Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
File:                     IXQgn8IZLnORZveuTf_D1MmCNUk.mft (raw, json)
Hash identifier:          OakHW136T+o+pAyEdir1maajDBHZVUWJuUcFCrN4TrY=
Subject key identifier:   79:C0:91:AA:6E:BD:C0:70:0D:34:86:D7:8C:BE:E0:26:2D:BE:2F:86
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Certificate issuer:       /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial:       01A10A02A274BB9E7E8B9B6F147C4240703F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
Manifest number:          0103
Signing time:             Mon 05 Oct 2026 03:01:46 +0000
Manifest this update:     Mon 05 Oct 2026 03:01:46 +0000
Manifest next update:     Tue 06 Oct 2026 03:01:46 +0000
Files and hashes:         1: IXQgn8IZLnORZveuTf_D1MmCNUk.crl (hash: AWn8YTaUuvkvlScvzc5Nd1QM2CopkmuHIIScFWWYF6s=)
                          2: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (hash: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:02:a2:74:bb:9e:7e:8b:9b:6f:14:7c:42:40:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
        Validity
            Not Before: Oct  5 03:01:46 2026 GMT
            Not After : Oct  6 03:01:46 2026 GMT
        Subject: CN=79c091aa6ebdc0700d3486d78cbee0262dbe2f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:ac:8a:2f:f1:21:1e:b9:7e:60:7f:1c:2e:
                    cc:14:f3:e9:a6:8b:08:13:e8:7b:d2:f9:ef:df:11:
                    c2:f4:aa:93:61:d5:28:6b:16:1a:b6:41:e5:d2:48:
                    e2:06:7d:f7:ed:0a:d7:3a:3c:51:dd:7c:4b:c9:cd:
                    c3:89:69:e9:df:36:e5:0d:ea:05:8d:85:f8:f6:31:
                    9a:2d:1f:f7:44:84:07:10:30:d6:ec:3b:61:26:28:
                    cd:7a:33:32:7e:d5:aa:a9:ff:ca:07:ff:c6:af:18:
                    76:8f:a3:55:c1:bb:b1:92:a4:0c:a8:5b:9e:5f:bf:
                    71:b7:b2:e5:9c:f8:b8:19:ac:9a:e5:12:84:e7:40:
                    a9:0d:83:6f:33:99:8c:c7:0e:a9:86:ea:9e:24:d3:
                    8c:a9:14:3e:8b:6c:cb:c3:3f:bd:3a:7c:f0:c4:4e:
                    88:21:84:13:f4:11:d5:71:64:bf:19:ff:e4:ad:b3:
                    8f:eb:42:c6:61:50:04:2e:40:ec:02:02:82:c2:0b:
                    cf:d8:86:05:56:89:16:54:04:ae:12:e5:b7:ea:67:
                    17:13:53:46:33:a3:6f:0a:e0:ba:f3:4a:1e:6f:70:
                    74:f8:7b:be:70:1a:1d:71:69:47:ab:33:b1:d8:c6:
                    06:b8:d3:43:29:fa:16:90:28:2c:13:15:79:99:b5:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:91:AA:6E:BD:C0:70:0D:34:86:D7:8C:BE:E0:26:2D:BE:2F:86
            X509v3 Authority Key Identifier:
                keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:78:11:77:c5:e8:6b:68:a1:10:9f:27:f6:b1:1b:6e:d4:
         f5:c8:40:66:ec:48:49:cb:2e:54:51:f6:55:aa:32:6f:e3:e9:
         b7:d2:35:d4:4b:d6:af:ee:4c:65:db:cc:b7:b2:ee:3f:66:9f:
         e4:b7:76:ee:d9:c0:e9:cf:50:92:99:aa:91:5f:c7:2f:b5:2c:
         85:f3:79:12:39:35:04:a6:48:f4:83:b8:38:f7:b6:88:eb:da:
         6b:ac:95:29:a5:49:72:30:24:39:13:ba:b7:82:6a:63:59:f8:
         af:97:51:31:15:1f:85:69:79:e2:71:7e:a0:8c:3b:c9:7f:b6:
         c8:70:98:03:9e:7b:ed:b3:3d:64:af:26:5d:68:af:70:b3:ec:
         7d:4d:a9:41:20:a8:21:f0:ce:d0:2c:f9:f6:a9:cd:76:a1:34:
         7c:9c:7e:14:17:85:b8:53:e9:ec:c1:3d:cb:5d:f4:cf:ab:ce:
         cc:4e:1f:a1:89:ca:21:ae:98:33:1f:a3:04:92:d0:cf:b2:6a:
         34:f0:25:e5:f4:b4:c0:7f:25:1a:da:66:5b:bf:c1:6a:74:44:
         ba:5d:0d:09:e8:4b:c0:de:82:80:be:d2:60:e0:f4:d6:13:22:
         85:2c:df:b1:74:50:93:36:3c:a7:e8:aa:43:b9:d5:1e:71:aa:
         07:ad:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:17:11 2026 by rpki-client