Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          WUibk+zH7g4QQVCGedBiP/CBaa1Qu7e1g8f4RvHm0dA=
Subject key identifier:   C8:06:66:C3:9C:30:01:B8:3D:35:FC:29:8E:31:5E:2B:77:AD:D4:08
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       019F93C9166DC6E40115452C154A54F7B2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          0A3A
Signing time:             Fri 24 Jul 2026 11:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:56 +0000
Files and hashes:         1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
                          2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: 4F7lfM2GGZv5d2RLgmv/uPNQQyxZrH+LUGuN2z1tmaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:16:6d:c6:e4:01:15:45:2c:15:4a:54:f7:b2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Jul 24 11:00:56 2026 GMT
            Not After : Jul 25 11:00:56 2026 GMT
        Subject: CN=c80666c39c3001b83d35fc298e315e2b77add408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:ac:8a:a8:a5:b3:7f:80:06:ac:92:8d:d0:
                    50:d1:da:9d:22:9d:85:b2:88:1c:3c:44:83:77:18:
                    52:bb:c2:06:8d:48:77:6d:ec:ad:51:bf:a4:22:a5:
                    12:7d:d1:0f:1d:4e:09:40:c6:79:ae:c5:33:b6:71:
                    e7:93:92:ed:c7:35:2b:81:05:2a:cd:be:6b:3c:aa:
                    db:50:b1:13:b1:e2:e4:f1:ab:0e:8d:a7:60:54:01:
                    5a:78:39:f1:31:20:59:c9:37:ae:e5:d9:98:c0:f8:
                    23:77:69:72:21:08:31:ab:13:0d:96:c8:a4:9d:83:
                    3f:f1:1d:1e:39:6f:81:0c:b2:6b:52:7a:89:cf:30:
                    45:46:4d:d4:99:71:5c:68:81:71:20:36:2d:3b:5c:
                    9a:d8:7a:8a:31:33:41:ad:14:22:cb:40:43:55:19:
                    1a:68:94:5c:61:c0:a8:35:ed:98:71:b0:d3:f4:a4:
                    d2:88:be:d7:dd:3e:17:db:39:61:43:0b:06:8a:99:
                    07:d1:d8:b8:91:f4:3e:04:c9:0d:6f:bc:f7:2f:ac:
                    9b:60:ca:81:88:9f:b3:7a:e8:04:b0:24:85:26:46:
                    72:1f:6d:06:ce:b4:78:29:47:9f:64:aa:a4:47:01:
                    35:f2:66:db:95:5a:f4:e5:75:56:cc:88:65:a7:c0:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:06:66:C3:9C:30:01:B8:3D:35:FC:29:8E:31:5E:2B:77:AD:D4:08
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:36:59:19:d3:15:99:7b:b3:af:2e:9c:21:6a:e6:df:f3:
         75:27:2c:24:40:16:39:4e:32:7e:d3:85:8f:2b:a6:b8:10:35:
         61:1a:dd:a6:8f:ba:c1:4f:fb:c9:77:54:2c:13:ae:be:6e:5e:
         c4:14:8c:18:ca:94:f4:d9:53:99:c6:db:49:da:06:f1:e3:df:
         60:fe:df:fb:1c:ed:e1:a3:64:cf:a1:42:f5:b3:ce:6f:f4:4a:
         ce:97:8c:e1:c5:40:74:85:c5:07:d4:14:4c:4b:23:d4:e0:5b:
         a2:47:7d:48:fc:09:76:25:e8:e6:2f:15:94:16:c8:c4:53:3c:
         68:01:62:09:a4:08:ac:d0:7b:20:92:74:93:8f:b0:86:3f:f4:
         16:c9:de:17:41:70:ed:c9:7c:68:b1:70:1e:d5:9c:37:4a:cb:
         4c:e0:ca:c6:fb:30:30:f9:22:ec:48:68:68:9d:0a:94:4b:6f:
         a8:0f:20:89:dc:26:3c:9c:35:27:e1:70:f6:0c:74:b3:b4:ae:
         f3:e6:d5:e8:4e:31:47:a3:da:7d:6a:b5:7d:07:34:5e:9c:89:
         44:10:95:9a:40:52:b3:bc:46:7d:85:6f:b1:26:08:e2:c1:64:
         90:8e:d0:e9:27:c3:4c:9b:a9:80:24:4a:b8:9f:fd:ba:3c:9c:
         e8:6f:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:01 2026 by rpki-client