Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File:                     igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier:          CGMGFKM7QAlms89B/F4XVQW8+O93JxSZz1dBcFaBNeI=
Subject key identifier:   30:A4:06:56:7C:43:39:35:5C:B7:1F:6A:9F:BC:AD:71:FD:FC:0C:81
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer:       /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial:       019F90C80D4F883C70617A454723B246DEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 21:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:57 +0000
Files and hashes:         1: QimRIoifdg2JyU0GSq8a5Aty8zs.roa (hash: sDzqs2/VfMiYAG8w6JukF5QplVvfocGRr/BUGWqcR/A=)
                          2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: BCAeElaTQoG7zzYHfZ9B2JX2Gi+Jq3AVPwC+KchHbCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:0d:4f:88:3c:70:61:7a:45:47:23:b2:46:de:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
        Validity
            Not Before: Jul 23 21:00:57 2026 GMT
            Not After : Jul 24 21:00:57 2026 GMT
        Subject: CN=30a406567c4339355cb71f6a9fbcad71fdfc0c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:d0:ff:f0:a9:df:6c:8f:13:8a:1c:b1:7e:
                    03:97:c9:05:ab:9e:b3:56:7d:e3:9a:d7:65:ab:ff:
                    0f:59:3d:77:27:13:a3:52:5a:bf:83:73:a0:9f:19:
                    39:dc:eb:2d:d6:d8:28:a9:4e:62:53:5e:c1:32:71:
                    41:c8:4e:73:2b:68:fe:5e:62:22:42:61:07:1a:c8:
                    4b:09:1c:ec:7e:b4:58:5b:f8:29:cf:db:4a:bd:0a:
                    fc:e4:2c:e5:7d:e7:f2:06:c6:13:cc:c8:1a:88:90:
                    f2:4f:ce:26:51:ae:b1:9a:53:2b:97:aa:7c:97:eb:
                    08:f6:98:c5:d6:af:7c:97:0b:22:32:92:9c:c1:c2:
                    4f:d0:9f:ac:79:b2:94:2e:5f:15:67:99:c7:3c:43:
                    67:91:28:a1:26:08:c1:33:fe:5b:57:16:f9:f4:9e:
                    e5:a5:bd:7d:fe:f8:24:3b:de:7d:02:32:a2:54:c5:
                    dc:6b:a1:97:8d:2a:6e:85:d8:fe:70:75:fc:d5:cf:
                    52:4b:df:16:99:cc:e5:d2:0f:fd:e0:5a:da:12:32:
                    1b:44:e0:f7:45:4f:e3:8e:b8:6b:21:48:1f:10:af:
                    50:9f:68:4b:38:9a:44:4c:59:b5:b4:c9:e2:8f:65:
                    4d:0a:4f:e2:0f:96:16:b9:3e:20:0e:a7:32:76:2e:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:06:56:7C:43:39:35:5C:B7:1F:6A:9F:BC:AD:71:FD:FC:0C:81
            X509v3 Authority Key Identifier:
                keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:61:44:8e:3e:53:0f:e7:ad:68:0f:b0:3c:a5:41:90:d2:5f:
         82:23:bc:f4:db:ff:23:4f:1d:46:7d:a9:8e:2f:5e:8f:14:3d:
         03:06:4b:7c:16:ef:d1:57:c4:ac:52:97:0e:ca:7a:60:7b:6a:
         9a:77:d9:86:ba:42:27:e4:cf:02:b1:72:71:a7:f2:c9:c9:3e:
         53:d8:10:c7:28:07:99:1c:56:7c:cf:45:5a:97:b0:6b:e5:f7:
         be:65:20:f6:88:2b:dc:dc:68:e4:3d:31:3f:a2:db:b4:d0:bd:
         1e:f4:70:fd:b3:dc:11:f8:ce:51:6e:6d:7c:c1:6e:65:d7:26:
         46:65:13:2d:c9:a4:bc:f6:a6:29:64:ad:f7:7e:3f:af:c2:c6:
         fa:41:e5:88:18:65:4f:c7:ac:df:dd:0a:5f:60:97:2c:8d:0a:
         01:0e:3c:f4:9b:49:01:34:f5:a8:5e:8e:62:f8:f5:71:09:c1:
         db:a9:c0:48:16:66:89:47:ea:f6:34:cd:bd:27:bb:38:05:cb:
         f9:5c:a2:66:8a:69:93:21:bb:1f:eb:bd:cb:13:7e:0c:f7:32:
         df:73:ab:7c:a2:13:1b:3e:c0:b7:db:a7:58:46:95:fd:9c:f4:
         90:31:b1:a8:ee:29:bb:de:33:c8:59:24:f8:55:54:50:98:f2:
         b6:b2:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:33 2026 by rpki-client