Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          OXRcL8JzXdkZ5IGzIkPfv54uVa5UF3i2Cj0sHYQXzEI=
Subject key identifier:   D2:0D:BB:5F:33:72:D9:ED:2D:96:C3:8F:33:19:BF:29:A7:14:EE:16
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01A1795F3D930CBC826BD7CE5FA00EA3013E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          098E
Signing time:             Mon 26 Oct 2026 18:00:47 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:47 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:47 +0000
Files and hashes:         1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
                          2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: X+C8SUBXT9D+XxokILf/66ARZa/wkwDskg9ILGnz/Xw=)
                          4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
                          5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
                          6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
                          7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5f:3d:93:0c:bc:82:6b:d7:ce:5f:a0:0e:a3:01:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Oct 26 18:00:47 2026 GMT
            Not After : Oct 27 18:00:47 2026 GMT
        Subject: CN=d20dbb5f3372d9ed2d96c38f3319bf29a714ee16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:0d:44:e8:8e:70:82:44:d6:c9:1b:0e:fa:
                    66:c2:a4:c0:e3:36:d6:4b:85:2c:aa:d3:8c:b2:7b:
                    26:9c:25:02:7c:68:ce:7b:77:f8:ad:e4:fd:9c:7d:
                    31:3b:e0:81:d7:5f:1c:0b:1f:95:9c:a6:0b:01:10:
                    73:82:54:0a:87:85:5e:45:9d:bc:2c:00:5c:3f:df:
                    ec:2f:8e:ea:4d:c5:51:e9:75:90:22:96:b3:46:75:
                    d8:02:53:2f:f1:13:24:73:29:89:13:6a:eb:5f:27:
                    df:3e:98:7c:cc:73:30:5b:08:94:08:96:6f:63:82:
                    62:2d:91:ee:da:b9:21:3d:90:3d:fd:5e:13:3a:10:
                    07:21:22:e9:98:c3:e4:18:19:c4:68:ec:7c:a6:7f:
                    8f:32:ee:dd:21:3c:c4:52:02:ab:f9:98:d2:c2:78:
                    a9:cb:9d:eb:95:b9:d9:9b:f9:e7:fd:f4:a3:a9:87:
                    80:5c:3d:f3:0f:0f:98:55:a6:e5:f9:03:38:af:f8:
                    40:7f:2d:1b:b1:4d:bf:28:00:1d:75:42:e9:a7:fb:
                    c5:4e:30:7b:0e:37:3b:cc:9a:a8:c8:73:2c:76:90:
                    d3:60:29:bb:88:59:de:28:f0:39:2f:1d:02:0c:cd:
                    d7:03:64:84:23:6a:6f:d7:11:68:b2:fb:37:9e:90:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:BB:5F:33:72:D9:ED:2D:96:C3:8F:33:19:BF:29:A7:14:EE:16
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:8d:32:17:80:97:94:6e:8d:c1:75:cd:be:8b:51:62:51:
         88:8a:dd:31:ba:a8:c8:34:01:1d:bd:06:1d:f0:91:f3:f1:e8:
         6a:21:79:99:70:98:b9:9a:ff:3b:e7:7d:d5:b2:6f:c3:ed:e4:
         15:9f:c1:9e:4b:6f:d5:cf:a9:9d:ff:4e:51:71:e0:f8:a3:5e:
         c5:a1:d0:c8:05:6b:a8:03:38:4b:f5:9d:7f:05:06:cd:99:78:
         5e:f1:b1:12:fe:57:3c:25:48:be:a2:fa:c9:3d:11:ae:7f:ab:
         e0:31:8f:fb:4e:39:6e:4d:7c:af:ff:cb:5a:e7:b7:49:25:9f:
         14:47:60:54:ed:14:06:e2:98:7e:93:7d:a6:c8:77:8b:a5:00:
         9a:65:94:7c:50:76:3d:1f:3f:9b:a0:5c:af:47:39:d1:91:6b:
         95:d7:06:b0:57:6f:b5:09:18:5f:c9:85:88:71:e8:66:c9:ac:
         34:dc:90:80:4c:49:5a:8f:79:6c:17:9e:01:dd:48:c1:74:7d:
         3d:9b:0c:e0:76:7f:4c:5b:2a:ab:ab:28:5a:c4:62:bd:b0:6f:
         8e:34:6d:f6:78:85:fe:d0:d3:1f:47:c9:47:c2:09:80:f8:2a:
         42:81:09:c9:b2:cb:01:13:77:20:14:ca:82:0d:bc:c7:d5:54:
         1a:1d:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:03:58 2026 by rpki-client