Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File:                     iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier:          04KwGyOLbApeiwLyDiIugbiAaTEMpDBlzHoOdFgtEu4=
Subject key identifier:   C0:6F:02:0A:D5:94:47:B6:2F:FE:51:9F:AC:59:F4:07:0E:15:6F:C2
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer:       /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial:       019F905A42D55176FC33591BF7A2DBB042C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 19:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:02 +0000
Files and hashes:         1: 1PQLqhoScjfBFsnVHNm0k3bCNFk.roa (hash: Vk0i8JggRVRyN9gNhJOmPHfRFdxGWfDcvajCmQ4/kDs=)
                          2: TWbCTwDnys208grtWi4L9d1lq6s.roa (hash: +ftR3wfvVv49VPzjWv+X3HJTgQfHYyU1PAP5N6+M9DY=)
                          3: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: h/N9vq8s4ZwoA0Ne2RnLWEuF6xn0aYe5Y2jZ1jRWmO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:42:d5:51:76:fc:33:59:1b:f7:a2:db:b0:42:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
        Validity
            Not Before: Jul 23 19:01:02 2026 GMT
            Not After : Jul 24 19:01:02 2026 GMT
        Subject: CN=c06f020ad59447b62ffe519fac59f4070e156fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:71:71:e7:9f:dc:1a:70:2c:93:48:f8:c2:
                    04:f9:81:dd:db:a3:35:32:a8:e5:1b:25:bd:d3:35:
                    23:a9:5b:f5:a7:ee:dd:0a:b4:84:85:d7:a0:d3:25:
                    84:2d:81:7c:a5:c9:63:5c:da:78:b6:d0:24:2f:4d:
                    23:7d:ff:54:a8:3f:2c:83:65:f8:da:fd:b3:bc:83:
                    a5:cd:be:13:9e:e3:cd:68:88:3c:60:c5:49:c0:07:
                    a3:c9:83:a3:1b:ca:90:dc:b8:8b:8c:b7:48:42:e1:
                    08:ce:0c:62:ae:87:6b:f9:7f:8f:cf:5a:45:7c:74:
                    d3:a3:70:b4:1f:11:4f:e7:49:6a:12:41:2f:97:4d:
                    d0:02:fb:63:4c:2c:88:58:8c:f5:9c:42:16:9e:9d:
                    2d:78:42:36:5c:c7:1d:a9:65:9d:2b:0f:76:14:7f:
                    fd:6e:10:2e:e7:6c:e5:e8:9a:b3:6b:64:14:e2:1b:
                    90:2d:5f:57:9e:2a:8c:c5:64:b9:82:ac:8d:5e:b6:
                    93:b8:4f:41:87:8b:33:6e:2c:d0:f2:f2:43:8c:b2:
                    6a:c4:e8:31:e7:04:61:dc:58:fd:78:78:c9:54:47:
                    a2:b2:79:a2:8a:ee:6e:d5:6e:72:d4:25:7c:ec:2c:
                    f0:ca:58:c0:96:a7:92:6b:af:49:ee:5d:32:6c:0c:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:02:0A:D5:94:47:B6:2F:FE:51:9F:AC:59:F4:07:0E:15:6F:C2
            X509v3 Authority Key Identifier:
                keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cb:d7:a2:09:33:c6:98:ca:d3:70:39:0c:d5:52:d0:4b:46:
         71:8b:cc:e7:da:33:c3:cd:23:65:eb:0d:3f:16:78:90:d2:bb:
         92:28:96:23:7a:c9:b7:93:5b:ff:d1:d1:d2:61:04:84:f1:45:
         84:da:ae:8f:0f:12:57:b6:19:91:3b:ff:46:88:1c:25:bb:d9:
         49:b9:68:26:ab:64:e2:ff:2c:75:da:17:2a:35:4e:ae:b9:85:
         5a:d3:70:2d:34:83:2c:bf:64:9f:b1:de:16:5a:cc:95:55:20:
         eb:14:a4:66:cb:f8:53:e6:fe:4c:b8:5f:76:b1:55:c5:d3:18:
         70:b7:8d:28:b8:7b:71:5f:e5:f5:80:b2:e2:54:3c:48:c0:0a:
         8c:cc:33:3e:57:e9:a4:28:bd:c4:e8:52:1c:28:f3:c3:8b:e1:
         ad:1a:1a:bb:5d:a1:82:cd:50:f9:16:e8:e6:99:fb:38:ca:05:
         1a:c1:ac:75:ba:ca:03:85:16:c9:aa:9a:74:4a:35:0e:5c:03:
         54:a2:29:46:72:59:0e:c4:63:27:e0:61:e1:08:75:72:93:1d:
         39:a3:e0:78:5b:85:62:d7:1b:41:52:49:92:de:cd:05:52:6a:
         95:c3:f4:64:6f:7e:7d:fd:69:37:f3:c3:e6:c1:66:17:0a:cc:
         ce:ce:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:44 2026 by rpki-client