Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          +JfA13BtcyoUX+iEcodqIWcEhAoJZR/dCjwAvkFtZAg=
Subject key identifier:   7F:FC:6D:5C:53:B6:90:E1:E1:20:AD:9E:D6:B6:83:3C:6E:EA:C7:47
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       01A1513ED59FE02EDD8041685A5E01362CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          1A41
Signing time:             Sun 18 Oct 2026 23:00:34 +0000
Manifest this update:     Sun 18 Oct 2026 23:00:34 +0000
Manifest next update:     Mon 19 Oct 2026 23:00:34 +0000
Files and hashes:         1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
                          2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: SqPChj2SfsRjUMF39sRTmuVv06W/nMPoho8jMuotXWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:3e:d5:9f:e0:2e:dd:80:41:68:5a:5e:01:36:2c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: Oct 18 23:00:34 2026 GMT
            Not After : Oct 19 23:00:34 2026 GMT
        Subject: CN=7ffc6d5c53b690e1e120ad9ed6b6833c6eeac747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:a4:a1:82:86:4a:8c:a3:20:ed:e1:f1:0d:
                    54:d9:04:0e:1a:8c:40:65:75:ea:d9:55:ea:64:29:
                    43:8d:84:3d:81:a2:16:dd:0d:33:62:18:99:d4:9d:
                    46:e0:4b:19:7f:dd:a1:46:c6:7c:f7:56:29:db:fd:
                    1e:27:27:fa:46:08:16:12:9e:87:1b:e5:92:c2:f8:
                    c8:97:9d:21:f3:c7:d2:98:f2:9a:2a:1f:b0:5b:0e:
                    16:76:2a:f9:0c:4a:b6:7a:b5:4b:53:9d:e0:33:c7:
                    6b:61:9b:35:de:4e:3e:73:2a:71:f9:fa:06:8b:27:
                    3f:67:27:7f:b4:dd:28:0f:19:28:30:60:12:aa:36:
                    84:47:14:32:09:60:05:ec:ea:0d:84:48:2c:e0:28:
                    c4:39:c0:de:b3:9c:1d:96:35:59:ab:87:fb:57:85:
                    63:e7:5a:06:5b:fc:6f:7a:bc:1e:92:b3:95:9d:e6:
                    44:de:49:72:45:2d:15:a4:c3:f4:5b:86:1b:e7:59:
                    b9:53:77:5e:ab:6a:11:cd:ba:a6:b4:92:53:5e:fb:
                    9b:00:22:43:b1:8d:19:49:c0:aa:74:e1:4f:84:2c:
                    b9:51:ea:df:f6:0a:d8:94:20:ac:f7:06:ac:0d:19:
                    e2:90:24:eb:02:41:12:ef:95:ba:88:d3:1e:77:03:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:6D:5C:53:B6:90:E1:E1:20:AD:9E:D6:B6:83:3C:6E:EA:C7:47
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:11:d0:6d:64:00:2e:14:5d:58:e1:94:0b:33:8b:a7:dd:
         e0:aa:86:b6:b4:b3:df:dc:50:2a:58:ba:5c:8f:93:2c:77:c3:
         d9:8e:7b:bf:a4:0b:34:22:72:a4:ba:44:14:2f:17:0d:4d:28:
         65:50:c1:f0:e9:59:45:eb:4a:ed:55:27:08:ec:76:4d:d2:10:
         b6:da:de:c4:8b:1d:50:0f:4c:d1:d3:db:66:ef:8a:dd:75:ae:
         fd:6e:33:d3:62:4b:62:25:f9:52:2d:0b:f5:b5:49:cf:f5:ec:
         8e:16:ba:c8:bc:ee:0a:1b:6d:8b:54:e6:e6:bc:47:01:8c:88:
         dd:19:08:02:fa:03:cf:78:75:a2:b7:c4:3e:2d:61:8b:b4:fb:
         16:0c:45:da:6c:e5:50:d3:11:eb:c3:76:8d:d5:27:2b:06:3a:
         ea:b9:b7:01:07:f1:fb:8f:d3:6f:c2:99:e2:14:6c:e1:f7:e2:
         36:af:4b:19:de:be:d2:85:05:ed:ce:31:fb:f9:24:67:b9:32:
         43:6a:60:ce:95:f5:ed:73:7f:c9:63:6b:52:2d:79:be:e9:d6:
         2b:b9:16:d8:23:99:f7:cd:e8:73:f4:42:ca:dd:4c:24:e4:71:
         7d:28:35:88:cd:73:02:46:54:7d:58:ec:42:66:4d:98:87:7a:
         5b:67:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:13:20 2026 by rpki-client