Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File:                     IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier:          GteHBTclmtRh/UtZBSCjCQ9Ibl+xhVt7LaHjCauU0HU=
Subject key identifier:   17:59:71:E6:04:34:CF:98:4E:7B:21:E0:2C:5E:1E:89:3A:77:54:7B
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer:       /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial:       01A15EC3F12BE2965F4A7AA6260D22F7C7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number:          187B
Signing time:             Wed 21 Oct 2026 14:01:01 +0000
Manifest this update:     Wed 21 Oct 2026 14:01:01 +0000
Manifest next update:     Thu 22 Oct 2026 14:01:01 +0000
Files and hashes:         1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: 1SqzM2su69pNNeaPs5xKiTMQE5iakiyECvvMeFmUOT0=)
                          2: a2t-2fJPlSbBUQP7F2vJruftWJg.roa (hash: fgKXAxN2ulEkOQEfrITB7HGb/FRdxrbO10Ou20JoDq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:c3:f1:2b:e2:96:5f:4a:7a:a6:26:0d:22:f7:c7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
        Validity
            Not Before: Oct 21 14:01:01 2026 GMT
            Not After : Oct 22 14:01:01 2026 GMT
        Subject: CN=175971e60434cf984e7b21e02c5e1e893a77547b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:9e:49:57:6f:6f:fa:f3:b5:95:2f:b4:b9:
                    01:74:e8:cc:86:ea:0c:ad:7f:9f:c3:f1:59:5b:46:
                    e1:2e:ec:49:22:c5:4d:81:e8:7f:00:82:cc:73:a9:
                    47:71:c0:16:06:a9:00:03:0c:95:18:15:51:ab:73:
                    9d:f6:9c:3d:f2:bb:5f:47:8e:3e:a7:7a:92:7b:6d:
                    a5:e1:d2:71:ba:27:56:46:cc:62:79:13:c3:cb:ae:
                    4e:74:de:e0:2b:6b:c4:9e:5d:a0:04:c3:cf:41:70:
                    24:d7:44:4f:a3:52:39:32:36:88:0d:ca:f0:3b:3c:
                    7d:f9:ba:7b:c9:4c:1b:0e:12:55:8b:81:7e:06:19:
                    d5:01:cd:44:f6:f4:ea:f2:38:e6:17:c7:e8:33:1e:
                    fb:89:36:d4:6e:92:f4:0f:16:4a:9d:f9:f8:0a:6d:
                    09:db:f9:3c:43:6d:2a:63:5d:fb:28:c2:1a:38:e7:
                    d9:69:5f:46:e4:07:f0:a4:b1:70:89:bb:cf:d5:18:
                    03:5c:37:3e:32:55:95:1d:4d:15:d5:24:9d:5e:3c:
                    28:b3:af:5f:5b:3f:ff:ba:c0:5b:02:f6:94:43:c6:
                    2d:17:f6:3a:e3:c8:0d:13:c7:b6:e6:a7:c6:ec:0a:
                    49:67:be:14:10:b1:78:e2:3f:cb:9e:1d:93:64:d1:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:71:E6:04:34:CF:98:4E:7B:21:E0:2C:5E:1E:89:3A:77:54:7B
            X509v3 Authority Key Identifier:
                keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:50:0d:d8:3f:56:e9:14:60:f8:65:f4:15:c1:26:82:9e:
         7b:19:03:47:44:4c:04:03:5f:72:4f:10:f6:d5:9a:9e:01:0b:
         a0:ae:cd:d4:87:7f:f6:61:3a:3c:36:6b:33:5b:1f:0d:21:07:
         24:83:ad:27:81:e2:82:86:38:27:f3:0a:30:5b:2d:8f:fc:20:
         09:a8:1a:f5:ab:aa:b6:d1:e1:e1:68:92:a5:94:24:b7:6d:93:
         1f:dc:c2:7b:6f:30:b6:25:7d:ba:81:f9:fb:b1:95:38:71:98:
         35:27:a4:ec:b1:1a:66:cb:90:71:d2:8a:fd:1f:94:6a:f5:af:
         d9:a8:ce:78:e4:08:ab:b3:05:1c:25:cc:37:47:96:cd:7a:b4:
         a3:73:39:13:da:9e:21:1a:49:8a:9b:f4:bf:ce:d3:22:c1:fd:
         26:a7:e4:c2:d0:3a:0a:8a:49:af:82:e0:f4:62:4a:19:c1:5e:
         3b:fa:56:85:fb:57:cb:63:81:b9:e9:8c:60:da:e8:02:fd:44:
         11:58:7c:7c:c2:c4:66:61:ed:62:a1:20:dd:c3:f5:75:2c:b4:
         e1:9a:eb:c2:41:6f:aa:2d:e9:f7:f0:a3:1d:5f:b2:2b:3b:74:
         aa:1e:6f:37:18:1b:78:02:2a:fd:e6:c7:45:ba:f9:fd:32:85:
         06:c5:9d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFew/Er4pZfSnqmJg0i98e4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl
MTBiNWEwHhcNMjYxMDIxMTQwMTAxWhcNMjYxMDIyMTQwMTAxWjAzMTEwLwYDVQQD
EygxNzU5NzFlNjA0MzRjZjk4NGU3YjIxZTAyYzVlMWU4OTNhNzc1NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMaeSVdvb/rztZUvtLkBdOjMhuoM
rX+fw/FZW0bhLuxJIsVNgeh/AILMc6lHccAWBqkAAwyVGBVRq3Od9pw98rtfR44+
p3qSe22l4dJxuidWRsxieRPDy65OdN7gK2vEnl2gBMPPQXAk10RPo1I5MjaIDcrw
Ozx9+bp7yUwbDhJVi4F+BhnVAc1E9vTq8jjmF8foMx77iTbUbpL0DxZKnfn4Cm0J
2/k8Q20qY137KMIaOOfZaV9G5AfwpLFwibvP1RgDXDc+MlWVHU0V1SSdXjwos69f
Wz//usBbAvaUQ8YtF/Y648gNE8e25qfG7ApJZ74UELF44j/Lnh2TZNGOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdZceYENM+YTnsh4CxeHok6d1R7MB8GA1UdIwQY
MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt
MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi
LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/NQDdg/
VukUYPhl9BXBJoKeexkDR0RMBANfck8Q9tWangELoK7N1Id/9mE6PDZrM1sfDSEH
JIOtJ4HigoY4J/MKMFstj/wgCaga9auqttHh4WiSpZQkt22TH9zCe28wtiV9uoH5
+7GVOHGYNSek7LEaZsuQcdKK/R+UavWv2ajOeOQIq7MFHCXMN0eWzXq0o3M5E9qe
IRpJipv0v87TIsH9JqfkwtA6CopJr4Lg9GJKGcFeO/pWhftXy2OBuemMYNroAv1E
EVh8fMLEZmHtYqEg3cP1dSy04ZrrwkFvqi3p9/CjHV+yKzt0qh5vNxgbeAIq/ebH
Rbr5/TKFBsWd7A==
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:11:26 2026 by rpki-client