Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File:                     Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier:          v9p2ZBw5F4KxlOxJx2+ssJv5AgheQvd2Mq0LIQg0rn0=
Subject key identifier:   36:82:DA:15:D3:9F:AE:79:E6:E5:DF:BE:AD:49:B5:67:68:CB:07:64
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer:       /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial:       019F8EA298D09C5A9CDD70F246AC36DC51A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number:          020E
Signing time:             Thu 23 Jul 2026 11:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:48 +0000
Files and hashes:         1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: FxvMvt3GkuoesmQCI+m9cQtgh1WCnfEIrt+A11SJ4TQ=)
                          2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:98:d0:9c:5a:9c:dd:70:f2:46:ac:36:dc:51:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
        Validity
            Not Before: Jul 23 11:00:48 2026 GMT
            Not After : Jul 24 11:00:48 2026 GMT
        Subject: CN=3682da15d39fae79e6e5dfbead49b56768cb0764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:35:98:a7:f4:bb:38:30:57:c9:65:8c:a0:
                    df:04:31:89:99:1d:9b:89:0e:92:35:46:01:84:33:
                    43:5c:21:e3:7f:36:e5:bc:54:da:2d:4b:fe:72:cb:
                    ae:c1:cd:c3:64:bb:c6:9e:9c:7e:4e:9f:17:b2:d1:
                    d0:20:36:88:56:b5:11:c9:55:ed:9d:97:2f:88:4b:
                    d8:0d:0f:dd:45:c2:f9:ce:ba:0d:39:6d:1c:49:b6:
                    0d:96:64:33:13:f1:17:81:f3:46:da:c5:d4:8d:68:
                    8a:77:75:4c:92:e7:fd:70:6f:5f:0c:e6:39:63:ae:
                    9c:a6:bc:48:b6:a3:04:d8:d2:20:1e:46:14:4a:c8:
                    47:36:e8:18:b3:ab:3e:f5:36:18:d0:63:99:54:3e:
                    4c:43:43:74:46:62:8d:01:6e:00:8b:c7:19:22:2c:
                    32:af:c4:1d:73:e9:5f:ad:67:0f:b8:db:0f:a7:07:
                    c3:fe:5a:13:47:7a:27:83:c9:b7:61:d3:2a:76:32:
                    17:a0:1d:08:9a:fe:da:02:88:1d:ed:ea:d1:0b:81:
                    04:64:9c:cf:24:c9:59:d2:29:08:3b:5b:e5:f2:93:
                    11:4d:d0:39:ff:dc:fc:f3:36:05:44:3b:cd:ae:22:
                    84:5c:45:2b:b3:2a:34:37:9b:52:84:4c:ec:5b:5e:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:82:DA:15:D3:9F:AE:79:E6:E5:DF:BE:AD:49:B5:67:68:CB:07:64
            X509v3 Authority Key Identifier:
                keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:90:d0:19:8c:fc:e4:3a:77:04:7e:60:2b:25:47:0e:ae:
         c3:0b:31:e3:8e:0c:53:fc:7d:a5:ff:31:d7:4f:a4:a1:75:26:
         16:fb:08:58:3b:19:6b:bb:02:af:a2:70:50:5b:2f:e8:59:63:
         ce:e2:e8:bf:ea:8f:03:e3:8b:1b:15:ed:f2:fb:6a:63:ae:21:
         a2:b8:ab:7b:ee:d5:07:8d:9c:da:1a:10:3e:a1:7e:e1:a5:f1:
         f1:2c:af:3d:6b:49:08:11:1f:74:46:ae:41:6a:d0:88:a5:03:
         c9:3b:fe:df:9a:31:57:db:6e:68:3d:ea:05:d5:dc:f2:01:88:
         ff:ee:8a:48:eb:04:44:f2:66:12:9a:43:d6:4f:7b:6f:ba:c0:
         35:df:9f:30:06:51:41:9e:7a:93:41:79:8c:bc:e1:38:72:a3:
         70:ab:ab:6b:77:f0:d3:a5:3e:d7:ef:33:f7:24:c3:32:c1:26:
         96:c9:fc:05:d5:3f:23:a5:11:cf:be:00:53:46:68:79:c0:bd:
         70:82:cf:cd:9d:d6:39:7b:b0:9d:33:59:d5:0a:9b:8f:7d:29:
         a6:47:26:2a:26:eb:ba:ea:41:0c:b1:cb:85:b5:c5:03:54:08:
         ef:a0:20:b1:45:f1:83:e5:37:2f:45:a0:2c:ca:71:c9:3d:51:
         8b:48:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:22 2026 by rpki-client