Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          GKY8PUsrpU1a3dofYnJbnNR0AYZPCSB9zH7+BW2+itc=
Subject key identifier:   8A:A1:23:37:60:D0:42:A3:4B:FD:40:8E:BD:2A:76:9A:2B:E0:04:AC
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       01A06F15C8BC7A8E196798901516AA3FED4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0E47
Signing time:             Sat 05 Sep 2026 01:01:33 +0000
Manifest this update:     Sat 05 Sep 2026 01:01:33 +0000
Manifest next update:     Sun 06 Sep 2026 01:01:33 +0000
Files and hashes:         1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
                          2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: ENX+jgafuY6y0SFgRC6WLpKvZ14r51Pjn2x+yj6J75A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:15:c8:bc:7a:8e:19:67:98:90:15:16:aa:3f:ed:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Sep  5 01:01:33 2026 GMT
            Not After : Sep  6 01:01:33 2026 GMT
        Subject: CN=8aa1233760d042a34bfd408ebd2a769a2be004ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:cf:04:e6:f4:de:8d:7c:41:56:d7:9d:0c:
                    b2:63:fc:da:ac:5e:be:7d:7b:d4:f1:23:b2:dc:f8:
                    0f:b2:d8:1f:b2:6c:4e:a7:f4:0c:4f:72:52:9e:69:
                    de:d6:08:bb:40:5b:94:b6:1f:8d:7c:1c:d8:29:8c:
                    dc:77:fd:3b:f7:ef:8d:c4:a4:72:65:a2:5a:9c:91:
                    47:ae:9f:da:c3:b4:09:bc:28:46:da:0e:6c:fd:23:
                    ef:39:c7:eb:e6:51:33:39:78:df:2a:e2:2e:01:4b:
                    69:3c:00:26:0d:81:82:dc:a8:e1:ee:2f:08:a3:6c:
                    63:ee:d8:cc:b1:0f:8a:c3:20:67:22:ce:b2:49:ed:
                    db:86:e0:1a:af:67:3b:6e:70:62:6d:a9:97:df:61:
                    09:b4:b8:a2:bd:f4:0d:55:b1:59:2a:2a:50:5a:55:
                    56:5e:9a:ef:d8:c7:fb:08:b1:ea:f9:04:0e:84:e5:
                    39:ef:a9:01:79:77:3d:36:16:35:9a:20:3b:f1:b2:
                    7e:98:af:d8:16:a0:24:49:e4:29:99:f0:e4:d6:bb:
                    1c:76:9a:52:03:75:08:d4:c5:1d:b7:6c:55:0b:be:
                    93:57:72:af:95:de:4d:7b:e3:99:2b:28:f5:27:e5:
                    e6:0c:e6:4d:7d:30:01:81:91:69:00:ae:01:80:ab:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:23:37:60:D0:42:A3:4B:FD:40:8E:BD:2A:76:9A:2B:E0:04:AC
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:8b:e5:09:5c:4f:12:ba:36:ed:7e:ba:f5:2a:2c:f7:d4:
         01:8b:4e:ba:dd:aa:57:69:6e:6c:33:00:0f:e4:24:61:8e:db:
         6a:4c:66:1f:11:16:6b:9c:56:d9:7c:3b:86:12:58:52:27:7c:
         a8:95:4a:f0:5b:e4:41:5a:4d:e2:ce:d0:9d:9e:29:eb:45:7c:
         00:93:a4:94:dc:06:51:77:08:23:07:d1:c9:11:54:2f:81:5d:
         e0:92:0d:44:6f:2b:ff:77:c6:37:fd:34:a1:cb:a7:49:2b:b2:
         72:3f:d8:fe:81:46:7b:8b:ec:a7:fe:4a:45:e4:38:4f:2a:db:
         f7:9d:3a:25:9b:17:00:f8:1c:d2:dd:95:c8:9a:69:88:a7:e7:
         70:18:d9:ad:84:bd:ab:87:eb:1e:90:2a:a9:0e:d7:9d:3b:79:
         34:5b:f4:2d:f7:0c:65:09:47:7c:5d:f6:1d:ed:80:cc:f7:4a:
         10:d7:da:a5:15:58:bc:16:4b:50:c6:ad:5b:70:bb:3b:34:8a:
         08:af:2a:2c:09:26:bc:e6:49:56:b8:11:e6:8c:38:80:68:44:
         ef:ce:bb:84:ff:39:55:db:6a:6c:1e:ed:e1:6a:99:12:7c:ae:
         8a:f1:f1:28:ba:27:1f:c5:ac:72:af:cd:62:26:a3:80:ea:f3:
         fe:a3:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:00:50 2026 by rpki-client