Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          A8FcmpFZtv0PkVfu7u7cI/xQWNwrgePxNOK4AauneDE=
Subject key identifier:   D3:12:94:FD:D9:DE:FC:36:F2:F2:4B:42:F8:9C:4E:44:7C:60:AF:FC
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       01A0B2AD0AD698921A521A2CFF67AE38759B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          0CAE
Signing time:             Fri 18 Sep 2026 04:01:19 +0000
Manifest this update:     Fri 18 Sep 2026 04:01:19 +0000
Manifest next update:     Sat 19 Sep 2026 04:01:19 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: 6f9bwEZt/EyOQ20BwBf7oiyoIDGKfO9Vt80w/XoQ7Ac=)
                          2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b2:ad:0a:d6:98:92:1a:52:1a:2c:ff:67:ae:38:75:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Sep 18 04:01:19 2026 GMT
            Not After : Sep 19 04:01:19 2026 GMT
        Subject: CN=d31294fdd9defc36f2f24b42f89c4e447c60affc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:e4:0e:51:cd:c4:ea:b6:23:1e:b8:8d:46:
                    89:64:9a:0c:bb:6c:d2:10:21:31:c9:5f:b2:5a:a3:
                    6d:9a:7d:16:dc:ef:07:c4:e7:55:53:5c:c3:7a:5b:
                    78:b4:4d:93:00:18:ac:05:26:29:14:db:b6:a3:91:
                    c8:a7:12:ea:9a:6a:c7:6c:ba:5e:ae:0e:19:17:6c:
                    7d:e1:49:a8:98:c8:00:e7:30:f9:09:e7:f7:20:12:
                    b0:45:5f:8f:d9:fe:1a:ec:ee:84:98:58:2d:66:b7:
                    64:a9:90:7d:ec:68:89:09:41:56:70:49:c3:10:0d:
                    f6:64:21:7c:fc:25:05:93:c8:48:ef:f3:02:7f:95:
                    30:4c:0b:c9:24:98:08:41:11:30:59:94:5f:68:b2:
                    79:e7:6f:65:21:1a:ff:0f:b2:50:bd:2b:61:97:cd:
                    ab:0e:2b:8a:72:40:7c:51:fd:be:b1:cd:fc:5b:d2:
                    ae:80:63:a7:6d:c1:9b:13:7d:e9:81:43:46:19:99:
                    c3:4e:ee:30:2a:c5:14:78:fc:bb:80:2f:8e:42:df:
                    81:7b:32:9a:a3:49:b5:c6:d2:35:ff:4d:f9:ed:12:
                    61:31:dc:65:d9:c3:27:15:d6:fb:84:10:8a:cc:a9:
                    27:fc:9c:3b:07:c4:45:6c:61:b5:8b:9d:e8:91:62:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:12:94:FD:D9:DE:FC:36:F2:F2:4B:42:F8:9C:4E:44:7C:60:AF:FC
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:01:23:c1:71:46:33:5b:bf:ab:f3:48:7a:0d:1e:83:10:
         99:6b:e2:2b:65:76:5c:b9:ad:6d:f7:fa:96:c3:19:58:6a:7f:
         3c:59:46:49:93:4d:da:c1:62:78:91:0d:2c:3d:fc:09:80:4f:
         61:70:60:ed:57:21:aa:9d:e8:25:a2:e4:06:9d:bf:df:2b:a9:
         09:21:95:38:21:50:37:88:15:58:bb:99:b8:b5:bf:51:90:cd:
         1b:b7:2f:e7:d1:79:36:0e:49:cf:79:fc:08:91:11:0f:6e:6c:
         82:b0:71:ef:a2:43:90:cf:5c:e8:46:7c:fb:e7:1a:43:56:ae:
         4c:e4:e5:f7:7d:fe:83:cd:6c:4f:f7:37:d9:6f:0d:a0:ad:28:
         7e:55:90:58:05:ec:c2:e1:2d:3e:70:62:01:b8:00:fc:35:ba:
         33:05:d9:cb:ae:26:ff:1a:98:b2:c6:e2:28:8e:49:23:07:0b:
         06:0b:9d:7a:fe:e0:7a:e6:27:d1:33:d3:69:1a:a8:d9:29:cc:
         66:5b:9a:c1:64:e1:16:be:cb:2e:df:f6:b6:ff:7c:ca:26:bb:
         a5:98:7c:1c:1f:f0:8d:1a:75:7b:78:cc:3a:1a:a6:c5:9c:08:
         9f:f4:53:11:99:56:18:50:83:67:b2:76:4b:11:95:1b:0d:58:
         ef:0b:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 08:49:34 2026 by rpki-client