Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File:                     IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier:          uTU8Z3/ZOx52VvkvqZKgRNLUc1suB2sc6F4ou6HLUp0=
Subject key identifier:   67:34:28:5C:0A:44:E7:8D:EF:37:FF:43:3B:8F:EC:4B:71:86:48:14
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer:       /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial:       019F9135FCDE4B448FC7C1D01A27BB6D3F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number:          0A71
Signing time:             Thu 23 Jul 2026 23:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:02 +0000
Files and hashes:         1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
                          2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: Uy7PCvGTkQskvwpdin73C5+LwKD1Z+QEXSqvlxos8Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fc:de:4b:44:8f:c7:c1:d0:1a:27:bb:6d:3f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
        Validity
            Not Before: Jul 23 23:01:02 2026 GMT
            Not After : Jul 24 23:01:02 2026 GMT
        Subject: CN=6734285c0a44e78def37ff433b8fec4b71864814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:c3:97:6c:17:e3:11:07:f5:6e:2f:79:82:
                    9c:10:11:48:7d:82:fc:9f:87:34:ef:c9:4e:4c:6b:
                    c1:0a:66:06:ca:fb:a9:94:6b:6a:62:2b:44:76:b9:
                    fe:e5:46:bf:5b:5c:85:43:be:ee:1a:0c:cd:e6:c1:
                    60:67:4c:94:f1:6b:bc:e5:a4:92:a9:e4:06:ba:02:
                    ad:da:75:a1:ab:67:1a:2f:22:f1:f8:a9:d1:48:c7:
                    fb:64:cd:99:eb:eb:1f:a9:a5:4a:5a:23:67:b0:f5:
                    c2:ca:22:a5:36:fa:0d:31:26:da:ae:70:f3:8a:78:
                    84:2a:9f:04:34:5d:ad:ac:5d:6b:57:1d:54:2e:2f:
                    8c:7f:11:62:f5:8c:d0:d0:ed:26:02:28:d4:07:3c:
                    36:76:08:75:cb:cd:7d:3d:f7:68:54:1f:87:79:4f:
                    3b:fe:e5:d5:9e:88:c9:62:11:43:2b:8a:f7:62:df:
                    44:e6:4e:76:2d:80:c4:ef:c6:71:f7:81:c4:c4:02:
                    a6:af:c5:c2:2a:17:9e:e3:ac:e2:80:a7:1b:05:de:
                    85:5a:ab:93:de:be:fd:34:68:52:34:ec:a3:13:85:
                    05:1d:79:ae:30:28:f4:ce:62:45:81:c7:01:fc:5d:
                    c1:46:12:87:bf:f4:ef:51:87:79:94:97:5b:ab:3d:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:28:5C:0A:44:E7:8D:EF:37:FF:43:3B:8F:EC:4B:71:86:48:14
            X509v3 Authority Key Identifier:
                keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:32:24:c9:20:9d:92:39:5f:68:25:0b:f8:36:32:da:a9:
         bf:32:83:77:dc:6b:34:9a:fc:84:19:29:c8:3e:71:51:21:e9:
         3b:3b:48:2e:f3:74:f6:78:2a:86:bb:ad:c0:04:5f:ba:8e:59:
         6d:8d:a8:53:63:e2:d0:7b:33:e9:30:07:98:09:f0:0f:87:32:
         bb:20:3f:b3:2d:b9:5f:18:e7:49:13:1a:0a:d7:30:bf:a8:d7:
         86:96:18:a9:37:21:12:aa:ef:05:6d:e6:72:20:39:9d:05:7a:
         da:c0:e6:9c:29:aa:31:4c:4b:bf:70:fa:5c:06:67:0a:95:1a:
         b6:36:31:84:27:b0:72:ab:bb:8e:95:65:45:b7:3a:56:d5:1b:
         a5:da:1d:c7:9a:fe:18:c0:f8:6d:b8:c5:cb:2e:c8:76:38:e5:
         61:c0:4b:f1:5f:3d:72:f1:1f:48:85:e2:96:5d:9c:8e:41:d1:
         5c:08:fe:87:3a:01:cb:5a:04:e1:42:4c:31:87:e0:c2:8d:00:
         7d:eb:70:3d:fe:69:56:ff:78:34:70:68:17:38:26:aa:1b:81:
         c8:3d:48:16:68:30:83:b9:74:39:b2:2e:16:32:39:e7:7b:5d:
         f0:91:c8:9e:3d:2e:8c:d5:9f:ab:e8:94:65:28:ad:ff:a6:96:
         6d:09:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:53 2026 by rpki-client