9:fe:a7:f3:bf:e3:d4:a0:69:81:06:f3:be:cb:0c:6d:ca:3d:
         88:ab:fc:e1:82:a5:0d:5e:90:e7:4c:69:e3:10:17:b8:96:9e:
         d8:97:f1:c2:d6:51:9a:2c:24:5c:da:f5:6a:48:e0:48:15:b3:
         38:44:75:b5:ef:31:1e:62:72:66:1e:88:a1:ad:44:2e:56:ee:
         b7:07:85:1c:ac:0a:2e:02:9d:05:b9:21:65:50:cb:42:7f:b8:
         12:41:e6:ef:c8:6f:32:f7:3e:b4:02:ef:69:25:b6:df:c7:4d:
         a3:6f:c6:a0:02:43:57:81:09:49:19:fe:22:6b:f5:13:6d:bf:
         69:31:cb:ad:33:35:b5:f0:42:74:48:7f:c0:97:f6:81:cf:e0:
         14:e9:b8:3f:db:04:48:c6:95:97:aa:60:34:e1:dc:23:b8:2c:
         a8:49:0d:ea:b8:a7:da:e3:50:5d:f1:ba:1a:15:af:46:bc:9d:
         bc:1e:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:39:12 2026 by rpki-client