Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          y60Ndt5/PNkYuI50hBMpYd6Rma89IywD5Sh4Dm/87QM=
Subject key identifier:   37:29:49:4D:53:9E:92:84:C6:93:05:16:DD:7B:D2:B3:3D:54:4D:E9
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       01A1569CBDED3357452693A598A59D2FC798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          08FE
Signing time:             Tue 20 Oct 2026 00:01:15 +0000
Manifest this update:     Tue 20 Oct 2026 00:01:15 +0000
Manifest next update:     Wed 21 Oct 2026 00:01:15 +0000
Files and hashes:         1: 3ikFkz22nnfnGP5hBgt33RenFhw.roa (hash: US6DxVZfyMhjP4KTe/oYRgElRLqid9PGBdLialNLJ/g=)
                          2: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: ctl91JF6rV0g9lxnlsUqGhTqcDjMV39vqkhrQlfb5aY=)
                          3: kYfIEsvVk_BOJEOYO8dzHl3yBqw.roa (hash: DJXKuUPzcXdeE6GAzh9NmYNgIzihSsE64bR0VlSG96A=)
                          4: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:9c:bd:ed:33:57:45:26:93:a5:98:a5:9d:2f:c7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Oct 20 00:01:15 2026 GMT
            Not After : Oct 21 00:01:15 2026 GMT
        Subject: CN=3729494d539e9284c6930516dd7bd2b33d544de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:3f:14:b8:d1:e9:8e:59:76:de:64:98:ea:
                    10:e3:91:86:4f:48:9d:a8:33:16:e5:bf:2b:d8:68:
                    09:1f:80:7f:a9:05:53:ca:38:17:cf:cd:0f:b4:05:
                    28:5b:99:a9:84:25:1e:13:a8:22:dc:9d:b0:8d:58:
                    67:d6:47:4c:7f:63:e5:40:e4:f4:dc:44:70:5d:4f:
                    39:c6:71:19:96:c7:94:5b:6d:42:2e:3c:bc:95:5c:
                    97:1a:50:24:fb:aa:b0:7b:ae:a3:95:e6:dc:d6:4a:
                    e8:30:3f:36:16:85:ae:47:1b:47:fe:5c:f8:5f:90:
                    2c:70:d9:93:09:12:f1:1b:86:59:9f:66:89:42:f8:
                    6d:bd:8f:b9:c0:d5:db:ad:51:d7:53:46:9f:e4:a0:
                    42:71:2b:3f:6f:8f:d3:b6:84:ce:c0:ed:f7:c5:69:
                    ad:9a:20:25:44:db:37:88:5b:20:8b:e9:f0:d7:dd:
                    12:35:c4:6b:88:8b:21:9f:ab:23:c5:bc:e6:3d:40:
                    77:23:32:a0:c0:8c:86:84:6b:52:20:17:fb:55:57:
                    17:e9:38:07:3a:86:0c:09:ed:2a:9f:44:46:24:65:
                    fa:56:2a:b4:91:02:f3:f3:c9:d8:9c:4e:f2:51:31:
                    8d:4c:d6:d7:e1:4d:9a:b2:be:b2:87:9b:12:8c:e1:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:49:4D:53:9E:92:84:C6:93:05:16:DD:7B:D2:B3:3D:54:4D:E9
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:bf:24:ae:87:03:61:08:97:a9:cf:fd:99:22:1a:e7:9f:
         4e:92:c1:bb:19:cb:85:02:34:36:64:7e:b2:f1:c9:44:b0:cf:
         db:75:91:3b:24:6f:2f:4c:f6:1a:8d:30:4b:c9:e3:29:1e:68:
         7b:fa:27:74:92:24:4d:23:dc:c0:67:79:4f:e8:b7:ef:5d:35:
         e1:98:77:38:7c:1b:ec:aa:dd:f4:16:64:db:08:eb:bb:83:5c:
         9a:4b:19:95:28:7c:29:62:d1:94:4e:ae:a8:16:55:f8:d2:68:
         6a:b5:4c:46:99:4e:5e:0e:60:0d:d5:5b:8e:71:f6:cd:1b:1f:
         43:7d:17:dd:17:8c:aa:be:94:34:83:11:33:1b:98:2f:21:1f:
         4c:f4:ae:18:09:16:6e:31:23:45:7b:91:88:aa:72:18:5b:29:
         4c:70:ab:3f:52:98:10:da:e4:9c:6c:11:ac:22:0a:f0:ba:ab:
         a2:c4:fa:89:76:ba:00:86:e9:aa:d0:31:7e:4d:17:62:24:3a:
         52:8c:0f:73:f8:cb:98:30:ef:00:25:55:c3:b4:c5:67:62:6f:
         27:9e:4d:17:d4:c6:44:e5:c0:11:f0:68:11:64:34:14:53:64:
         ab:ce:99:4f:70:c1:31:d0:6e:46:87:67:57:54:62:2b:f3:3f:
         60:80:cd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:03:08 2026 by rpki-client