Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          LRlPmdEhgIQz0y3BnrGn+oqpfTVJzmGemeNI764mAZU=
Subject key identifier:   E5:E4:B0:8B:6A:DD:67:7B:BD:26:D8:F9:1E:C1:2A:CA:6F:65:06:D1
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       01A100FF1BA6D905CCCA8AED34387EBD872C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          15DB
Signing time:             Sat 03 Oct 2026 09:01:21 +0000
Manifest this update:     Sat 03 Oct 2026 09:01:21 +0000
Manifest next update:     Sun 04 Oct 2026 09:01:21 +0000
Files and hashes:         1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: mCITObsuA/MjHnL0KdJBQlGAC+7dNhw0AQL4TahkxRQ=)
                          2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
                          3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
                          4: VVq-mRVoIcRkoYA5dVbdWekxbMA.roa (hash: Qwfsg5v8vdbIVLY3OSGQg/SghMAgv1DqrRhE7jEwkx4=)
                          5: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:ff:1b:a6:d9:05:cc:ca:8a:ed:34:38:7e:bd:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Oct  3 09:01:21 2026 GMT
            Not After : Oct  4 09:01:21 2026 GMT
        Subject: CN=e5e4b08b6add677bbd26d8f91ec12aca6f6506d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:5f:d2:8e:92:cf:bb:d0:46:3b:17:fa:2e:
                    11:e0:b0:42:52:96:94:7d:bf:1a:ba:26:62:f0:38:
                    96:b4:0f:a4:83:53:d0:72:d9:eb:6c:63:53:17:b0:
                    f6:b5:b8:f6:b0:56:b3:e4:36:63:15:b3:64:e5:f2:
                    bc:5e:c9:c3:b8:4e:99:35:08:a5:53:af:ee:60:36:
                    3a:7a:66:c2:3d:10:e7:0f:bf:5c:b8:14:8a:57:53:
                    a1:5c:33:ac:d7:21:dc:2d:7f:15:18:25:84:28:39:
                    cd:a0:73:5c:82:00:74:6b:e9:bc:b7:c0:d6:b2:59:
                    34:6e:6b:8e:45:62:8c:02:6f:d1:43:71:08:c5:41:
                    b2:97:09:fd:f9:e3:2d:80:78:2e:89:2a:82:f2:f5:
                    69:7a:cf:1b:c7:b6:d2:65:3d:45:b3:f6:80:3b:51:
                    99:22:15:2e:8a:e6:b0:0c:44:43:2d:81:c6:d4:e0:
                    db:2d:97:4a:f2:47:fb:aa:f7:70:ef:11:bb:0c:e0:
                    d9:45:5c:a8:f6:30:02:c8:29:c6:92:6f:70:4e:12:
                    13:0c:dc:2a:0e:94:2d:82:a3:bc:51:f7:37:3b:e4:
                    c9:f3:fc:5a:f9:81:5d:c3:d0:f7:9d:05:37:6b:b8:
                    c5:c5:4a:b0:ba:92:a5:1f:20:5f:eb:74:79:51:1b:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:B0:8B:6A:DD:67:7B:BD:26:D8:F9:1E:C1:2A:CA:6F:65:06:D1
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:12:e0:b8:fd:c5:97:ca:10:4e:12:ea:69:61:3f:88:fd:
         60:5b:8d:87:65:c5:2b:8e:5d:d4:c0:cc:b1:90:26:3a:70:1a:
         68:9f:3e:63:92:54:f1:d0:02:f2:00:db:5d:18:64:3b:e1:97:
         d5:46:4e:cd:0a:83:8c:14:f5:8f:96:88:7d:2c:c0:6d:9f:77:
         ef:81:96:63:1c:f4:56:e7:c2:90:67:67:c5:6a:56:a3:af:94:
         b3:dd:4a:f6:e6:8b:39:2b:9a:36:8c:be:a2:6d:5b:5b:e6:c7:
         7f:f2:23:7c:7c:c3:80:3f:3e:5f:0c:bb:ed:26:b7:ca:c6:50:
         a6:97:63:dc:79:93:9e:ad:25:fd:c2:c3:24:ae:13:16:7f:4f:
         63:c6:aa:2f:b9:67:99:05:c1:28:25:21:b6:df:6b:d0:a3:b1:
         50:0c:14:1b:83:4c:1a:ec:01:76:d6:3f:fd:67:1f:0d:52:bd:
         56:cf:64:73:24:70:b9:b0:19:e4:db:c6:91:fb:76:c8:79:8d:
         9a:8e:a4:fe:79:69:e7:4e:a2:c9:20:91:1b:11:97:c7:55:ad:
         dd:17:9a:ba:9b:35:18:dc:8c:02:48:b0:c5:7d:82:e0:f7:41:
         f7:ec:3f:bd:0b:a3:75:80:98:66:61:45:07:7a:93:c5:f1:f8:
         d3:c3:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:03 2026 by rpki-client