Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          UF2uaBKjeeafRE0C6ihk05icTyBMp94gMkMc23djkh8=
Subject key identifier:   A6:08:7A:9A:F9:85:85:8B:2B:DE:3E:3B:55:76:D2:5E:08:C9:B3:7D
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       01A119E27A35DA344F27A1A7A1CCA319A376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1A98
Signing time:             Thu 08 Oct 2026 05:00:35 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:35 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:35 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: SJHuK1CKI8YmmbtPCx9AXfB8yYesEgPlp2TOh6u0svU=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: klEMb23dXP9uu-TDOiKli7hNty8.roa (hash: FLiEWfLtfUugEAipWZ3eK7tJPfoBV08kfh4jDSGYtIY=)
                          6: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:7a:35:da:34:4f:27:a1:a7:a1:cc:a3:19:a3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Oct  8 05:00:35 2026 GMT
            Not After : Oct  9 05:00:35 2026 GMT
        Subject: CN=a6087a9af985858b2bde3e3b5576d25e08c9b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:f8:a9:c3:4f:4b:32:70:ba:02:74:e7:e3:
                    4e:06:08:1b:ce:98:d3:56:84:cb:5a:0f:be:14:e3:
                    79:59:6c:f6:e7:6f:2b:d8:21:ae:77:e8:53:80:c5:
                    62:de:5b:82:38:da:21:ea:a3:17:a7:ca:9b:61:72:
                    f8:bf:90:36:ab:c7:40:e3:ef:2a:59:e3:52:fd:1b:
                    75:98:8a:5b:4f:df:35:f3:e9:f2:46:50:8f:84:f8:
                    8b:14:50:e6:f5:7b:a5:f3:23:ef:91:92:50:89:2c:
                    c9:a0:60:8b:84:75:95:5d:9a:5a:0d:ee:6b:dd:15:
                    0c:5f:5c:8c:0d:be:f7:cb:fb:32:e3:0f:96:0b:ca:
                    07:3d:3c:ba:bb:bc:c2:f7:31:63:60:6d:ac:01:cf:
                    33:f1:cc:8b:3d:92:54:5a:db:fb:e6:87:d4:bc:ff:
                    28:ce:3a:2f:40:be:a9:e5:fa:4f:8d:e3:5f:56:51:
                    1e:db:8b:87:7a:79:aa:ee:30:cc:4d:3a:35:46:06:
                    30:73:60:ea:7f:f4:85:8d:71:af:51:ad:9c:35:a5:
                    44:26:18:1b:f3:a6:9b:76:b6:09:87:df:55:4e:7d:
                    c7:f6:c4:6c:c1:4b:07:f0:ac:99:df:ff:eb:08:09:
                    d8:e7:9e:72:4d:c1:03:1e:ee:fa:fd:7f:38:f3:fb:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:08:7A:9A:F9:85:85:8B:2B:DE:3E:3B:55:76:D2:5E:08:C9:B3:7D
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:62:fc:a4:4d:25:a0:9b:82:93:49:fd:62:54:ba:d6:b2:e8:
         c2:89:3e:53:ac:16:af:ff:5c:fc:5a:02:07:e7:e2:82:e3:c9:
         f2:d0:90:48:e8:3c:6a:1d:5b:c2:32:3b:37:51:d7:7b:79:4d:
         28:b1:3f:fd:20:82:36:9b:bf:5a:52:70:2f:22:be:8c:4e:9e:
         01:14:55:14:ce:50:f6:9d:63:e6:80:08:af:0a:05:80:cb:11:
         5f:35:45:bb:c2:46:3e:af:23:1c:f7:37:bf:7e:c0:b5:74:d7:
         f4:dd:c3:91:e9:4c:62:2e:26:9b:f6:35:31:ff:a0:39:b0:76:
         f2:dc:0f:99:3a:9e:17:e2:c5:8d:dd:e5:b1:13:45:68:c4:b2:
         e0:2d:7d:dd:ac:9e:60:ac:47:e5:ed:b0:35:eb:cd:a5:5c:b5:
         c0:13:b8:38:e4:59:d3:03:05:55:21:34:9a:1a:71:1f:d9:ba:
         e8:20:8d:2a:35:e5:1c:e5:94:13:ce:81:d7:36:a1:1e:43:3b:
         79:1d:1f:25:b9:fe:28:04:5c:0e:ad:f6:58:ed:48:34:1d:41:
         e0:33:12:ed:3f:40:71:21:79:bf:5b:5d:f2:a0:ef:55:01:89:
         78:3e:84:8c:31:49:4d:0c:23:b6:b7:9e:e2:59:c7:65:58:ad:
         24:51:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:09:12 2026 by rpki-client