Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
File:                     I2nPaT78ECyTf6ynugnMyuxXSUg.mft (raw, json)
Hash identifier:          qyoCrEAvY+1jFsda6MPxhDuvW9fvMCAqLV2Ipqtk4Vg=
Subject key identifier:   FC:14:13:AB:99:F4:29:EA:D3:D8:21:09:CA:1D:2E:9A:2E:EF:37:EA
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Certificate issuer:       /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial:       01A1551C4B771D65BB19741D9566B1F5ECA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
Manifest number:          25
Signing time:             Mon 19 Oct 2026 17:01:19 +0000
Manifest this update:     Mon 19 Oct 2026 17:01:19 +0000
Manifest next update:     Tue 20 Oct 2026 17:01:19 +0000
Files and hashes:         1: 1AzEpxlToHia7ywPgnnpmJzFraA.roa (hash: qYOvqOXpzVPmF6Jbc9HoDoRx2gEtj+0UY6m/irYtqjA=)
                          2: I2nPaT78ECyTf6ynugnMyuxXSUg.crl (hash: 672kehy5ZTXofkAwPaKxzsi9JlplUtrNcAi/0u0KIWI=)
                          3: Ky30bgCFAJiWkVqMq906lb5RTj4.roa (hash: n8TlDhgLBlnlOh2uvWKa+LVsP820Oh1C+WMR73t3uaY=)
                          4: PxnTuznRRPnTtD95MBnkEkGIaX4.roa (hash: X1si/MvNuRKn6WYCzUjbbp5bWEtLkuTOj59peP9essI=)
                          5: _yaKaBJToAURUuy5J_2ZX4emX3Q.roa (hash: vHbpbkcmG93GMQUubXccTbTZeqYaiq3hArr0LKitXxY=)
                          6: t2eWHO6r_kmQaoKvKqbpMacuacE.roa (hash: FvpEwjPcGwIB6Jh0TDr3BNv2jGu+NiTIDWMXLmMwpi0=)
                          7: vMczrGi6ORE-yZOgy2L6w0bjkXo.roa (hash: UyMf8i98c5uUzf93NivYGmFTli1Mo2kNliLFP7sjKr0=)
                          8: vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa (hash: fudVMhp+cSBY7q1Syleky8IDgMK8QLdzt4Ad5bcZsDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:1c:4b:77:1d:65:bb:19:74:1d:95:66:b1:f5:ec:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
        Validity
            Not Before: Oct 19 17:01:19 2026 GMT
            Not After : Oct 20 17:01:19 2026 GMT
        Subject: CN=fc1413ab99f429ead3d82109ca1d2e9a2eef37ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:2d:27:99:db:36:76:13:55:43:59:d5:79:
                    67:8f:ff:df:90:c7:8c:fc:33:3f:2d:ee:dc:87:68:
                    a0:a4:7e:5d:f3:98:6b:60:8b:1d:3d:10:18:be:a4:
                    37:9a:7e:2e:8c:22:9a:b8:be:1e:8b:a8:d3:f3:6b:
                    4b:b7:1c:b5:b2:f6:1c:e5:2d:26:42:7f:31:b8:1e:
                    c3:2a:dc:d2:9d:0d:78:11:3a:99:17:9b:28:07:dd:
                    37:ea:92:02:f7:cc:50:dd:ed:9a:74:8e:15:2e:4a:
                    d9:09:55:06:5e:33:6f:c0:73:53:4a:53:a1:d3:18:
                    cb:c1:7b:4a:c5:eb:47:f6:c8:43:ae:20:a4:b2:ed:
                    dc:87:1a:28:fa:48:22:95:9d:bc:c7:08:e0:98:22:
                    88:7e:c5:c9:39:e3:fe:3a:fc:16:1c:8d:9a:05:dc:
                    34:06:5b:df:e4:34:67:85:6e:91:bd:22:f7:e5:00:
                    82:23:a4:7f:09:05:50:26:6a:8a:a0:84:3e:61:ea:
                    15:be:cf:7f:0d:5f:a7:07:7a:04:06:43:03:ee:9f:
                    81:66:44:9a:50:31:45:a1:b2:93:d9:66:4b:a2:c4:
                    3d:a5:71:e4:7b:c4:3d:73:e4:a1:02:01:63:46:31:
                    f2:04:db:e5:38:18:5f:06:eb:16:a9:0d:39:ee:c7:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:13:AB:99:F4:29:EA:D3:D8:21:09:CA:1D:2E:9A:2E:EF:37:EA
            X509v3 Authority Key Identifier:
                keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:44:fc:65:83:1d:f6:2a:44:e9:c7:1c:df:e4:82:c6:55:
         20:3e:a4:30:2d:fd:55:c4:41:4d:16:8a:0f:36:05:28:39:b6:
         e5:3a:b7:0f:4c:e3:5f:8f:16:78:41:80:9b:3f:b4:a0:17:81:
         db:8e:80:89:73:62:07:03:1b:db:e3:0e:d2:6a:76:e9:0f:35:
         fd:f9:f9:39:11:d2:65:4d:7b:61:51:1b:96:11:65:46:e6:08:
         48:64:c4:eb:46:6e:3e:5f:11:9f:c2:ce:33:46:50:4d:d0:07:
         a6:42:1d:4b:d3:60:a8:ff:6b:32:7b:4c:26:b1:7a:18:3c:91:
         d1:09:81:28:37:97:56:6f:50:3b:e0:b9:c0:e3:2b:af:2c:58:
         5b:04:5a:bc:5f:3c:a2:48:9e:7f:c3:8d:09:3d:30:a8:3d:21:
         54:f8:c6:e9:61:b1:cd:2c:38:a0:9c:d8:79:5c:0f:29:94:92:
         7e:86:c3:7c:97:97:09:26:be:db:e4:06:cc:5c:9d:ee:52:fe:
         06:d3:7d:68:57:96:68:22:03:71:90:65:eb:21:23:a7:eb:fd:
         a6:96:c3:5b:88:da:1f:48:f5:30:ea:69:47:03:e7:ef:8a:32:
         d1:5b:63:42:97:21:9e:46:13:97:f9:a4:de:bd:ae:65:bb:bc:
         54:3e:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:15 2026 by rpki-client