Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File:                     IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier:          4aXNaue5S5Zq3swDqOxQg3MFZRexk7hee2eG4uJfZ+M=
Subject key identifier:   F4:BD:45:C4:8C:8E:F6:C6:1E:AC:80:32:3B:FB:BF:E0:99:BB:39:21
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer:       /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial:       01A056D621E3DEF0360092214B6239894021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number:          17ED
Signing time:             Mon 31 Aug 2026 08:01:08 +0000
Manifest this update:     Mon 31 Aug 2026 08:01:08 +0000
Manifest next update:     Tue 01 Sep 2026 08:01:08 +0000
Files and hashes:         1: 2HVbjY7XH7qHKeZZFQnD-Dqb1TQ.roa (hash: L4uIKMCJpumyCtgkJ2Nq73fboi9X5qQpVMHCHCUSm5E=)
                          2: 9s39xRIy0ovz43_NNnpZQL7J2kk.roa (hash: oPXpQgKbn2LA/+wlfEIifDrWhGCahORiCPFzylNJltg=)
                          3: D3zo566csEJxsSuOjYFYuiagAus.roa (hash: hZemx0XbhR2p5mQq1jR04oMUitubYwSob8P7B6vzNuo=)
                          4: EKLPu-_BXps6P12RURAY7iZU_Qk.roa (hash: ykX7VmPm8Crpc7Smnx81p8a2FlVCkIIlwpsXdmp3GNI=)
                          5: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: EzsmnYdjmO/1LcvxfTiNq0W0xZX2teSnjhwYEvt13ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:56:d6:21:e3:de:f0:36:00:92:21:4b:62:39:89:40:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
        Validity
            Not Before: Aug 31 08:01:08 2026 GMT
            Not After : Sep  1 08:01:08 2026 GMT
        Subject: CN=f4bd45c48c8ef6c61eac80323bfbbfe099bb3921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:4d:7a:42:17:6a:36:42:28:28:24:af:20:
                    9b:d8:1c:c0:cb:f1:91:65:72:eb:13:78:91:ea:e7:
                    d4:f4:09:a9:da:86:b4:de:b2:8b:20:28:c0:65:e0:
                    39:88:be:4e:68:41:3f:bd:07:6e:1f:37:a6:02:5f:
                    f1:a6:26:8b:62:1b:46:49:cf:ac:3c:fc:7e:f7:cc:
                    a5:8a:56:51:03:ed:d3:18:63:31:8a:3b:ce:23:e7:
                    0e:e8:f9:a6:06:b3:87:fc:0d:29:a9:c3:96:26:aa:
                    2f:9c:39:54:79:3d:11:01:ed:49:ca:7c:bf:6c:43:
                    69:4a:a8:72:68:ba:b7:7c:c3:8c:53:d8:7d:e0:12:
                    0f:3b:3e:e6:59:3c:3a:81:b5:5e:46:9e:37:08:c6:
                    d3:1f:f4:ea:1e:e4:e4:d5:4a:ea:11:9b:a1:f0:d6:
                    49:33:78:22:f8:b6:da:1b:1b:ee:5f:5b:b2:ef:62:
                    b5:b1:47:53:46:6d:d8:02:1b:89:09:d2:37:12:1e:
                    bd:a2:ce:0d:2a:77:13:b3:20:c3:0b:68:6d:e5:e0:
                    f7:94:c4:06:6e:93:a1:10:3f:6a:85:4e:ea:8c:bc:
                    96:32:40:85:75:94:3a:e2:44:6f:be:1e:35:64:64:
                    2a:07:f5:c6:71:e4:fc:69:96:48:ec:36:a9:2a:06:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:45:C4:8C:8E:F6:C6:1E:AC:80:32:3B:FB:BF:E0:99:BB:39:21
            X509v3 Authority Key Identifier:
                keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:44:75:aa:75:58:20:22:c6:5e:9f:77:11:d7:81:77:22:0f:
         6c:7d:21:64:8c:c6:0e:ae:55:22:d7:cd:10:e9:00:61:e9:c9:
         5d:c8:65:c4:ea:07:72:44:17:aa:26:3f:39:04:12:3e:5f:70:
         94:49:b6:e8:34:4e:88:58:13:03:e7:08:35:9a:51:04:f7:d2:
         ea:9e:1e:ae:4c:a4:f1:87:85:01:9f:1d:88:24:dd:fe:9a:f3:
         a5:1f:4d:4e:2a:00:66:76:80:a2:9f:4a:44:f1:35:76:ec:33:
         1a:e3:b0:65:d8:d6:f5:b8:fe:2b:c7:5b:c9:a9:93:0b:67:9c:
         33:f8:b9:85:00:49:69:73:47:56:2a:3e:df:21:ea:ee:bc:49:
         80:83:19:72:59:92:c7:df:48:65:ae:7a:57:72:14:e6:bc:65:
         cf:15:64:fe:85:36:c8:eb:23:59:2a:4f:89:17:55:47:ad:86:
         53:99:4a:75:da:af:0d:3c:cc:a7:ca:53:57:b2:ca:da:e3:07:
         45:70:f5:72:1d:8a:14:a3:59:da:13:81:b8:01:ee:88:54:93:
         64:52:73:af:98:24:fe:40:bd:af:85:df:3a:ee:e3:ed:a2:3a:
         60:a9:3b:fb:4b:0b:17:0b:d9:58:66:ad:c6:0a:5a:81:8f:3a:
         78:6e:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:02:32 2026 by rpki-client