Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          WuihIbJ8cP8HruDgfCFPozjIStE/V0hjYxvFgdtl8GA=
Subject key identifier:   79:CE:06:4C:18:C6:E5:65:C9:F6:DE:C3:DB:69:09:3D:25:B7:09:73
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       01A195E99626E7A1A5A6600822C0991640C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          1AD6
Signing time:             Sun 01 Nov 2026 07:01:15 +0000
Manifest this update:     Sun 01 Nov 2026 07:01:15 +0000
Manifest next update:     Mon 02 Nov 2026 07:01:15 +0000
Files and hashes:         1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: +tH7dKaZnnFCIJ6XuvxTh2RHkMkiYs9sUXT8uMhjqiI=)
                          3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
                          4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
                          5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
                          6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
                          7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:95:e9:96:26:e7:a1:a5:a6:60:08:22:c0:99:16:40:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Nov  1 07:01:15 2026 GMT
            Not After : Nov  2 07:01:15 2026 GMT
        Subject: CN=79ce064c18c6e565c9f6dec3db69093d25b70973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:26:4b:9f:52:74:58:f4:17:52:95:11:63:
                    81:27:7e:36:4d:15:74:c8:6e:05:f7:1f:08:ff:ca:
                    6b:71:56:ac:2c:31:ad:e9:4d:60:38:ad:ea:8e:09:
                    6e:ee:16:3b:b8:87:55:76:c2:4e:5d:e5:a6:e0:63:
                    7d:c8:e3:69:dd:e5:99:00:ff:22:0b:e4:31:5d:73:
                    bc:cb:43:1a:ec:2c:ad:9e:53:db:6d:6e:18:6e:2f:
                    8c:f9:73:4d:d4:23:37:82:06:b7:a6:3f:89:50:83:
                    54:4f:7e:6d:fd:29:c3:ee:bd:b2:17:e5:89:95:23:
                    57:c3:e1:e3:f2:a9:ae:30:c0:38:0e:84:11:c2:66:
                    d8:61:b1:28:6a:cb:db:56:ac:1c:fe:1f:5c:c4:3f:
                    22:f6:52:12:84:19:86:d4:06:b2:4a:1a:51:1c:15:
                    61:df:b7:7b:b7:89:a8:53:c9:1b:89:e0:bb:54:92:
                    b0:35:75:e8:bf:f8:19:97:21:61:44:d8:8d:b7:7b:
                    96:ad:6c:62:1c:ba:4e:02:35:06:0b:c2:45:80:44:
                    69:56:bd:30:67:d8:12:91:0a:f4:c4:72:9c:c8:72:
                    66:13:14:3a:67:d5:4a:ef:24:cf:98:3b:c9:dd:c7:
                    41:a7:a9:73:6d:5b:c5:89:50:61:7c:4b:1d:f8:30:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:06:4C:18:C6:E5:65:C9:F6:DE:C3:DB:69:09:3D:25:B7:09:73
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:8c:4b:17:12:8b:0e:0f:32:66:a2:90:86:4e:fa:0f:c4:
         b0:86:e9:9a:49:fe:2d:27:89:38:ca:60:c5:c8:28:af:69:74:
         ed:77:74:c9:e2:ee:a5:7d:b8:3e:34:c4:a5:f5:d6:62:44:81:
         36:5d:7a:3d:fd:92:60:ea:68:e6:66:87:fe:7f:72:6d:b7:3b:
         b8:4f:4d:d2:18:f1:73:fa:dc:ad:a6:e6:8f:55:4d:9a:e5:3c:
         69:c9:09:84:af:33:99:a6:76:e5:ac:dd:ce:b6:8d:0d:ce:46:
         91:a2:cc:36:07:0d:8e:1a:ca:f6:1c:66:f7:e9:db:c3:6d:21:
         60:a2:c1:79:9d:d7:37:9a:8d:75:28:7b:48:d8:fe:e2:07:52:
         bd:f7:d1:ef:99:48:ca:7a:a7:da:b9:ba:1a:e0:1f:e2:bc:04:
         0b:18:06:dd:44:7b:9d:b2:f7:57:a6:dc:57:71:9a:da:2a:8e:
         2a:cd:8c:fb:28:68:45:36:f3:99:15:be:d3:55:e0:af:70:ac:
         89:8b:43:c0:b4:cc:0f:14:6e:84:e9:5f:c7:e7:8c:ec:63:a8:
         37:a8:31:0f:06:eb:37:24:58:8e:ad:95:27:45:21:c7:e9:26:
         8c:af:20:ae:48:1a:b6:d2:e4:f4:56:76:32:58:c9:32:d4:27:
         0f:99:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:37:30 2026 by rpki-client