Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          +wsaJYM6w4l5EmuZ4EzyqIYgWfZnhcvM/PJR4fx1RSs=
Subject key identifier:   39:04:F9:23:B1:2E:F6:2C:31:2E:C7:F0:9A:1B:3F:19:1B:A0:3D:8A
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019F91DA3DFF577A6DC30EF1293EE92BABEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          070C
Signing time:             Fri 24 Jul 2026 02:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:26 +0000
Files and hashes:         1: 8GQama4kGymnU_xje0Yvb2zQH-o.roa (hash: NKYIKebNipUgc9YPaLXeciFwdApi4ubVtrOcZFCvldo=)
                          2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: rylns743pUuXNcvv3Tl3/qPhjapsnFwYuB0PVS+lFBU=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:3d:ff:57:7a:6d:c3:0e:f1:29:3e:e9:2b:ab:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Jul 24 02:00:26 2026 GMT
            Not After : Jul 25 02:00:26 2026 GMT
        Subject: CN=3904f923b12ef62c312ec7f09a1b3f191ba03d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:3e:a9:39:44:58:4e:65:93:f8:fb:f7:bc:
                    33:2b:a9:4e:14:63:b5:bb:b0:3d:e1:76:61:e1:63:
                    6f:f3:9d:90:38:c4:fc:e3:a2:46:28:b0:ee:27:51:
                    0b:36:ad:a8:23:05:ec:08:fb:b4:65:41:03:ff:c5:
                    95:bd:b6:e3:79:62:34:56:d9:57:49:99:1c:b8:a5:
                    96:23:dd:cc:38:1e:90:0b:6c:6a:64:f0:c0:2f:54:
                    ad:70:12:b7:8b:13:12:ea:fa:67:61:e3:04:b1:87:
                    92:6c:c8:a3:28:56:d3:87:7e:75:3c:17:63:66:dd:
                    1c:c8:43:1a:8a:83:e9:dc:bd:22:ab:23:be:16:6d:
                    64:85:37:fb:58:8c:49:1e:f0:08:77:14:6a:c2:08:
                    38:b2:67:61:3c:34:76:52:cb:2a:46:51:55:ad:00:
                    46:e0:a9:67:50:0e:e6:b0:37:31:56:de:42:a9:ee:
                    67:a4:b1:c5:05:2b:48:5e:46:70:d8:8a:78:17:42:
                    b3:48:59:4a:1f:1e:74:c5:b9:1f:fd:4c:d6:26:38:
                    48:6a:09:21:34:f4:d2:16:be:c4:f4:c0:27:dd:69:
                    5f:b9:c6:dd:69:8a:8c:77:0b:19:b5:7b:5d:cf:34:
                    1c:4b:ed:d7:98:14:19:e9:04:26:3d:8e:d2:66:d3:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:F9:23:B1:2E:F6:2C:31:2E:C7:F0:9A:1B:3F:19:1B:A0:3D:8A
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:c4:b5:b6:e5:99:a4:74:9d:5e:de:6d:3b:83:c8:f0:dc:
         d8:2d:1e:9f:8c:93:3f:c8:f1:85:d8:0f:f7:49:28:d6:4b:c9:
         56:31:8f:27:9e:b0:ae:df:26:9b:e2:3a:83:51:08:82:1e:5a:
         72:93:64:b9:9d:90:e8:ec:ef:6c:29:5f:73:e6:18:ec:be:b0:
         b4:1b:4d:64:58:c8:c4:cf:ca:62:fc:cf:d6:6f:35:00:7a:a6:
         49:c7:42:b9:96:ee:97:70:10:0e:26:0c:86:96:d0:a4:81:63:
         88:91:84:70:45:52:26:1f:1b:27:3d:d2:29:14:fc:2b:ca:1c:
         9b:f8:c6:a9:cc:18:02:62:49:a1:4d:56:e7:6a:f7:43:e9:6b:
         ee:39:98:2d:4a:41:5e:2a:ae:f5:05:3d:d0:73:f3:b2:98:77:
         25:61:43:b7:df:54:2a:89:a8:b8:2b:ae:1a:ca:04:c1:32:92:
         5f:c4:ea:7a:cc:1b:df:85:97:71:76:bb:9f:9d:14:63:b2:7d:
         2d:d7:7d:7b:9f:a6:55:d5:69:63:35:95:8e:8e:f1:9a:d7:49:
         4a:cc:a8:7d:e0:95:81:e4:2c:c8:d4:09:43:e0:22:67:63:d4:
         7e:28:1f:37:a0:ed:4e:44:e0:f5:29:4f:ce:51:0f:af:88:08:
         8d:d3:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:02 2026 by rpki-client