Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          MLVKKvdiXqeC33+8qh/t7FY1voar9KnQzQqenE5UnGY=
Subject key identifier:   EA:71:5D:37:20:47:E3:2D:BD:E5:2F:C4:D8:FB:0D:2D:9B:E5:2D:32
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       019F9135A19A10D806FF728DFE6E45A80EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          0D5E
Signing time:             Thu 23 Jul 2026 23:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:38 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: beOyYRDyoqIlRltL93QmdGLiVwGrb25i6mlpjxsZdOY=)
                          2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:a1:9a:10:d8:06:ff:72:8d:fe:6e:45:a8:0e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Jul 23 23:00:38 2026 GMT
            Not After : Jul 24 23:00:38 2026 GMT
        Subject: CN=ea715d372047e32dbde52fc4d8fb0d2d9be52d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:37:a6:16:3e:0b:03:00:bb:88:b2:03:bd:
                    46:d5:c9:bc:7a:9b:21:06:11:f8:02:57:64:ba:f0:
                    af:f4:e4:b5:69:01:2b:e6:55:59:27:89:67:c9:89:
                    a6:3c:9e:a5:fc:d3:53:cd:b9:e3:fd:f6:db:d1:7e:
                    a9:04:fb:e1:77:b3:99:f2:7b:26:e6:bf:0d:87:53:
                    03:35:7c:3b:ed:eb:95:3e:8c:21:9b:cf:bb:ec:fb:
                    b8:39:35:99:83:17:6a:8d:29:d3:84:3b:0a:14:fa:
                    ed:a5:27:f6:33:d0:28:74:2c:f2:c5:e8:d0:4f:83:
                    b2:8f:78:68:e2:ff:59:64:55:9f:dd:d9:eb:cd:67:
                    3d:73:91:7a:0a:30:8f:0a:46:a7:69:6e:19:1d:6d:
                    46:41:fd:40:6a:07:6e:c0:70:20:f6:ce:25:7e:2e:
                    24:cb:92:b3:55:95:40:a5:7f:12:c7:bc:58:6d:63:
                    3e:c1:8f:5e:c5:1c:1a:6a:e6:ee:13:b2:9a:c5:89:
                    9d:38:47:d3:56:03:8d:b8:ae:a8:93:94:fb:60:2d:
                    3b:d7:9d:50:24:a3:e3:9b:42:98:6b:1f:df:27:29:
                    03:89:e8:d7:80:23:e8:b4:8f:1c:65:30:76:2a:92:
                    83:68:e6:0f:d3:93:31:f6:92:31:13:0b:83:d1:d9:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:5D:37:20:47:E3:2D:BD:E5:2F:C4:D8:FB:0D:2D:9B:E5:2D:32
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:c1:1c:13:b7:f9:e6:5e:7e:19:71:4e:cc:de:58:7f:91:
         de:65:73:d4:77:08:f5:64:36:1e:5b:7d:a1:79:aa:3d:03:ce:
         db:df:60:92:e5:a6:3c:e8:46:22:e3:09:e8:2e:e4:40:9d:b6:
         18:29:ab:53:ce:86:07:1e:cb:da:d9:17:92:6c:14:b5:81:2a:
         e4:b9:5f:dd:cf:da:4b:36:57:b1:4c:0b:c5:09:1f:d4:34:5f:
         fc:e7:29:07:da:98:65:24:0d:9a:a1:9a:a9:c0:ad:18:c7:d3:
         75:39:1a:42:92:81:82:78:ab:81:53:f6:8a:c4:d0:fc:c1:75:
         ad:2c:f3:ad:9c:b3:73:25:d0:db:9e:3a:89:1e:00:9e:bb:17:
         ef:17:fa:89:56:14:27:25:db:62:25:71:06:e7:bb:ab:ef:fe:
         56:59:2e:4a:56:e3:9d:9d:ea:16:4d:e2:5c:8e:b9:f3:54:54:
         b3:e1:a0:46:15:26:2d:95:bc:0e:2e:91:6a:38:58:3f:78:aa:
         62:ca:f5:e7:61:3c:1b:25:ff:22:db:90:d2:57:34:f9:43:a1:
         58:4c:e8:f2:a0:4b:b5:68:de:67:77:21:d3:20:5b:99:c1:c8:
         6a:06:a4:c1:41:ed:c5:c7:a1:83:75:af:4d:4c:06:6b:f0:4a:
         bb:c6:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:11 2026 by rpki-client