Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          TvBZrdzi6DzcdQuhTL5tchCdoT2cSL/htVb9AAm1plE=
Subject key identifier:   4F:96:22:6A:35:BC:83:DB:46:04:F5:31:72:58:BD:DA:4B:9C:BD:C6
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       01A137ED4746C2B097F0CA7F85C6FCCD7517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          098F
Signing time:             Wed 14 Oct 2026 01:00:59 +0000
Manifest this update:     Wed 14 Oct 2026 01:00:59 +0000
Manifest next update:     Thu 15 Oct 2026 01:00:59 +0000
Files and hashes:         1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: Cxq0ac1/Y6EjPBfMfv/7ruKcGMyOA6GZCsTPQSZkXPU=)
                          2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:ed:47:46:c2:b0:97:f0:ca:7f:85:c6:fc:cd:75:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: Oct 14 01:00:59 2026 GMT
            Not After : Oct 15 01:00:59 2026 GMT
        Subject: CN=4f96226a35bc83db4604f5317258bdda4b9cbdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:61:5d:b1:8e:a3:66:b3:b7:b2:d4:70:d6:
                    35:bb:84:1c:79:51:5c:36:e6:8d:99:6a:c6:0b:a0:
                    5b:b6:1f:65:86:ca:4b:a5:a4:9b:e4:0b:bf:7f:2a:
                    de:b8:74:88:9e:1c:55:cc:1d:bf:36:b0:7f:9d:8e:
                    84:ce:68:cb:40:44:7c:34:7d:36:79:e2:98:93:54:
                    28:6f:62:29:86:54:19:0b:87:f4:cc:0d:30:1e:08:
                    3f:1e:30:78:e7:b7:d7:dc:ce:91:b4:18:f3:91:fb:
                    04:15:99:93:9f:0b:2c:91:fa:e0:c7:99:29:79:7d:
                    14:15:17:98:ae:ac:96:b1:e7:70:6d:ed:42:e3:94:
                    26:b9:49:9e:ef:cd:c2:25:c3:b2:00:47:ec:6d:14:
                    36:9a:67:01:39:c8:f4:d1:3e:62:e1:f8:39:ec:5b:
                    1f:c5:a7:d8:77:e4:f1:dc:eb:bd:05:c1:97:16:65:
                    75:a7:97:d8:f7:f8:c3:88:86:7d:fa:b8:3e:a8:29:
                    76:c3:89:cb:00:e8:e2:b9:8c:eb:28:7b:f2:94:a4:
                    60:ba:a9:0a:05:d9:eb:cb:60:77:f2:56:76:cc:b0:
                    0e:61:96:7c:2c:fa:e6:3d:8f:b4:21:92:5a:a1:51:
                    93:5e:25:f5:f8:ea:05:02:ba:da:03:43:49:75:d0:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:96:22:6A:35:BC:83:DB:46:04:F5:31:72:58:BD:DA:4B:9C:BD:C6
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:66:97:5e:85:5a:6c:50:f4:9d:0b:f1:a4:12:1b:9c:e0:
         ca:5f:32:78:a7:8a:05:93:ff:a5:6d:9f:36:33:1c:54:8e:bd:
         e3:13:f2:df:8c:9a:61:37:8c:ce:82:0b:c8:ac:7b:25:c5:a9:
         b9:06:1d:fc:a3:75:da:98:12:56:98:bf:0a:01:08:24:64:f6:
         c9:0a:e1:c3:76:58:ea:fd:69:05:d6:b9:fd:48:1e:8d:be:12:
         d6:43:8d:1e:aa:07:ee:f6:ff:1e:7f:ad:1f:7c:65:57:cc:24:
         f9:73:b0:43:64:a9:fc:f3:98:00:ea:97:73:2e:e3:b5:50:99:
         3e:0b:11:a8:be:30:ee:d4:2c:80:b0:be:bf:8f:d7:44:34:c3:
         30:5b:0f:27:f8:0e:28:7d:aa:a6:84:5c:9a:77:71:83:63:91:
         e7:21:d0:29:79:30:35:9d:02:bf:85:6b:4d:4c:21:52:94:59:
         c6:cf:a4:34:0c:51:70:c6:e3:2f:0b:18:f0:69:f2:f9:4b:96:
         a9:a3:a5:83:a8:74:93:a6:8c:0e:7d:e0:3f:c5:ed:76:ca:3f:
         8d:13:41:5a:6b:d0:67:71:07:a1:c2:84:61:80:24:3a:22:8b:
         1a:df:9e:c0:0d:28:82:c5:1c:49:f1:cc:71:ca:71:19:79:d9:
         d6:b1:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:05:06 2026 by rpki-client