Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          aMZ7Yn729MVX9p09EUf0jTn3EYD6wlx3HkJ0hiKTOv0=
Subject key identifier:   00:53:6C:C9:E8:C2:F8:6E:FE:BA:D3:6E:BB:BF:93:AE:8E:AE:AA:64
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       019F91DA65D4BD59AE5FF6DB0C7A5D1C504A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          1905
Signing time:             Fri 24 Jul 2026 02:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:36 +0000
Files and hashes:         1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
                          2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
                          3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: ibBMvmIjs1L2+FaFCAeJ6lEA0jOcSKWcqQ1vjQLbTi0=)
                          4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
                          5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:65:d4:bd:59:ae:5f:f6:db:0c:7a:5d:1c:50:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Jul 24 02:00:36 2026 GMT
            Not After : Jul 25 02:00:36 2026 GMT
        Subject: CN=00536cc9e8c2f86efebad36ebbbf93ae8eaeaa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:10:bd:f8:87:81:d0:2a:e4:2b:3d:70:bf:
                    08:ad:4c:7a:42:bc:03:a5:69:3c:a3:32:40:13:62:
                    52:78:ee:24:d9:7c:ed:fa:30:b7:7b:fc:94:79:db:
                    26:68:de:b8:57:2f:d0:a6:bf:a3:27:57:8f:d3:fc:
                    ae:c0:bd:5e:06:4c:26:8e:7e:26:e5:0b:c1:e3:5b:
                    9d:00:2a:87:f4:75:4d:02:ac:8f:f3:f8:34:88:d7:
                    a2:4d:ab:9e:bf:65:6a:3e:08:51:4f:21:d7:57:cc:
                    f1:42:0f:6d:76:d2:36:40:52:15:7a:7a:ef:d5:47:
                    78:d8:8f:d9:64:72:ca:6d:33:b7:51:8d:e9:62:ba:
                    b4:2b:ae:41:f4:e2:16:af:80:cf:98:a6:6e:d2:b3:
                    9e:69:6b:59:9c:2a:93:ca:03:cd:e7:f0:e5:d3:b4:
                    02:f9:db:c4:a0:92:a0:76:b9:4e:03:8c:47:f3:84:
                    88:ec:8e:51:cc:31:4d:75:c3:6a:17:e3:7a:f3:e1:
                    1b:f8:0e:60:42:1e:0f:0b:26:b6:8b:2d:12:bc:24:
                    79:6b:6e:86:eb:ec:fa:80:bc:19:82:01:ce:a1:34:
                    b1:d2:00:75:4e:8c:8b:6d:3e:e5:fb:b1:15:47:33:
                    8c:0b:81:49:ba:ec:cb:25:c9:bf:96:0b:ff:6e:42:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:6C:C9:E8:C2:F8:6E:FE:BA:D3:6E:BB:BF:93:AE:8E:AE:AA:64
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:4e:ad:8f:98:8a:96:ec:b8:3a:84:61:84:1e:b9:36:05:
         39:3b:9f:96:8d:2c:f4:9a:60:87:01:8d:c9:44:c2:f9:ba:0d:
         09:6f:7b:2e:b7:9d:2a:20:ed:6a:73:92:f2:b3:46:58:77:7b:
         bf:31:68:ca:85:15:76:64:00:73:69:51:05:d2:95:48:5c:75:
         73:16:f2:88:6c:eb:9a:eb:c9:45:f3:68:b6:27:10:e0:43:dd:
         9b:4f:ca:d5:20:3e:3b:01:d3:72:ec:03:6d:fa:b5:45:21:8f:
         9c:57:05:1e:a6:cf:ab:1d:c1:4e:27:76:f7:5f:cd:2d:e4:5f:
         8e:ae:18:c0:ff:57:e3:f3:24:74:b4:f8:4a:aa:f1:b6:5b:9e:
         8d:b9:7c:f3:be:58:30:32:eb:18:3f:3d:d8:ea:1e:27:8e:97:
         39:c0:9c:1c:0d:21:f4:ee:66:d4:c7:c2:56:b0:5b:9d:e5:58:
         55:a5:78:42:7c:33:51:5c:a4:ed:9c:46:f4:56:0e:bb:8a:f1:
         2c:22:2a:95:71:4d:f7:8a:33:08:9d:3a:55:b9:b7:24:c8:e4:
         4c:64:63:58:b4:fc:03:c2:19:6e:91:67:e9:c5:98:1d:38:90:
         f1:07:b4:f8:cc:56:dc:f8:80:b1:3f:cd:71:31:de:38:2b:fc:
         b5:c4:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:48 2026 by rpki-client