Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          +D0guObGZnG8c4sVifJ4rrl6PEA4qw0YuOKZw31nBQ8=
Subject key identifier:   34:42:7B:54:F3:35:86:86:2D:F7:45:B4:18:C8:C3:34:65:50:C0:B4
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       01A18A8A17124AC736011331EF4AD668894B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          114A
Signing time:             Fri 30 Oct 2026 02:01:07 +0000
Manifest this update:     Fri 30 Oct 2026 02:01:07 +0000
Manifest next update:     Sat 31 Oct 2026 02:01:07 +0000
Files and hashes:         1: 12oJAQaykF24uiDu8PfEQfF5lC8.asa (hash: Spk8ISKQ3e9V1cZuheGuwP/8MVP77gUbjkWE1om4jWg=)
                          2: BgstHAgngBviD_F80ovwftneFbk.roa (hash: LvdqknknurzyurdSdn/1YfYznErdxTUKQh2TkRGRbFM=)
                          3: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: nxSUEcRdiUcrLk723ZlGBUQOp8sPto13dYOC9GH0zWM=)
                          4: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:8a:17:12:4a:c7:36:01:13:31:ef:4a:d6:68:89:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: Oct 30 02:01:07 2026 GMT
            Not After : Oct 31 02:01:07 2026 GMT
        Subject: CN=34427b54f33586862df745b418c8c3346550c0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:1e:e3:54:90:3d:40:27:e6:45:ab:48:a8:
                    e3:32:f3:50:62:b6:b5:23:a4:d1:5c:de:06:71:61:
                    f3:ce:5f:a7:81:b8:c7:d0:67:f1:86:ba:8e:8d:7c:
                    40:c4:ac:da:72:3d:e0:24:5e:3d:25:17:6a:af:ae:
                    24:71:70:ce:f4:27:3c:97:56:45:52:18:f5:bf:ab:
                    b2:d1:75:fe:c9:3f:f3:f2:2b:f5:e1:ed:94:01:a1:
                    bb:6c:5a:37:e9:e4:b5:0d:50:8a:b7:55:90:6e:45:
                    2f:53:c5:c9:5c:10:42:34:56:7e:4b:54:a4:7d:b6:
                    09:b1:68:bc:56:4c:6c:67:ce:63:37:c2:b6:b0:f0:
                    ae:46:9f:12:92:f0:db:e5:7f:f5:e9:05:bc:7d:89:
                    19:5a:30:ff:f1:6c:c3:1c:40:be:a3:9a:70:a4:63:
                    88:d9:6f:ac:c8:0a:b7:20:f5:58:13:83:dc:c4:bd:
                    b0:6e:8d:0c:17:c9:8d:6c:44:56:ef:7a:17:16:9b:
                    fe:40:c4:eb:1c:0f:39:c8:1d:82:c7:ad:72:0b:9c:
                    4f:86:da:7e:fc:6a:24:f1:69:2c:13:bb:00:ff:ad:
                    35:3e:b9:0f:ef:6c:8a:7b:2e:bb:71:7f:9a:3f:a8:
                    7d:ed:16:10:b2:0f:05:ad:cb:08:93:ca:bb:1f:02:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:42:7B:54:F3:35:86:86:2D:F7:45:B4:18:C8:C3:34:65:50:C0:B4
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:34:b4:97:ec:c8:ae:88:d3:36:fc:3b:89:69:6b:cb:59:
         2e:50:d1:71:6a:10:3c:af:ab:bf:b8:0b:3c:21:a6:75:9c:05:
         98:97:17:a9:2e:e0:38:4b:ca:05:e3:0e:a8:a2:fd:e2:7f:04:
         f1:2c:f1:a3:4b:90:68:51:b8:e3:e5:ab:36:0d:56:e8:b5:36:
         60:68:d2:c3:77:ce:bc:c4:02:c6:bf:01:a6:fb:60:9c:6f:23:
         13:f0:8f:9f:15:60:79:98:02:12:83:a1:94:a9:07:e3:0f:ca:
         24:67:0a:49:f0:4f:03:81:7a:01:f9:4d:80:15:11:19:c2:b0:
         9e:7a:4c:6f:e4:53:32:42:0b:e0:10:7d:76:e1:c1:37:5d:4b:
         f8:65:28:eb:35:bd:b1:4d:16:7d:60:3a:76:93:14:5c:0e:1a:
         f9:11:93:46:1c:48:27:b2:92:d7:27:5c:d2:14:b2:d4:4f:e9:
         d1:13:72:54:58:f5:50:d7:47:3d:df:fd:1d:13:ed:5d:2f:7b:
         92:f6:a5:ac:f1:ac:d0:f6:18:f7:9e:00:bf:78:33:b8:3e:16:
         5d:e4:00:df:af:02:3f:2f:54:4e:01:dd:9f:c4:b5:e5:60:08:
         6d:64:c1:bd:0c:67:a9:70:6e:0a:e8:4c:d0:4c:a8:6c:9e:7f:
         3b:90:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:35 2026 by rpki-client