Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File:                     IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier:          5bH5/dPeHqZxRoPGyNpYmjBIXLEulpGF9A0VS6d9uj4=
Subject key identifier:   C3:74:E4:E0:11:A8:E5:40:E1:4A:DE:74:88:2B:9A:48:6E:9B:60:F1
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer:       /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial:       019F9135D164B9B3122275852FB2DF6728D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number:          07F0
Signing time:             Thu 23 Jul 2026 23:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:51 +0000
Files and hashes:         1: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: Uvrll81RQ2ro5ggV2bDlD3jLeALsYoXkCg/WG+f5iRY=)
                          2: UHPrs3fTWAGncbw93gObHz404mM.roa (hash: Ly87OJ3bcfOFr+MaCdeJuDqxDXCXJ38vySRXLeTObdM=)
                          3: WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa (hash: MEHeYN4zLk7L6gRGwHOucCpdQci+lV7vAs27KrvMVDE=)
                          4: endTU74Pqruhj_u-GscX6eV9TyY.roa (hash: zGjt6sn8OMhgDdwNoCulMYtFuT4HYmb2TRwx99WkTWQ=)
                          5: lRsRyKhA42mUZ8hS2rpLHm_3tDE.roa (hash: 4WHzRlXZtSPth79yxsiKoFHqj8Ld8gxycNtzoxgNA00=)
                          6: spwZIDgAexUv2FMzIVJu6fx4n-o.roa (hash: S+/uYIng1yCaxFbxy+y3ycIp+nBkmnExp9c8EhB5PxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d1:64:b9:b3:12:22:75:85:2f:b2:df:67:28:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
        Validity
            Not Before: Jul 23 23:00:51 2026 GMT
            Not After : Jul 24 23:00:51 2026 GMT
        Subject: CN=c374e4e011a8e540e14ade74882b9a486e9b60f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:bf:1c:c3:62:21:fc:72:04:01:0a:0d:20:
                    0d:03:47:19:9a:1a:84:84:90:10:af:83:f3:9e:6d:
                    f8:67:cc:5f:41:1c:a0:c6:d9:ab:e8:3b:56:f0:a9:
                    39:00:8a:1e:d8:d9:46:70:59:be:10:bb:c8:01:b3:
                    27:52:e5:46:fd:e9:30:52:54:41:8d:a2:cf:c8:17:
                    09:01:87:35:28:87:c0:82:cb:85:b5:67:80:80:c7:
                    9d:d0:b6:2c:35:df:10:73:2c:69:7f:1f:f3:7a:93:
                    09:af:85:f7:f0:f5:6e:59:ec:b1:57:f0:b1:fe:31:
                    db:7b:db:1b:dc:d3:ac:95:40:70:d3:7f:cc:1b:97:
                    75:5f:f5:21:cf:99:1a:5e:02:14:58:43:42:98:df:
                    03:f2:3c:6b:d3:1f:68:b1:80:49:db:44:ad:78:fc:
                    20:ee:c9:fe:09:72:6a:a9:7d:2f:bf:91:f7:22:72:
                    86:9e:47:dc:8d:85:60:92:33:d7:c8:78:7d:50:38:
                    e1:55:54:9b:39:b8:82:c7:5f:78:3c:b0:3e:22:37:
                    e0:ef:ed:a9:6f:16:4a:65:10:0b:4d:0d:74:c2:ce:
                    13:b8:3a:1f:c7:10:09:4f:62:f6:f7:7c:06:1d:d8:
                    94:bb:ae:bf:45:a6:ef:52:5d:e5:26:e0:3b:38:24:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:74:E4:E0:11:A8:E5:40:E1:4A:DE:74:88:2B:9A:48:6E:9B:60:F1
            X509v3 Authority Key Identifier:
                keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:c4:cc:f7:bd:dd:08:ec:80:9c:ee:de:29:b0:ba:f0:32:
         6f:a2:4a:5a:bb:d4:42:2a:b9:9b:80:2c:25:a3:b2:b1:e7:a8:
         10:82:47:55:74:d4:e0:99:2b:14:7a:08:10:15:f9:e7:d7:e7:
         40:03:52:86:af:7c:b4:a3:fe:13:f9:52:b4:38:db:e1:a0:31:
         be:84:e2:fe:46:13:9c:17:0b:07:5d:a8:b1:d6:b9:34:9e:6b:
         09:30:3c:90:9b:04:0a:6f:bd:9b:60:d2:59:4b:74:16:42:9a:
         bf:01:df:6a:64:eb:ec:7f:c9:64:e8:a8:fe:fc:39:7f:c0:1c:
         5c:5c:21:64:57:da:5c:63:99:0d:c4:09:ee:a9:a0:46:0d:f1:
         43:7f:68:92:6f:53:c7:a3:8a:eb:90:b2:7c:98:b0:da:c7:af:
         7f:8c:e2:05:ed:a0:2b:7d:ad:64:89:a5:cd:30:43:ec:cd:1e:
         3c:08:ca:75:a7:66:61:79:0c:04:6f:07:bf:b1:29:eb:c8:d7:
         d1:29:db:37:94:b6:10:fe:31:2f:39:08:6a:18:c3:65:27:6d:
         e9:01:07:63:5f:ea:57:17:f3:cf:74:e5:a2:bf:b7:cd:ae:00:
         e7:23:ab:32:6b:8d:05:13:b2:75:e5:96:7f:07:77:1c:95:8a:
         39:7a:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:15 2026 by rpki-client