Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File:                     iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier:          DC+4ECzgpnUzqghyL+j2yefR+n7tiTn/XdQpTy5sArg=
Subject key identifier:   E5:9E:61:A7:ED:04:63:2A:DC:79:23:C1:3D:75:22:23:1B:39:62:00
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer:       /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial:       01A0B5E40F20F2BF449EEEEE4DEB100402A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number:          054F
Signing time:             Fri 18 Sep 2026 19:00:17 +0000
Manifest this update:     Fri 18 Sep 2026 19:00:17 +0000
Manifest next update:     Sat 19 Sep 2026 19:00:17 +0000
Files and hashes:         1: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (hash: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw=)
                          2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: fFqnZvMflaAoYezeX+pLnUqRw3g+URTC9Xw65ZBP1GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:e4:0f:20:f2:bf:44:9e:ee:ee:4d:eb:10:04:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
        Validity
            Not Before: Sep 18 19:00:17 2026 GMT
            Not After : Sep 19 19:00:17 2026 GMT
        Subject: CN=e59e61a7ed04632adc7923c13d7522231b396200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:79:e9:1e:2c:c7:4a:17:bd:ce:d3:78:3b:
                    6c:1c:e6:5f:13:78:dd:c4:31:aa:09:e9:37:4a:29:
                    d4:e8:01:3c:88:51:c2:5e:0a:97:2e:78:ba:fa:67:
                    00:71:38:39:c7:39:10:34:79:ae:98:7e:a2:dd:c7:
                    f5:93:a4:c9:1b:80:6a:9e:dd:d9:83:77:63:7d:4f:
                    6f:f7:30:ea:46:75:28:b3:0a:37:85:21:82:5d:9f:
                    bb:9a:76:f8:e1:a7:ab:da:fd:d3:61:4a:f8:f8:60:
                    fa:d0:53:f6:be:55:25:16:f6:b9:2d:50:d9:f2:dd:
                    cc:d1:c6:81:bc:e6:a2:ba:c9:64:93:dd:54:b1:b6:
                    7b:c7:f3:4b:3f:95:ff:92:77:18:1d:25:e6:41:fb:
                    49:26:64:3e:05:24:4f:90:ed:8d:51:48:98:7b:0a:
                    d9:ad:fa:97:26:f6:c0:d1:69:41:d2:6b:80:93:e8:
                    59:a0:a3:bf:fb:8c:b0:59:72:2c:cd:d9:1c:74:08:
                    6d:08:71:65:cd:bb:5c:2b:8e:41:a0:92:d8:1c:d5:
                    d1:10:1c:66:0a:6f:ee:c8:77:28:cf:e1:c0:55:50:
                    7b:2c:81:ca:d0:43:15:05:a7:aa:4c:89:e1:39:73:
                    d6:f5:6d:3b:eb:2e:6d:e5:6d:d6:ac:da:8c:ce:6d:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:61:A7:ED:04:63:2A:DC:79:23:C1:3D:75:22:23:1B:39:62:00
            X509v3 Authority Key Identifier:
                keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:ff:f5:39:ef:bb:b2:62:f1:b9:77:19:3e:26:c1:03:71:
         9e:2b:aa:d9:2c:d2:05:c1:d5:57:5b:b6:7d:12:0b:d7:2b:21:
         de:68:de:6e:36:d5:26:5c:ba:41:3c:78:6b:30:65:33:9e:c6:
         34:d3:e5:77:18:f8:cf:a8:eb:07:6e:de:64:df:45:11:77:7a:
         e2:f3:6b:72:1f:b2:7e:49:2f:69:be:9c:3e:78:3f:b4:1d:09:
         94:25:eb:c1:fa:d3:af:7f:3b:ff:52:44:ec:87:6f:a8:ca:83:
         0a:38:4a:eb:42:ff:3b:7b:09:cf:9d:3b:0c:33:6d:e3:fc:c2:
         0c:dd:16:ea:2d:57:84:17:fe:66:51:c8:51:36:4c:ad:65:00:
         4d:02:3e:87:ee:99:7b:6e:15:57:40:ec:b6:3c:6d:40:37:23:
         90:63:38:ff:51:7e:76:89:b9:f3:3d:60:92:71:0f:c0:45:21:
         40:7a:cb:c9:fc:38:68:b1:fe:5a:a3:5b:5e:50:b6:be:fc:f3:
         b4:c3:95:b3:0e:b5:0a:35:d7:b8:b9:15:b7:de:49:31:73:16:
         d5:78:5b:c9:93:90:d2:1f:69:ae:11:f4:5a:3e:f4:23:ef:f1:
         f7:12:ee:14:b3:bc:61:83:d7:b4:3d:42:ef:99:5e:37:de:58:
         56:00:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:36:21 2026 by rpki-client