Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          3EZfKuWBUPoQakavMfc0kvFWWeqZwMB2DnT3jsdXc2M=
Subject key identifier:   89:FD:B7:EB:D0:A5:7E:AF:6B:77:9B:D7:DA:BA:C2:E6:B4:D8:97:92
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019F9436866D6102468D9D9FC23341F5E490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          12D2
Signing time:             Fri 24 Jul 2026 13:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:28 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: IXJ04hwuT3L4V/JGvrFLseBkqzn7Q9JN6AQL5PpZfIo=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:86:6d:61:02:46:8d:9d:9f:c2:33:41:f5:e4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jul 24 13:00:28 2026 GMT
            Not After : Jul 25 13:00:28 2026 GMT
        Subject: CN=89fdb7ebd0a57eaf6b779bd7dabac2e6b4d89792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:a4:4f:46:2b:db:a0:9d:92:4d:22:e2:7c:
                    66:66:b9:52:f7:ce:23:72:2a:4d:45:be:6b:47:c1:
                    63:f9:4d:ac:2d:d5:35:b6:a3:3a:92:da:d0:b9:7e:
                    47:07:46:7a:39:44:75:1d:56:cc:2d:4f:a2:b1:76:
                    c0:9e:2e:59:1c:b1:aa:5a:33:81:2a:96:5d:3c:05:
                    50:a9:4e:ba:c9:96:b2:f1:5c:62:6d:d0:52:5e:c6:
                    99:98:79:16:1f:30:66:ae:00:2e:a1:f7:12:43:66:
                    f9:15:ce:e3:04:9f:bd:82:3b:20:d1:66:6e:06:55:
                    c8:ab:44:97:1b:39:9c:84:14:ee:f7:0d:64:77:fa:
                    ea:01:78:d3:07:07:c9:73:30:70:66:54:b3:11:84:
                    e0:75:76:39:dd:d0:15:04:57:24:48:2b:7e:41:99:
                    82:2b:3e:a5:f1:c1:95:aa:97:34:9d:d1:8c:53:05:
                    d7:94:4c:b7:93:b3:df:8f:ee:ff:05:51:1d:78:1f:
                    e8:f3:d0:fb:49:bf:80:68:98:63:19:d5:0b:4d:f7:
                    4f:22:57:02:26:46:b7:95:ab:f8:cd:2b:b1:60:84:
                    b3:21:cb:5f:e4:51:03:6d:29:05:f9:f2:33:81:1f:
                    74:a0:a2:62:f9:4b:19:d0:73:e5:76:6c:67:4b:8c:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FD:B7:EB:D0:A5:7E:AF:6B:77:9B:D7:DA:BA:C2:E6:B4:D8:97:92
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:cb:65:17:c3:5f:e7:41:84:41:7c:e9:d8:ea:e4:42:55:
         20:e7:0c:67:4b:57:01:b5:f0:0e:be:53:eb:ac:c2:d9:19:3e:
         ae:12:d6:c6:6f:e5:b9:cc:e9:4a:a8:3d:df:ab:0e:56:3f:af:
         0d:6d:fa:32:2e:df:52:ca:0a:3e:88:b7:e5:41:21:8f:d1:51:
         24:5b:2d:2a:49:7e:33:ff:b5:16:31:8d:29:1d:ef:13:5b:df:
         1d:bd:3f:1d:14:ed:ff:c2:7d:a2:24:f1:3f:b6:41:80:32:e1:
         6e:54:da:3d:d0:15:6b:71:8e:65:0e:3c:ae:55:01:3d:09:90:
         31:d4:94:e2:62:0b:55:2c:dd:7d:9c:33:6a:86:29:25:f4:09:
         bf:0a:33:56:c3:9f:d7:df:36:36:70:11:70:6f:37:69:a6:ac:
         e6:d0:e0:87:f7:26:40:4b:f9:59:c2:56:e0:9d:ad:62:6b:59:
         40:1a:c6:07:99:8b:8b:be:f6:7d:f8:f4:b6:04:eb:72:26:47:
         1e:72:c6:3e:be:ce:c9:4e:7a:ef:13:b7:f1:03:23:47:b4:59:
         4a:56:6d:3b:ae:d4:12:31:7b:99:58:c8:c4:2b:2a:07:1f:18:
         ee:5b:6c:fa:5d:cd:4c:7b:56:3f:7e:49:5e:6d:8c:fc:e7:6a:
         3d:a7:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:49 2026 by rpki-client