Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
File:                     ijndHRPq-YwAdGPZWosv_eojbOM.mft (raw, json)
Hash identifier:          Lrxs+h1oW1uXX8i1ppP2NM8UUBRKFv7+8NW8HGP0ABU=
Subject key identifier:   97:B5:96:E6:D7:9D:8F:4E:88:1E:DA:24:23:DC:A3:F9:B1:14:63:66
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Certificate issuer:       /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial:       01A0CB59ABC939C54C5132C2D556F2B2B566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
Manifest number:          E4
Signing time:             Tue 22 Sep 2026 23:00:46 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:46 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:46 +0000
Files and hashes:         1: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (hash: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=)
                          2: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (hash: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=)
                          3: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (hash: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=)
                          4: ijndHRPq-YwAdGPZWosv_eojbOM.crl (hash: mPM7Zyz16C3sD4gl2wZ+oSCr/VG4NhGD4U/Jd33Gn4Q=)
                          5: qEVDrxw8lXCl8aRODSA_1SPziJA.roa (hash: Q8I9Y/Qx/205GtVMmvPcisKl71EAafMgAUaQkhvO3XY=)
                          6: w5AS2KGdDReJzcd8Ht55gZO1pE4.roa (hash: ytd5KWe3NLPZnEwsv+SGbVXQdd/O7rHivZ3d1JF1Ww0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:ab:c9:39:c5:4c:51:32:c2:d5:56:f2:b2:b5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
        Validity
            Not Before: Sep 22 23:00:46 2026 GMT
            Not After : Sep 23 23:00:46 2026 GMT
        Subject: CN=97b596e6d79d8f4e881eda2423dca3f9b1146366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:9f:2f:f0:33:36:af:c1:0e:5f:c1:f6:98:
                    63:ef:c1:8a:83:11:4a:3f:58:63:5a:d8:b6:73:92:
                    e2:43:32:b9:9e:27:53:51:10:a4:13:ca:3d:68:3f:
                    50:a9:43:48:07:7d:98:b8:55:63:5c:8e:1d:20:12:
                    46:d0:3b:0c:7c:68:54:29:2a:3f:8c:c7:52:98:8f:
                    df:a5:da:11:08:51:8b:33:19:54:b7:9f:c4:25:10:
                    b9:ea:08:40:ef:1c:12:a4:b8:d7:c0:b4:02:aa:e9:
                    a7:e2:26:65:89:7f:c0:9e:c8:71:d6:5a:c6:ac:e9:
                    9b:fc:31:c1:4e:9b:15:f1:b8:37:20:c5:ca:86:fb:
                    90:2b:b1:4c:ec:a3:82:cf:1e:36:bc:e7:54:2e:0e:
                    2b:0f:1a:93:3e:58:f4:d2:58:46:54:13:98:d8:5f:
                    3d:7f:b0:86:bb:62:90:8e:07:5f:4f:87:6e:91:ac:
                    51:33:54:b5:93:43:d1:20:0b:32:17:a8:2f:e7:dd:
                    eb:26:b0:33:f8:fe:06:9b:7b:50:7e:4b:a7:d1:17:
                    f2:68:b1:04:ba:6b:26:94:82:9f:32:56:42:a4:8b:
                    80:46:74:61:f1:14:18:66:65:08:f9:a2:fc:7b:d6:
                    7d:3d:9c:c9:72:95:c1:cd:46:4d:4e:04:8b:f2:16:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:96:E6:D7:9D:8F:4E:88:1E:DA:24:23:DC:A3:F9:B1:14:63:66
            X509v3 Authority Key Identifier:
                keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:60:d9:7b:22:64:8d:c0:68:ca:46:5a:4e:f7:a1:8f:77:
         8d:f0:a5:55:37:36:96:6c:17:89:99:4b:a4:ef:48:63:d2:bf:
         2e:83:ee:45:45:40:cc:18:4e:86:9a:f6:bc:09:a7:38:0b:d7:
         85:44:17:01:e3:ad:b5:d9:7e:bb:cb:09:2a:9a:b5:6b:62:26:
         ea:54:1c:00:8a:ce:68:c9:bc:02:2b:0d:5f:3f:75:90:58:ca:
         19:a5:20:ef:29:6c:25:4d:65:da:12:7d:d5:32:e5:02:9f:28:
         6a:6e:66:b3:2b:99:73:de:d4:ba:3b:12:ef:66:c0:76:95:73:
         9c:fa:bf:fd:13:ee:07:13:6c:67:93:1a:64:d1:59:fc:47:2b:
         57:22:5d:2b:25:a9:fb:74:4c:44:75:97:02:ac:28:5a:37:df:
         2d:25:02:f8:4a:c9:9d:82:9c:a6:54:ae:8c:62:ca:13:60:2f:
         76:c6:ca:fd:b9:cb:eb:6c:59:cc:67:b8:23:11:e8:b6:b1:1f:
         08:f8:e5:7b:70:6c:10:9a:87:8d:46:8f:0c:c3:05:1d:fa:9a:
         7a:f8:19:bf:76:b1:de:1d:c2:15:16:ea:71:22:38:12:55:69:
         67:70:f5:05:73:df:bb:d7:ab:98:bb:bc:b9:e9:46:bd:1d:ee:
         89:03:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:45 2026 by rpki-client