Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          HPiKUK57dC8GTxNgFYAFNpv9SPvRjGi3LmJ8V+wD/I8=
Subject key identifier:   8B:4A:E9:02:E3:2F:13:AF:9E:6C:7B:64:75:B1:A4:63:5C:19:1B:A3
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       01A0F6E96DDEEF64EFD4A0E4E1333372EF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          1205
Signing time:             Thu 01 Oct 2026 10:01:28 +0000
Manifest this update:     Thu 01 Oct 2026 10:01:28 +0000
Manifest next update:     Fri 02 Oct 2026 10:01:28 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: o9cs3KbRuBKlCRUlwboANUHXqHjzfVb9yIHs38bGgLg=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:e9:6d:de:ef:64:ef:d4:a0:e4:e1:33:33:72:ef:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Oct  1 10:01:28 2026 GMT
            Not After : Oct  2 10:01:28 2026 GMT
        Subject: CN=8b4ae902e32f13af9e6c7b6475b1a4635c191ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:c5:e1:80:2d:75:34:fc:65:f5:f1:58:00:
                    f0:2d:c3:f7:57:e6:cb:ce:99:dc:2a:d4:ad:1b:5f:
                    8e:ff:a0:76:25:b3:a7:94:8a:b8:53:09:65:03:5c:
                    b8:fa:ba:52:28:c8:f0:d1:ff:db:26:5f:55:5e:b3:
                    c5:74:78:44:01:ef:84:56:e2:72:ab:9d:7d:77:f3:
                    7a:97:ce:17:e5:7a:7e:1a:7b:00:5e:b1:21:8d:21:
                    83:9b:93:62:e5:f4:04:0e:55:40:fb:f4:3f:50:64:
                    ca:a9:88:52:fa:6a:83:28:bf:4d:91:b9:bc:7c:4a:
                    65:7d:fe:9a:8c:83:a1:4f:a9:21:c9:e2:c6:2e:73:
                    1b:8b:a3:0c:14:57:cd:b4:55:4c:1c:14:10:40:72:
                    27:dc:a6:c8:66:47:bf:40:53:89:eb:dc:c9:07:de:
                    e3:ff:04:95:df:49:30:12:c1:0d:fc:73:f0:aa:fe:
                    28:92:07:0e:bc:22:f7:37:01:71:24:91:68:08:8d:
                    2a:f8:b4:a6:8c:96:5f:96:98:f6:8f:64:6f:58:2d:
                    86:92:92:74:05:d8:69:53:e6:62:6f:b8:26:8b:b5:
                    1f:b6:bb:82:bd:cd:27:ab:19:8a:36:1e:c7:68:cf:
                    30:19:2e:95:bb:79:a1:35:8b:a6:f2:33:ee:07:b8:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:E9:02:E3:2F:13:AF:9E:6C:7B:64:75:B1:A4:63:5C:19:1B:A3
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:8c:6e:33:43:4e:c1:7b:3b:04:0c:ef:67:a2:1c:58:aa:
         67:12:71:fd:4c:e3:db:c5:ff:a9:4b:5d:1b:fb:fb:76:7e:b2:
         c2:08:21:f5:60:7e:c5:a1:c5:94:f7:1b:4b:a0:c4:22:74:10:
         00:0c:14:7f:75:c0:8d:0e:a0:70:2e:f0:91:3d:be:7c:8b:94:
         53:0b:a9:74:01:75:58:7c:6a:2d:9b:39:d7:4b:66:dd:67:89:
         1e:f5:7a:57:0e:68:9a:15:c6:79:0d:65:d5:e4:94:12:8b:b1:
         9e:6a:29:2c:dc:9f:aa:df:c4:ff:4e:00:a5:76:f0:9e:e0:ae:
         f7:22:52:d8:dc:e7:1a:bd:35:e5:2f:86:92:77:da:e3:ba:3c:
         45:b5:6b:1c:fe:0b:06:3f:0a:96:bb:87:ce:f9:67:20:67:fe:
         28:5f:c4:e5:1a:1f:ba:9b:47:5a:61:44:6e:7a:d5:ec:e3:ad:
         68:cc:b3:f9:66:e2:3d:7e:25:f0:3e:c2:40:32:e6:c5:d4:9e:
         ff:e5:9a:f3:d5:51:72:6d:34:a9:d5:89:08:82:30:46:d8:29:
         96:33:c8:e8:0c:58:64:b6:f5:48:27:65:d0:a3:42:e0:ab:51:
         1b:b0:ef:98:ac:ec:12:67:86:a8:5a:9e:b2:d4:a1:1f:70:6a:
         e4:d0:31:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26W3e72Tv1KDk4TMzcu85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj
YzMxOWQwHhcNMjYxMDAxMTAwMTI4WhcNMjYxMDAyMTAwMTI4WjAzMTEwLwYDVQQD
Eyg4YjRhZTkwMmUzMmYxM2FmOWU2YzdiNjQ3NWIxYTQ2MzVjMTkxYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkDF4YAtdTT8ZfXxWADwLcP3V+bL
zpncKtStG1+O/6B2JbOnlIq4UwllA1y4+rpSKMjw0f/bJl9VXrPFdHhEAe+EVuJy
q519d/N6l84X5Xp+GnsAXrEhjSGDm5Ni5fQEDlVA+/Q/UGTKqYhS+mqDKL9Nkbm8
fEplff6ajIOhT6khyeLGLnMbi6MMFFfNtFVMHBQQQHIn3KbIZke/QFOJ69zJB97j
/wSV30kwEsEN/HPwqv4okgcOvCL3NwFxJJFoCI0q+LSmjJZflpj2j2RvWC2GkpJ0
BdhpU+Zib7gmi7UftruCvc0nqxmKNh7HaM8wGS6Vu3mhNYum8jPuB7iZJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItK6QLjLxOvnmx7ZHWxpGNcGRujMB8GA1UdIwQY
MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt
ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4
LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4KMbjND
TsF7OwQM72eiHFiqZxJx/Uzj28X/qUtdG/v7dn6ywggh9WB+xaHFlPcbS6DEInQQ
AAwUf3XAjQ6gcC7wkT2+fIuUUwupdAF1WHxqLZs510tm3WeJHvV6Vw5omhXGeQ1l
1eSUEouxnmopLNyfqt/E/04ApXbwnuCu9yJS2NznGr015S+Gknfa47o8RbVrHP4L
Bj8KlruHzvlnIGf+KF/E5RofuptHWmFEbnrV7OOtaMyz+WbiPX4l8D7CQDLmxdSe
/+Wa89VRcm00qdWJCIIwRtgpljPI6AxYZLb1SCdl0KNC4KtRG7DvmKzsEmeGqFqe
stShH3Bq5NAx8Q==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:16:56 2026 by rpki-client