Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File:                     i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier:          ufOUXNft5KqBv0aeAeK/cOUTdOy6U/KomILzwbWBsL0=
Subject key identifier:   F1:72:20:17:43:8C:A0:AF:9B:EF:F5:F5:A9:6E:C2:59:81:C1:6D:3B
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer:       /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial:       01A08B68B9B5E85DEF04EDEEF38C97F8CBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number:          054D
Signing time:             Thu 10 Sep 2026 13:01:31 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:31 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:31 +0000
Files and hashes:         1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
                          2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: lAkz8K5ogoeA8eU3ijz2bHFlFV/TfjLaoZZk2xJITk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:b9:b5:e8:5d:ef:04:ed:ee:f3:8c:97:f8:cb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
        Validity
            Not Before: Sep 10 13:01:31 2026 GMT
            Not After : Sep 11 13:01:31 2026 GMT
        Subject: CN=f1722017438ca0af9beff5f5a96ec25981c16d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:87:95:e5:74:20:2f:bd:aa:93:e4:b4:98:
                    79:7c:e6:4d:7e:99:5e:45:d7:81:79:48:e9:3e:52:
                    ba:23:a9:3b:f1:a6:14:09:b7:1c:02:1e:6e:db:40:
                    13:0e:0e:f0:a5:48:da:0f:8e:35:c5:4d:14:55:ee:
                    d8:1b:67:55:f3:5c:f9:1f:8d:cd:27:9d:c0:ee:1d:
                    c0:05:02:97:7c:a2:c0:15:00:e6:c8:de:3d:74:fe:
                    dd:02:a2:8f:a9:dd:32:c8:09:8a:88:49:37:d4:a1:
                    d4:8b:e6:22:d2:29:5e:f1:e5:2e:44:a3:46:84:4f:
                    00:55:3f:e7:35:5a:8f:6a:21:b0:97:39:6b:c8:c1:
                    c3:1d:69:02:47:a2:96:9a:53:b4:73:89:c7:ce:c7:
                    27:ec:e5:d3:0e:9c:f0:1a:4f:52:2e:93:e8:19:d3:
                    c5:fb:20:fe:f6:49:0c:00:f4:7a:fb:7d:30:2f:25:
                    6f:7c:65:2a:19:63:30:b7:83:37:5d:48:c9:1d:37:
                    20:b9:e7:f3:a2:01:69:fb:87:84:63:8e:7e:c4:ac:
                    f6:51:52:bd:1e:43:30:f5:2b:5b:aa:99:72:ee:c9:
                    46:b2:7a:1d:d9:67:b0:4d:7e:4f:c0:cb:40:21:99:
                    df:9a:7b:ab:dd:f3:f0:05:05:7f:21:3a:9a:a6:7e:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:20:17:43:8C:A0:AF:9B:EF:F5:F5:A9:6E:C2:59:81:C1:6D:3B
            X509v3 Authority Key Identifier:
                keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:56:4f:62:c0:93:1e:ac:c7:cd:bc:f8:25:ed:eb:bc:a4:
         74:b5:ca:b0:ec:6a:7b:bd:9b:53:52:30:e9:38:29:16:36:5d:
         f0:ea:a9:fc:df:bd:29:aa:dc:f0:76:62:da:4f:3f:71:d8:25:
         21:76:1d:cb:48:00:86:76:38:4c:7e:cd:78:2b:d8:25:c1:46:
         53:c5:ac:6f:82:46:b3:f7:4c:07:37:b7:a0:85:fd:ef:d6:57:
         c8:35:52:5a:55:5c:00:1a:76:b2:55:b7:07:0a:72:fe:dc:3f:
         94:f0:2c:4f:81:76:75:c6:29:2d:90:24:db:9b:50:3a:bc:ff:
         00:b0:5a:14:6c:6d:76:3b:52:63:f4:3c:18:1c:9d:56:fa:f3:
         94:7d:f6:fd:8e:6c:9f:a5:6d:cf:ec:7b:a0:a2:31:51:7a:6e:
         8e:bb:d9:bf:1d:44:5b:6f:b1:45:ef:b0:48:29:20:f6:df:f5:
         77:1e:29:98:63:2a:a1:af:80:2d:b2:3f:a2:b1:86:65:9e:37:
         19:5c:8b:dd:a9:38:cc:59:87:91:ad:45:ce:ba:f8:9a:89:ec:
         a0:2e:f3:fa:8c:ce:17:35:27:f7:c7:e7:7a:9e:bf:b9:69:8b:
         bc:f8:e9:f4:00:57:ec:f0:b6:34:ea:38:df:20:40:7d:f1:1b:
         23:ca:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:41 2026 by rpki-client