Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File:                     IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier:          O4uZT9MNu/fYbYsjrIkLn91m3U6wUva9MZXsPQt9++c=
Subject key identifier:   79:BF:A4:12:42:7C:40:5A:BB:4A:FC:C0:8C:4A:4A:B6:83:58:D0:3D
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer:       /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial:       019F9211CA0EA07C96508E4AD380B201D1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number:          08EA
Signing time:             Fri 24 Jul 2026 03:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:06 +0000
Files and hashes:         1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: mzv98e2Nl4nAcqGyUpHALVUPPkcDqCsOkf93awxWsI0=)
                          2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:ca:0e:a0:7c:96:50:8e:4a:d3:80:b2:01:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
        Validity
            Not Before: Jul 24 03:01:06 2026 GMT
            Not After : Jul 25 03:01:06 2026 GMT
        Subject: CN=79bfa412427c405abb4afcc08c4a4ab68358d03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:ac:d4:86:78:4b:fd:ac:c6:0d:30:21:fb:
                    c0:11:47:04:32:88:6f:e9:17:05:6b:84:0c:c2:83:
                    45:f7:76:0a:c7:69:d3:c2:aa:6e:ff:59:84:bc:60:
                    b4:3d:6c:52:f4:85:fb:87:29:c1:86:54:78:e0:2a:
                    63:f8:08:88:79:2b:6f:9f:b0:84:64:f4:de:0c:73:
                    a4:5b:00:5f:a3:a8:4b:dd:35:00:0c:1f:d3:2d:c6:
                    56:54:f9:2e:c3:03:f3:02:c1:14:60:ab:65:09:88:
                    d6:8f:34:fd:a2:18:14:0a:7b:d2:ec:fb:24:ba:a7:
                    65:2b:fa:a6:5d:d8:2c:04:5c:9f:e3:87:42:7f:a2:
                    d8:eb:06:31:f2:b2:cc:13:72:c7:ce:a6:ec:a6:fe:
                    ac:c1:bb:fa:28:05:67:0f:6a:2e:49:d8:04:26:6f:
                    aa:27:3c:f8:a9:10:27:3b:35:82:c1:97:64:5c:bb:
                    f7:b6:83:0e:2f:11:b9:d0:b4:de:ee:b4:88:ba:f8:
                    24:ee:54:b9:fa:6e:93:a3:9e:ce:dc:fd:85:83:4a:
                    ae:8a:9c:5d:bd:ff:0a:52:c7:56:50:7c:e8:5c:e3:
                    a4:60:46:ac:08:5f:59:76:dd:c8:dc:89:18:78:40:
                    ee:f4:67:f1:a9:90:93:af:32:48:0f:18:8f:89:08:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:A4:12:42:7C:40:5A:BB:4A:FC:C0:8C:4A:4A:B6:83:58:D0:3D
            X509v3 Authority Key Identifier:
                keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:be:81:b9:3c:cd:59:e2:18:21:3b:b0:fa:9e:b5:40:fb:
         c4:ec:34:3f:67:38:b0:f8:7e:5e:2a:73:e5:ed:86:4e:22:39:
         e0:6d:bb:74:54:0d:af:1b:31:ba:7b:db:bc:5c:07:17:6f:60:
         ea:b7:f2:4a:a1:75:8c:1a:d5:86:4f:da:1d:cc:37:f3:3d:67:
         23:2f:62:a2:52:71:cf:5d:b4:bd:33:aa:b7:94:01:63:f0:a7:
         e5:7f:4c:b3:28:6b:b6:77:ad:b3:41:aa:eb:c1:ea:d9:53:e9:
         90:72:81:b2:c0:04:9c:c7:07:fd:9f:38:28:84:68:78:73:cb:
         31:21:fc:13:ee:c2:a1:d2:95:e5:b3:fa:c5:24:61:94:c1:e3:
         36:8c:c0:0a:28:9d:74:14:3c:6c:3b:85:f0:46:61:37:04:17:
         7c:99:14:2a:5a:32:4d:5e:fe:2b:ea:46:f5:e1:64:a3:c9:0f:
         0d:a0:cf:bd:1e:c5:3d:37:df:f2:0e:0a:60:0a:7e:e0:31:4f:
         dd:a7:e6:b3:b3:6c:7c:d0:c8:42:3e:3c:cb:37:e1:4c:d1:bc:
         b3:14:19:1c:cf:6f:4f:03:06:2a:ad:3f:32:c6:1e:bf:a3:6e:
         61:38:79:11:13:dd:2c:9d:38:ea:f6:25:53:a9:74:d4:f8:f0:
         75:23:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:02 2026 by rpki-client