Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          iMqglbI6eANFcNptSc9QNLIff0+mouGihdYS5UuskSk=
Subject key identifier:   90:59:00:0A:FD:EE:F1:B2:F9:53:E1:55:67:5E:C3:8F:76:8C:71:A2
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01A06D951C796302CCE8AF6065674F56F399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          19CB
Signing time:             Fri 04 Sep 2026 18:01:23 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:23 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:23 +0000
Files and hashes:         1: 0ZGTFrZyUevTua2zs9Lh9hQNybY.roa (hash: zKYr5PtkQA7YlTYVOh/meKgufXnFJ/zrbKe55i+T7vI=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: pP/pJAD9yWuaMEeWRmhGdVS6fYxDBWxEmtyiTHH0eGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:1c:79:63:02:cc:e8:af:60:65:67:4f:56:f3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Sep  4 18:01:23 2026 GMT
            Not After : Sep  5 18:01:23 2026 GMT
        Subject: CN=9059000afdeef1b2f953e155675ec38f768c71a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:a7:ec:33:63:36:64:ae:b3:6b:e6:09:6f:
                    b9:ee:ec:0d:eb:0a:e0:7b:61:d6:01:05:06:64:3e:
                    5d:54:4e:18:1d:28:49:4b:e4:d2:dc:35:62:21:cc:
                    77:8e:e1:b8:96:7d:f8:cc:26:1a:b2:5c:ca:6d:e3:
                    0c:0b:5a:86:a2:83:ec:aa:32:1b:8e:63:b9:bd:55:
                    54:67:b3:51:bb:4d:e3:a7:b6:8b:27:f3:ef:d7:ad:
                    1c:c2:0b:34:72:74:83:dd:3d:93:48:09:52:f9:90:
                    c5:b1:bc:66:35:b2:2a:70:e0:9f:1a:12:fe:5d:28:
                    1d:44:eb:25:d9:4c:7f:58:1b:e3:76:dd:4e:86:b6:
                    e9:71:c8:79:b5:71:bd:f7:e6:0a:de:48:41:f8:b0:
                    07:d3:09:28:e2:08:09:c7:9b:b3:46:df:23:e9:ac:
                    9d:de:90:f5:03:5b:d0:7e:80:5c:cb:fb:e0:c5:1e:
                    4f:53:fb:34:d7:a7:8b:cb:da:99:f1:d6:aa:8b:a7:
                    3a:3a:f1:43:4e:45:57:81:0b:2f:35:41:73:1a:c8:
                    e5:4c:c7:6e:c9:6e:dd:71:d0:17:ba:dc:29:e1:66:
                    aa:eb:01:92:1f:ca:5d:b8:e3:b3:cc:f5:e5:a7:73:
                    63:88:ff:f7:be:69:d7:ff:18:9d:b2:b9:86:91:4e:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:59:00:0A:FD:EE:F1:B2:F9:53:E1:55:67:5E:C3:8F:76:8C:71:A2
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:d8:0d:98:61:62:bf:48:51:15:72:e3:4d:ea:77:b2:69:
         36:84:f9:73:43:2b:05:23:57:46:f8:d0:ae:b7:96:0a:9e:cd:
         cc:4b:32:63:a8:6f:36:88:f3:1d:c6:0a:32:26:c9:13:3c:6d:
         2e:0b:c3:27:72:59:13:78:8d:3d:74:11:0d:b4:bb:36:55:ee:
         a2:b4:ee:fa:59:2d:fb:6a:62:0b:da:fd:12:d4:d1:72:6f:e9:
         0e:38:04:f6:99:8e:53:99:dd:34:37:38:63:c6:bd:60:ca:41:
         43:a9:f2:e1:4f:7e:5a:ec:3a:ad:be:0c:f1:a9:a2:3d:24:9b:
         7d:25:85:c2:88:95:30:02:49:d3:8e:97:95:6e:a6:9f:2b:e4:
         b9:88:84:b1:1c:29:3e:e1:2b:f9:80:1d:c5:13:a2:e9:70:8f:
         f0:83:74:6b:2b:8e:6b:a3:3f:2e:c2:ea:c6:d6:c3:bd:66:4c:
         f5:c2:f8:a2:4c:70:aa:f4:4d:3f:81:e5:c5:4a:67:aa:13:d1:
         72:92:5b:53:2a:71:80:ac:46:26:f8:4a:c5:9d:3d:d6:26:6c:
         6f:b6:da:d0:e2:ec:9b:99:19:20:23:68:2c:15:54:4a:0c:7f:
         7d:f5:8f:30:2f:af:5a:e2:98:46:65:f8:56:7d:f1:e0:bd:dc:
         3c:7f:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:49 2026 by rpki-client