Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File:                     II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier:          qJvqiIubim4gOELyxzQCEQGswfzyWXk6prI3ppyy3XU=
Subject key identifier:   31:76:26:89:9E:BE:F1:24:F4:18:92:A7:AA:E4:9E:BB:79:B1:8E:E0
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer:       /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial:       019F8F7FB182965172F1141A2835CD2FA67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number:          01A5
Signing time:             Thu 23 Jul 2026 15:02:17 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:17 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:17 +0000
Files and hashes:         1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: PALiGMMW7ITAVyOYtzqkgiDR2GbJAmvmAwR54CsrVwo=)
                          2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:b1:82:96:51:72:f1:14:1a:28:35:cd:2f:a6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
        Validity
            Not Before: Jul 23 15:02:17 2026 GMT
            Not After : Jul 24 15:02:17 2026 GMT
        Subject: CN=317626899ebef124f41892a7aae49ebb79b18ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:fc:e4:bc:64:cc:f0:e9:c8:b0:1a:05:9d:
                    7d:e2:36:6b:fb:3c:21:e8:9c:37:f2:e5:75:de:e7:
                    ac:ea:86:01:ba:b9:51:cd:c0:4f:47:cc:fc:ca:f5:
                    fc:4f:d3:f2:b1:80:28:3f:f4:b3:4f:8e:a5:58:27:
                    2f:31:c0:42:c8:71:e3:74:61:e4:01:be:fe:c6:1e:
                    fe:c2:39:a2:83:1c:c0:7e:09:6f:37:0c:47:3b:30:
                    9a:47:ad:ff:c4:d3:0a:a2:96:45:59:b3:41:fb:db:
                    c4:b0:d0:fb:9f:1a:bd:ca:ea:ca:a5:6b:7f:6f:07:
                    be:70:ea:b8:80:de:e5:7b:a4:54:16:ae:ef:6f:20:
                    d8:62:78:d3:cf:fd:a5:f7:f2:07:ef:30:4f:db:47:
                    19:46:0b:90:0c:53:02:e3:52:10:94:1e:c4:7a:39:
                    64:0a:9f:a5:b8:7f:dc:89:a7:83:ea:31:85:ca:a4:
                    7c:59:fd:c4:84:75:70:38:a9:da:be:74:19:dd:2b:
                    16:01:74:6a:e0:40:8a:d8:21:da:2c:62:db:cb:82:
                    83:bb:6b:ad:08:9e:31:d8:c7:bc:63:f1:b8:f2:50:
                    36:ac:76:52:c0:38:d9:32:09:75:61:c9:82:45:f0:
                    28:20:87:8c:98:20:b4:bb:2d:55:f5:3e:c2:ec:34:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:76:26:89:9E:BE:F1:24:F4:18:92:A7:AA:E4:9E:BB:79:B1:8E:E0
            X509v3 Authority Key Identifier:
                keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:d8:16:a9:20:46:ad:4b:7c:f4:01:42:f2:36:7b:f5:d2:
         72:26:ba:9a:b5:ab:7b:d7:06:db:9d:05:fd:52:d9:e7:ec:c6:
         21:6f:f4:32:0a:83:db:f8:cc:62:b8:be:72:ff:f9:41:02:57:
         b9:9a:6e:1e:20:42:aa:e4:05:09:10:5d:7c:32:ae:22:44:03:
         9b:c4:c3:be:f0:78:1f:8d:b9:a1:c4:66:a4:bb:34:14:da:f0:
         6e:7a:d9:4b:df:1d:3e:e2:00:55:a4:c3:7a:00:fa:da:be:df:
         bb:49:cd:b4:6d:23:45:84:bc:af:43:f3:e2:b5:28:3b:6f:fd:
         d3:fe:57:54:6c:8d:c1:5c:a7:58:22:8e:a7:b3:00:63:3d:a1:
         c5:d9:e9:cb:25:94:85:a1:9f:39:52:f8:46:9a:cc:2b:63:21:
         9a:fb:f6:ba:cd:58:f9:b1:91:2a:80:78:da:7b:24:f9:76:15:
         b3:d9:f1:cf:5b:4d:15:fa:b3:73:de:65:b1:76:fb:e4:2f:4f:
         84:10:8b:56:4b:7a:98:ac:88:2b:a1:07:06:67:cd:1b:34:e8:
         e6:56:e2:34:5b:ad:06:89:da:bc:b4:72:9b:6b:14:78:d4:73:
         37:21:a9:18:ea:1a:66:53:f7:f0:f0:77:e3:13:51:fc:31:b1:
         ae:66:6a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf7GCllFy8RQaKDXNL6Z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRjNmRiZTVlNzczZDdhYWQ3MDA1ZDZjZmYyNmU0NzE0
M2NhNzgwHhcNMjYwNzIzMTUwMjE3WhcNMjYwNzI0MTUwMjE3WjAzMTEwLwYDVQQD
EygzMTc2MjY4OTllYmVmMTI0ZjQxODkyYTdhYWU0OWViYjc5YjE4ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln385LxkzPDpyLAaBZ194jZr+zwh
6Jw38uV13ues6oYBurlRzcBPR8z8yvX8T9PysYAoP/SzT46lWCcvMcBCyHHjdGHk
Ab7+xh7+wjmigxzAfglvNwxHOzCaR63/xNMKopZFWbNB+9vEsND7nxq9yurKpWt/
bwe+cOq4gN7le6RUFq7vbyDYYnjTz/2l9/IH7zBP20cZRguQDFMC41IQlB7Eejlk
Cp+luH/ciaeD6jGFyqR8Wf3EhHVwOKnavnQZ3SsWAXRq4ECK2CHaLGLby4KDu2ut
CJ4x2Me8Y/G48lA2rHZSwDjZMgl1YcmCRfAoIIeMmCC0uy1V9T7C7DQfswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF2JomevvEk9BiSp6rknrt5sY7gMB8GA1UdIwQY
MBaAFCCNxtvl53PXqtcAXWz/JuRxQ8p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTY5YWItZDEyOS00YTZiLWExZjEt
ZjU4YTI1NDY0OTFhLzEvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTY5YWItZDEyOS00YTZiLWExZjEtZjU4YTI1NDY0OTFh
LzEvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaHYFqkg
Rq1LfPQBQvI2e/XScia6mrWre9cG250F/VLZ5+zGIW/0MgqD2/jMYri+cv/5QQJX
uZpuHiBCquQFCRBdfDKuIkQDm8TDvvB4H425ocRmpLs0FNrwbnrZS98dPuIAVaTD
egD62r7fu0nNtG0jRYS8r0Pz4rUoO2/90/5XVGyNwVynWCKOp7MAYz2hxdnpyyWU
haGfOVL4RprMK2Mhmvv2us1Y+bGRKoB42nsk+XYVs9nxz1tNFfqzc95lsXb75C9P
hBCLVkt6mKyIK6EHBmfNGzTo5lbiNFutBonavLRym2sUeNRzNyGpGOoaZlP38PB3
4xNR/DGxrmZqtA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:46 2026 by rpki-client