Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          crlJfxYwEI0WhY0dC/NaWHH1zBibynZx3O296tYm53I=
Subject key identifier:   CF:19:BC:EB:F1:2C:C3:75:32:13:DD:BA:7F:0A:FA:1A:CA:B8:B6:13
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       01A08D56FF6EE9A25744D4435BB9DEAB89AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 22:01:23 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:23 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:23 +0000
Files and hashes:         1: 3ysBshLGfFUkO4R9WFntyTKDLJg.roa (hash: o/4zJLtevorj8ig3Iu9MQ3MlmidPOIfdoU+Dc49NbUo=)
                          2: EbE_4FlcTeGEtF61cdD338tmF78.roa (hash: UyLGRhRXp3uuZDt1rn1PuLux78VD/m3miAA3O+vEphU=)
                          3: KrSk2jRU2oEHfGvgx800e5GKxhA.roa (hash: Kyx+62+FYOcUJqo2tHJtaKxWwFEQu2NCl98mkWMufAs=)
                          4: RMVjby5XmGEGFEWAsZ-rMJCgUuI.roa (hash: 8V+ZY4rClYbDacZGSf5P4gTGWDrq9UPHV6tcofi/O1Q=)
                          5: TQRQUvnH1PO5qcuLM2kiPL408f4.roa (hash: 1Z+GYULrtYzOcdfSIr9RZ1XILJVYjGdvmENAEPPng/M=)
                          6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: 9+q8a68MjrsDfOAy6sA/WYfPTaRvPniiMLyQ6uq7UqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:ff:6e:e9:a2:57:44:d4:43:5b:b9:de:ab:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Sep 10 22:01:23 2026 GMT
            Not After : Sep 11 22:01:23 2026 GMT
        Subject: CN=cf19bcebf12cc3753213ddba7f0afa1acab8b613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:12:ec:38:d6:61:2e:69:6d:ab:23:42:da:
                    51:a2:6d:f7:45:22:8b:e8:26:ce:55:cb:b2:bf:b9:
                    80:ce:90:fd:27:09:44:a3:a3:01:3b:af:94:6d:0a:
                    ba:b5:03:4a:a8:22:8b:3d:f7:8c:97:e3:a4:20:4c:
                    ff:8c:02:96:d0:cd:6c:db:8f:cd:fa:a8:d6:42:e1:
                    d6:ab:ac:85:a5:97:c4:0a:0a:d8:37:1e:34:2d:af:
                    2f:9e:8d:6d:40:f9:8a:e6:88:45:d4:bf:b7:cc:51:
                    54:08:e6:2c:b6:81:5f:51:3a:09:94:ac:5f:2b:cc:
                    ca:cf:21:0c:9b:86:c8:b6:13:b0:f6:3a:10:7b:e0:
                    65:6e:25:3b:1f:8e:a0:7b:9b:ba:86:f6:70:0c:28:
                    77:d9:07:27:2a:59:78:16:f4:0d:78:5b:03:b6:c8:
                    d5:b0:9f:0b:dd:8f:8b:d4:90:3d:b8:ce:54:ab:c2:
                    d7:3e:fc:e8:3f:40:59:9f:1e:20:bd:5c:d7:3f:d0:
                    18:b6:13:13:4e:d6:e1:77:a2:90:f0:70:b2:e3:37:
                    75:5f:52:06:15:f7:1e:8a:0e:1a:5b:fd:e1:ae:58:
                    2b:88:e5:15:67:65:e2:06:f3:46:d0:6f:a9:15:16:
                    3e:9f:d7:93:82:bd:bc:68:14:c7:f9:32:2b:74:c0:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:19:BC:EB:F1:2C:C3:75:32:13:DD:BA:7F:0A:FA:1A:CA:B8:B6:13
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:18:d2:e1:58:38:3a:85:3c:7e:da:e1:94:58:8b:17:66:2a:
         ce:a4:b6:90:1b:27:cb:76:13:6e:85:22:8a:cc:f6:16:41:23:
         f5:36:f8:74:22:20:0b:16:8d:bf:ef:ae:3b:4e:69:dc:eb:ab:
         94:da:68:92:0d:34:64:91:cf:21:b4:02:c4:13:3c:5b:9c:f2:
         ba:25:01:fb:4c:08:24:03:d3:4c:7c:63:9c:c0:e2:2e:d2:36:
         d9:14:dc:27:4f:d1:65:3d:c3:fd:c9:21:6f:b3:ee:e5:ac:38:
         64:70:1b:83:59:17:52:46:49:4b:7a:d2:4a:56:78:30:62:bd:
         75:4e:09:38:1a:52:fa:d3:78:9d:ec:1c:94:07:e1:f3:08:f0:
         b6:b7:38:92:a4:95:b3:82:da:0d:d7:c0:de:94:ad:7f:d6:f3:
         6c:0d:d6:a1:9e:10:20:e0:54:96:2e:b1:5c:32:12:53:9f:23:
         99:98:67:b5:ae:41:ac:52:3c:f5:9d:7d:8d:9e:e1:9c:29:3e:
         60:63:48:62:b6:2d:65:20:9f:12:b0:4d:75:b3:c8:49:f5:28:
         80:77:d9:c4:c6:25:58:b4:e5:d1:df:99:8b:04:4f:3f:42:c2:
         21:56:3b:b5:a4:b5:e1:1c:82:76:9b:3d:87:a1:4c:67:3d:1c:
         89:6f:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:30:57 2026 by rpki-client