Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          fJHBw+fZOXmoemPgyz1BUi/1f39BFmF5xOTt9CAA0sk=
Subject key identifier:   F7:D1:CF:E2:FC:C6:A4:2E:B5:27:8A:9D:19:C5:95:FD:93:13:4F:91
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       01A08B9F424FFCAF8F30D46B7574ACA2C2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          10C6
Signing time:             Thu 10 Sep 2026 14:01:05 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:05 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:05 +0000
Files and hashes:         1: 12oJAQaykF24uiDu8PfEQfF5lC8.asa (hash: Spk8ISKQ3e9V1cZuheGuwP/8MVP77gUbjkWE1om4jWg=)
                          2: BgstHAgngBviD_F80ovwftneFbk.roa (hash: LvdqknknurzyurdSdn/1YfYznErdxTUKQh2TkRGRbFM=)
                          3: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: K/pjvtnNBzrf2s7kJuZ80c6siqqOSowkUMzcQZaQiQA=)
                          4: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:42:4f:fc:af:8f:30:d4:6b:75:74:ac:a2:c2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: Sep 10 14:01:05 2026 GMT
            Not After : Sep 11 14:01:05 2026 GMT
        Subject: CN=f7d1cfe2fcc6a42eb5278a9d19c595fd93134f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b7:31:94:85:cb:59:ed:6e:91:57:f7:ba:64:
                    cc:a7:4c:d3:2f:65:f2:5c:bc:29:6f:fd:5f:98:ee:
                    e1:a6:2c:3c:34:b2:ac:fd:bb:fd:2c:6a:16:fd:c9:
                    72:4e:92:c2:5e:f4:4e:c2:49:13:4b:9c:25:df:e9:
                    72:75:2d:25:69:f4:35:19:ad:df:ac:ab:6d:e1:62:
                    15:2f:ea:5c:c0:d7:4f:b6:2f:ac:94:78:94:d1:ea:
                    7c:0f:ee:cb:80:1a:57:90:3e:40:93:a9:44:a5:c2:
                    17:ed:be:bf:0c:ba:d3:2d:4b:72:65:61:bc:4a:02:
                    46:58:80:f9:50:c2:1f:1e:1a:7c:78:83:69:19:51:
                    11:ff:be:72:da:d6:0a:24:39:5d:16:bb:4f:07:f8:
                    72:34:11:97:3b:a1:32:2a:00:6f:ad:5e:dc:7c:31:
                    72:dd:22:6d:fb:b9:e6:e3:21:36:c0:be:04:76:b8:
                    cb:19:e8:95:23:8d:07:a4:9b:0c:c9:7b:e0:76:fc:
                    93:e7:2a:6f:a8:49:7f:5f:37:66:79:03:57:42:9b:
                    1b:6c:33:da:5b:33:c0:d6:8c:b0:fb:61:44:3d:22:
                    ac:15:5f:81:94:92:6e:6b:97:f4:d3:ed:9a:e6:25:
                    17:31:17:6d:b6:d2:8a:47:39:6d:5e:d6:8f:2b:b8:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D1:CF:E2:FC:C6:A4:2E:B5:27:8A:9D:19:C5:95:FD:93:13:4F:91
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:9a:75:c9:7f:f4:7e:b2:cf:ca:7f:be:35:f2:63:b1:66:
         a1:50:4c:38:6b:3a:3f:4b:40:0a:f1:2c:5b:53:24:5d:1b:92:
         d8:f8:f5:77:92:b3:ae:07:84:c9:30:a1:ea:85:c2:f6:5f:83:
         8f:64:a4:62:52:70:ff:a5:02:4a:18:e0:0c:89:da:a8:03:2e:
         ca:c8:a8:f8:13:b2:d3:04:56:02:16:6b:c7:b3:89:a2:4a:1b:
         3f:51:b5:66:59:43:a7:89:b0:99:cc:7f:f2:cc:25:51:fe:ad:
         5d:de:15:b3:3e:81:dc:d0:34:a3:3c:13:52:f1:cf:1c:35:f7:
         88:62:c9:a3:ba:83:5a:48:85:f2:9f:c1:70:07:08:a5:23:ed:
         f2:b6:2b:dc:72:06:50:84:21:ac:f0:21:a8:15:20:6a:3a:ee:
         57:07:3e:e7:40:fc:f9:cf:87:11:ef:d5:42:98:7f:02:ce:b3:
         1f:cb:ec:d5:b1:4e:64:a5:df:be:dd:ae:8b:b6:36:bc:57:df:
         92:47:29:db:96:27:d1:e6:b4:7e:a3:74:ba:e0:f7:66:32:f9:
         18:30:83:ae:49:5b:f1:3f:11:35:4d:bc:2c:71:fe:3a:de:b6:
         fb:f4:0a:f1:ee:94:0e:37:29:39:58:86:9e:49:1f:46:d6:c8:
         96:6c:7e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLn0JP/K+PMNRrdXSsosLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwOTEwMTQwMTA1WhcNMjYwOTExMTQwMTA1WjAzMTEwLwYDVQQD
EyhmN2QxY2ZlMmZjYzZhNDJlYjUyNzhhOWQxOWM1OTVmZDkzMTM0ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87cxlIXLWe1ukVf3umTMp0zTL2Xy
XLwpb/1fmO7hpiw8NLKs/bv9LGoW/clyTpLCXvROwkkTS5wl3+lydS0lafQ1Ga3f
rKtt4WIVL+pcwNdPti+slHiU0ep8D+7LgBpXkD5Ak6lEpcIX7b6/DLrTLUtyZWG8
SgJGWID5UMIfHhp8eINpGVER/75y2tYKJDldFrtPB/hyNBGXO6EyKgBvrV7cfDFy
3SJt+7nm4yE2wL4EdrjLGeiVI40HpJsMyXvgdvyT5ypvqEl/XzdmeQNXQpsbbDPa
WzPA1oyw+2FEPSKsFV+BlJJua5f00+2a5iUXMRdtttKKRzltXtaPK7j2vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfRz+L8xqQutSeKnRnFlf2TE0+RMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUCadcl/
9H6yz8p/vjXyY7FmoVBMOGs6P0tACvEsW1MkXRuS2Pj1d5KzrgeEyTCh6oXC9l+D
j2SkYlJw/6UCShjgDInaqAMuysio+BOy0wRWAhZrx7OJokobP1G1ZllDp4mwmcx/
8swlUf6tXd4Vsz6B3NA0ozwTUvHPHDX3iGLJo7qDWkiF8p/BcAcIpSPt8rYr3HIG
UIQhrPAhqBUgajruVwc+50D8+c+HEe/VQph/As6zH8vs1bFOZKXfvt2ui7Y2vFff
kkcp25Yn0ea0fqN0uuD3ZjL5GDCDrklb8T8RNU28LHH+Ot62+/QK8e6UDjcpOViG
nkkfRtbIlmx+eg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:41 2026 by rpki-client