Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          P+HtnG8DbFmBpuKi1HTN3VtD4VO8D6reJaErW9/OlBE=
Subject key identifier:   0E:D4:06:D3:49:C9:0E:A9:01:69:78:68:43:9A:CC:8A:6D:62:EE:E7
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       01A180E245B5DB552C6932270ACDE20198AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          1145
Signing time:             Wed 28 Oct 2026 05:01:14 +0000
Manifest this update:     Wed 28 Oct 2026 05:01:14 +0000
Manifest next update:     Thu 29 Oct 2026 05:01:14 +0000
Files and hashes:         1: 12oJAQaykF24uiDu8PfEQfF5lC8.asa (hash: Spk8ISKQ3e9V1cZuheGuwP/8MVP77gUbjkWE1om4jWg=)
                          2: BgstHAgngBviD_F80ovwftneFbk.roa (hash: LvdqknknurzyurdSdn/1YfYznErdxTUKQh2TkRGRbFM=)
                          3: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: qYKC20ygpBHW8/6tMdT9/uwYJcCCP22sx9hBuZF69Co=)
                          4: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:45:b5:db:55:2c:69:32:27:0a:cd:e2:01:98:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: Oct 28 05:01:14 2026 GMT
            Not After : Oct 29 05:01:14 2026 GMT
        Subject: CN=0ed406d349c90ea901697868439acc8a6d62eee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:70:0e:eb:fd:8e:de:8f:de:a1:e6:32:7c:
                    f2:ad:bb:fa:b9:5b:82:25:32:8e:5e:00:21:9a:5c:
                    8d:21:af:09:ef:a2:41:f5:c3:3a:85:68:ff:f1:77:
                    2d:67:4a:51:6e:c6:a0:0d:de:74:3f:da:f8:d0:44:
                    c4:ac:0e:10:ce:36:81:5f:14:5a:57:6b:be:18:b5:
                    13:25:f9:ff:1c:80:d0:93:1a:df:81:7c:50:a4:4a:
                    33:61:d9:25:a4:0a:96:6a:f6:6c:ca:c4:3e:c8:85:
                    d4:67:74:e0:f5:72:1c:27:dc:0b:ea:e0:1d:85:b0:
                    0d:6c:c0:fc:9a:25:e2:2a:32:a9:1d:cd:75:2d:dc:
                    53:a1:fe:4b:dd:23:5d:b2:e2:16:0c:34:b6:13:e9:
                    39:ad:09:c7:cc:e6:de:e1:c7:9c:29:3c:6c:ce:67:
                    c7:f3:02:db:be:6a:46:09:8a:21:80:cb:91:b4:dc:
                    4a:bf:0b:62:e7:87:99:b7:70:65:a8:27:70:df:99:
                    be:2c:e6:c3:4a:bd:11:0c:7c:2e:6e:d3:0d:20:16:
                    38:30:02:b6:0d:10:6d:61:26:f8:26:d1:7a:ed:61:
                    ff:c7:fc:a4:bf:70:0e:e7:97:08:b6:31:4e:15:bc:
                    05:2a:0a:dd:85:1b:25:07:42:d6:8b:38:95:76:8c:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:06:D3:49:C9:0E:A9:01:69:78:68:43:9A:CC:8A:6D:62:EE:E7
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:32:ce:e8:6c:e7:59:98:89:77:8b:16:47:ac:2b:89:be:
         af:4c:e0:25:f1:15:24:95:b7:c2:1b:de:c3:f1:8c:2c:a2:58:
         98:39:ea:f5:d5:20:14:8d:19:37:34:39:75:8f:c2:d0:d9:be:
         7b:16:01:e0:1d:f9:9a:71:ce:ee:a3:99:9c:f0:b8:28:82:d6:
         a7:c0:7f:f6:ff:7f:c2:cb:b4:24:a8:b4:3d:55:fd:51:3b:aa:
         4f:9b:eb:8c:6d:03:26:90:3a:2b:72:f9:6b:47:38:8b:0b:b9:
         b0:2f:a2:a4:d0:3f:5f:2f:3f:32:b0:a3:71:c1:bc:d6:08:8c:
         68:5b:01:c3:ac:0b:6e:df:28:5c:ba:6e:2a:8d:d9:0e:05:dd:
         0c:af:33:71:0f:c3:13:d0:13:ae:e3:44:18:3d:78:65:ab:73:
         c6:99:78:a7:eb:e8:24:fe:27:97:52:5b:15:82:59:a4:36:fb:
         5b:e5:84:f0:81:f6:3c:43:a1:93:3d:06:af:8e:22:24:2b:d6:
         bb:b1:5f:39:a3:4f:1a:e4:94:43:74:9c:0a:68:68:46:55:45:
         20:da:39:a1:33:08:5c:c7:ca:cc:17:0e:89:a5:4f:ab:d4:57:
         5c:95:a2:04:29:46:27:e3:b9:08:3c:ca:30:01:7c:32:29:66:
         2f:6e:38:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4kW121UsaTInCs3iAZiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYxMDI4MDUwMTE0WhcNMjYxMDI5MDUwMTE0WjAzMTEwLwYDVQQD
EygwZWQ0MDZkMzQ5YzkwZWE5MDE2OTc4Njg0MzlhY2M4YTZkNjJlZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXdwDuv9jt6P3qHmMnzyrbv6uVuC
JTKOXgAhmlyNIa8J76JB9cM6hWj/8XctZ0pRbsagDd50P9r40ETErA4QzjaBXxRa
V2u+GLUTJfn/HIDQkxrfgXxQpEozYdklpAqWavZsysQ+yIXUZ3Tg9XIcJ9wL6uAd
hbANbMD8miXiKjKpHc11LdxTof5L3SNdsuIWDDS2E+k5rQnHzObe4cecKTxszmfH
8wLbvmpGCYohgMuRtNxKvwti54eZt3BlqCdw35m+LObDSr0RDHwubtMNIBY4MAK2
DRBtYSb4JtF67WH/x/ykv3AO55cItjFOFbwFKgrdhRslB0LWiziVdox8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7UBtNJyQ6pAWl4aEOazIptYu7nMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpgyzuhs
51mYiXeLFkesK4m+r0zgJfEVJJW3whvew/GMLKJYmDnq9dUgFI0ZNzQ5dY/C0Nm+
exYB4B35mnHO7qOZnPC4KILWp8B/9v9/wsu0JKi0PVX9UTuqT5vrjG0DJpA6K3L5
a0c4iwu5sC+ipNA/Xy8/MrCjccG81giMaFsBw6wLbt8oXLpuKo3ZDgXdDK8zcQ/D
E9ATruNEGD14Zatzxpl4p+voJP4nl1JbFYJZpDb7W+WE8IH2PEOhkz0Gr44iJCvW
u7FfOaNPGuSUQ3ScCmhoRlVFINo5oTMIXMfKzBcOiaVPq9RXXJWiBClGJ+O5CDzK
MAF8MilmL2444w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:08:14 2026 by rpki-client