Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          hgMMnDc0lgsWZJnHDc5HzPpcizYzWUtMOfB9KBYRkho=
Subject key identifier:   3D:98:8F:EA:D3:7E:DA:82:C0:AB:35:14:C5:2F:20:C9:EF:82:62:67
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       01A110E0922E70FC3F77D806E91911834018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          03D3
Signing time:             Tue 06 Oct 2026 11:01:55 +0000
Manifest this update:     Tue 06 Oct 2026 11:01:55 +0000
Manifest next update:     Wed 07 Oct 2026 11:01:55 +0000
Files and hashes:         1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
                          4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
                          5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
                          6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=)
                          7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
                          8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: q05G8zVV8iDtN+DovCpg7Q8unx9/DvpXkdH54y2WGjQ=)
                          9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
                          12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 11:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:e0:92:2e:70:fc:3f:77:d8:06:e9:19:11:83:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Oct  6 11:01:55 2026 GMT
            Not After : Oct  7 11:01:55 2026 GMT
        Subject: CN=3d988fead37eda82c0ab3514c52f20c9ef826267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:ec:f6:4d:25:ca:e9:9c:62:3e:06:02:87:
                    2e:e2:3b:f1:6e:9e:fa:3e:aa:20:60:eb:12:85:8a:
                    50:4e:57:26:07:32:2a:59:4f:19:83:74:08:93:3a:
                    fa:a5:b7:55:45:23:5c:dc:bd:84:87:23:56:6e:7a:
                    83:4e:1d:88:d5:73:27:30:48:f7:a5:e5:2e:f4:01:
                    61:37:9c:f1:e7:aa:2c:bd:a0:32:3c:c9:d7:b3:ee:
                    eb:65:fa:39:a8:5e:12:34:ee:78:7d:60:ba:b1:a6:
                    af:2d:4f:b5:bb:67:02:95:cd:98:9f:e1:89:e9:2c:
                    b5:b1:f4:5c:98:f3:25:25:8a:0a:b5:14:8a:01:7d:
                    68:0a:8a:f4:48:69:55:83:bf:5a:45:ce:f4:d0:94:
                    b9:f2:dd:8e:72:2d:1b:cc:f7:aa:b3:2b:85:bf:9b:
                    e7:7f:57:f6:ba:9e:d0:74:7a:74:3d:d5:05:3a:60:
                    9b:3c:d3:02:8c:0d:89:95:cb:fd:7d:1f:b1:5d:9c:
                    07:9c:f5:9c:6f:23:7d:31:a1:ee:d1:55:66:28:98:
                    c0:a1:26:92:ca:07:44:4b:3e:6e:80:0c:53:8f:f0:
                    29:be:3d:f6:c9:41:46:23:cb:e7:51:91:05:79:32:
                    9e:7d:73:cb:0b:c8:b2:35:5d:41:1f:e3:7e:79:fd:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:8F:EA:D3:7E:DA:82:C0:AB:35:14:C5:2F:20:C9:EF:82:62:67
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:20:cd:98:dd:e8:3c:49:00:6d:17:ea:7d:fe:7e:15:fd:
         95:e6:57:66:3e:f0:47:f8:47:ed:3a:96:02:0d:81:52:e7:14:
         42:4d:fb:5e:f6:06:03:59:60:9b:51:13:81:83:67:28:d7:16:
         d0:2c:11:ae:8c:e6:59:f2:2e:b2:f3:d0:ab:9a:cd:99:a1:44:
         e2:b6:b9:7b:e6:77:b8:57:96:e1:be:a3:14:1d:5e:8e:e8:ab:
         2a:c7:83:77:09:cd:27:5e:fa:fe:7e:e2:29:07:a4:0d:41:e1:
         46:3e:50:68:87:5d:6f:60:a3:6c:1b:37:9f:5a:d3:54:7d:f6:
         15:27:9c:3d:1b:43:4d:7f:c0:c4:e2:2f:43:38:d3:4d:f1:4e:
         1b:61:57:0b:be:55:7e:35:0e:d0:61:7a:d0:9d:ac:a2:d9:10:
         d5:7c:90:a1:07:ce:c7:91:0c:19:45:c3:3a:0d:ae:b9:01:06:
         76:74:4e:dc:81:d4:dd:11:28:99:85:2a:75:7e:2d:32:b7:e9:
         0f:ca:93:81:bc:37:40:05:1b:38:64:b2:ef:0e:84:c9:04:d2:
         66:ea:22:dc:20:31:03:13:1b:f9:eb:a5:e6:82:16:81:f0:b1:
         13:3d:bb:56:c0:eb:16:3d:6d:51:a4:5b:95:b7:b9:5a:05:0e:
         25:09:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:00:26 2026 by rpki-client