Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
File:                     iJtz1M6UU7e0MfksRuQpuPbcmiY.mft (raw, json)
Hash identifier:          fNbzVvqj6vXgYZyDMi4IhtHTHW4zy8yC+ixl1RSj5bg=
Subject key identifier:   41:05:80:07:8D:9E:95:85:2B:5D:1F:25:56:3C:52:C5:ED:87:0C:98
Authority key identifier: 88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
Certificate issuer:       /CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Certificate serial:       01A16D5B02889180A766D3F4B09455183FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
Manifest number:          0139
Signing time:             Sat 24 Oct 2026 10:00:43 +0000
Manifest this update:     Sat 24 Oct 2026 10:00:43 +0000
Manifest next update:     Sun 25 Oct 2026 10:00:43 +0000
Files and hashes:         1: H_rPtQXdL7iR9BaeGuZZ55T42HU.roa (hash: F6jNt3doqOXQMFkimOu8rzP3jVoAXF19RtRFGeOypFA=)
                          2: iJtz1M6UU7e0MfksRuQpuPbcmiY.crl (hash: duf9tWNM/YL8hIG9+uWOTrF9yfbKDZts1eXAnwBPuZw=)
                          3: lozJVt5PTJgoxqIDrMsMqD459_s.roa (hash: 7HzUYIBhWv2/Wi7E4WC/t2CSKq5N2SC1HBKlz4UBQdI=)
                          4: yQ0J2-PdwPToNtIhnOnDjLe8Qug.roa (hash: 6LpZ4KgFMshrnFhPmVNsiVJHjgrcoENNbbiekTmoM4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:5b:02:88:91:80:a7:66:d3:f4:b0:94:55:18:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
        Validity
            Not Before: Oct 24 10:00:43 2026 GMT
            Not After : Oct 25 10:00:43 2026 GMT
        Subject: CN=410580078d9e95852b5d1f25563c52c5ed870c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:a1:7c:07:fa:e4:97:a5:2f:c0:35:4c:93:
                    61:e7:d8:e6:85:69:22:57:32:43:ab:93:dd:fe:f5:
                    87:a4:6b:94:bc:07:e3:98:4d:c8:17:d0:c9:56:4b:
                    a2:8a:77:5b:bb:4b:27:70:16:7f:c8:9a:9b:85:18:
                    41:8f:79:2f:68:8a:2c:cd:2f:73:cc:92:7e:f0:48:
                    07:6a:96:5c:cd:b6:3b:37:90:7a:36:f3:75:47:68:
                    6a:07:2c:a5:1b:f3:bb:e3:c0:0b:87:06:65:8f:02:
                    bf:40:51:4e:1f:56:c6:0f:f6:df:9a:af:fd:9b:33:
                    bc:87:c3:01:23:47:4f:21:82:48:bd:bc:81:0e:f5:
                    63:fe:4a:8c:8d:37:cc:4a:a7:e8:db:42:10:d7:90:
                    1b:68:33:3f:bf:93:71:34:71:27:32:d0:b8:3c:53:
                    c7:10:b4:6b:c7:73:7d:00:85:29:ae:2b:2a:d8:1d:
                    78:c1:0b:2a:9f:57:41:ad:e7:32:de:a3:9d:d4:59:
                    f9:3e:d5:4a:00:23:dd:0f:d9:48:55:66:09:ba:cf:
                    a7:b8:1c:e5:30:9e:71:a5:8e:9a:7f:57:15:ff:c1:
                    35:b3:c2:dc:80:03:d2:8c:51:24:09:c8:e2:df:1c:
                    32:f8:68:b5:ce:cd:22:95:ef:27:c1:8b:e6:c2:ee:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:05:80:07:8D:9E:95:85:2B:5D:1F:25:56:3C:52:C5:ED:87:0C:98
            X509v3 Authority Key Identifier:
                keyid:88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:33:ab:9b:6c:c5:a4:61:40:18:b9:be:5f:2e:79:62:98:82:
         5e:3c:52:24:c0:8d:18:7e:02:f0:91:db:20:01:31:86:20:d8:
         5d:bb:2d:2c:43:3a:9b:5d:c5:cb:06:ef:00:52:1d:5e:0b:31:
         4c:e1:d3:64:ba:57:85:26:38:5a:88:1b:9f:59:de:43:b7:40:
         60:50:3a:4b:c1:70:31:a9:e1:38:e3:7e:c1:66:97:f5:55:71:
         72:33:5f:ea:86:04:98:9f:12:b7:61:0a:3f:0b:f7:33:c0:be:
         8d:b7:87:6f:09:f3:21:bb:fe:ca:55:ed:da:4e:80:94:98:ae:
         6d:53:6f:6a:c0:77:bb:fc:46:4c:06:84:51:c6:e3:83:98:ee:
         34:3f:28:6e:8e:59:4d:53:1c:f1:41:78:f0:47:84:fa:24:cc:
         f4:ae:a4:c1:0d:8a:28:a4:09:ae:a0:62:4e:06:65:d3:c3:7c:
         6d:ab:2a:9e:bf:bd:5b:1d:0e:ec:2a:0a:44:cc:67:ff:a9:af:
         df:03:af:69:60:a2:2f:f8:c5:23:97:fe:0c:f8:75:31:f8:b0:
         0c:96:69:4a:09:70:f2:f7:64:1e:83:7b:a6:d8:e7:49:c7:18:
         5f:66:88:0d:f0:5f:01:6a:22:67:77:be:79:0b:e0:dc:bc:2c:
         68:ce:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:29:54 2026 by rpki-client