Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
File:                     cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft (raw, json)
Hash identifier:          GhBBcL5PemKfpWwe6clLTDm2fTlbE2IMAnoWnW9kET4=
Subject key identifier:   FE:22:D6:95:0E:1D:96:49:47:C2:24:41:B6:1D:55:6C:7F:32:23:A2
Authority key identifier: 70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
Certificate issuer:       /CN=70857756acf339fac229a1c9e9c57c4895efa91f
Certificate serial:       019F9023264A28453FEB2EE8E578E37C1705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
Manifest number:          98
Signing time:             Thu 23 Jul 2026 18:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:50 +0000
Files and hashes:         1: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl (hash: d9bDE2Yqj8lYpUx1+Flm8RmY0HYI/B6Tovyjv4KbtK4=)
                          2: vV6KIbjbHUkMbwKENIBHTTXDdrU.roa (hash: EOt5kopYpNaYTBOsxtYCd3AAd6VIO4EI/DljsaKcEE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:26:4a:28:45:3f:eb:2e:e8:e5:78:e3:7c:17:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70857756acf339fac229a1c9e9c57c4895efa91f
        Validity
            Not Before: Jul 23 18:00:50 2026 GMT
            Not After : Jul 24 18:00:50 2026 GMT
        Subject: CN=fe22d6950e1d964947c22441b61d556c7f3223a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:5d:35:54:4c:c4:a2:66:1a:46:e8:ff:61:
                    59:e1:99:4d:d3:76:8c:05:8e:a9:ed:29:a4:e1:8e:
                    bd:15:79:df:3a:2c:d0:bf:7f:2d:2d:58:65:ca:e2:
                    02:14:fe:8e:94:1d:d9:db:88:00:17:7c:ff:69:80:
                    65:7d:47:04:f7:3e:f8:08:11:dc:f6:4f:46:24:88:
                    0f:12:72:2b:bf:2c:0c:b5:41:6d:7a:1b:40:1b:37:
                    44:aa:a4:5c:44:94:35:fb:4c:cc:3a:c5:05:01:a0:
                    1a:4a:4c:d7:11:28:0b:d7:aa:fa:af:a2:9a:1f:26:
                    03:63:3b:3d:bc:1c:ca:9e:ac:1c:16:3d:ea:25:db:
                    90:0e:13:da:f5:05:71:65:43:44:0d:3a:ce:10:26:
                    5c:15:bf:ee:0f:e2:02:e5:17:55:ed:f2:e2:a8:f2:
                    0b:a3:4d:69:39:62:3a:7b:a8:3e:5a:87:d2:d2:9b:
                    9f:e6:3e:b1:e8:fb:b8:25:2c:19:80:88:15:47:d1:
                    d5:cb:7c:1d:f5:1a:34:1e:90:02:40:01:c3:a1:7a:
                    a9:29:88:5d:bb:79:da:54:a3:b5:79:12:cd:37:2e:
                    29:87:71:ef:b9:65:6d:ce:18:51:35:55:8a:59:82:
                    52:42:e9:d8:08:45:d9:96:70:8a:9c:7f:af:e3:89:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:D6:95:0E:1D:96:49:47:C2:24:41:B6:1D:55:6C:7F:32:23:A2
            X509v3 Authority Key Identifier:
                keyid:70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:03:4d:ba:34:3a:67:6d:2a:47:0b:21:bc:c2:1b:3a:79:d7:
         b9:a2:53:3a:43:c0:54:f9:17:ba:fc:53:d3:01:35:10:88:b9:
         cb:e8:b5:07:24:2b:88:48:c9:94:e6:67:00:cc:31:0e:d5:af:
         62:13:92:9b:54:69:54:d3:11:c2:a6:76:b8:57:2f:a7:07:6d:
         87:76:a8:49:bb:bc:b8:3d:f0:ce:33:6a:e4:e3:b9:6c:d4:9a:
         c2:6e:98:99:09:0c:44:2c:d1:06:a2:9b:24:36:05:db:6b:b7:
         67:9e:ea:a7:79:6b:a9:6f:5b:e0:bd:44:78:b5:70:fe:c7:f0:
         c9:79:16:12:52:b6:25:6a:59:80:64:23:7e:ea:de:c2:86:3d:
         7a:19:9a:e6:22:56:00:eb:87:2c:28:93:05:52:08:e5:64:f0:
         40:b9:ee:5b:4a:73:fe:55:b4:5a:f4:c4:08:e1:6c:6f:2e:ea:
         b8:a9:e9:04:0b:21:d7:30:aa:6d:81:11:41:1e:96:b2:38:b4:
         08:73:f0:4a:91:1d:6d:8a:c1:c6:ce:46:82:17:09:f1:b1:f4:
         1e:72:e3:73:c5:9f:37:d1:c0:4c:bb:2d:70:60:02:ab:a4:7c:
         b5:77:90:fc:01:70:18:7b:9d:ab:a4:2f:34:fa:6b:cb:98:a5:
         24:d4:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:27 2026 by rpki-client