Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File:                     iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier:          PGfE1zcId1pq+KROVd/ynfTo7gYeF7ZVoHu1P2/3B3M=
Subject key identifier:   7F:FE:04:1E:5C:7D:B4:82:F6:27:1A:CB:3F:17:93:73:53:61:D4:84
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer:       /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial:       019F9580A5DBD3FAA7777C8355D416B2732B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 19:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:03 +0000
Files and hashes:         1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
                          2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 4r16e8fDsC3f/ZZQU2Q/L0fKsf04tuiE+/z5u/WP0Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:a5:db:d3:fa:a7:77:7c:83:55:d4:16:b2:73:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
        Validity
            Not Before: Jul 24 19:01:03 2026 GMT
            Not After : Jul 25 19:01:03 2026 GMT
        Subject: CN=7ffe041e5c7db482f6271acb3f1793735361d484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:dd:66:c8:31:ba:7b:9f:cb:2e:dc:4f:ad:
                    91:f5:99:7b:a3:85:0f:5c:92:59:78:2a:dc:85:fe:
                    45:11:cd:9e:33:08:60:f3:39:87:b0:10:4f:a0:06:
                    60:57:d7:c9:3a:40:28:ab:c3:53:a3:b4:cf:28:da:
                    a4:1f:54:71:83:d4:ae:c6:de:83:91:6a:10:1f:fd:
                    50:cc:0b:7d:ae:49:f4:3c:98:ca:1c:66:fc:98:19:
                    33:53:c0:f8:a1:09:d1:04:3e:7d:6b:c2:e3:d9:57:
                    b0:99:48:f9:54:e7:16:a3:c4:0d:09:63:e7:ac:92:
                    8e:14:d8:dc:c3:43:03:5e:87:c8:fb:08:8f:48:df:
                    de:d0:a2:03:4c:5f:74:7f:2a:3d:70:1c:64:4c:1f:
                    e2:6c:f4:87:12:fc:32:43:47:e6:f1:2d:05:0d:b4:
                    0f:f4:8b:7b:c3:36:67:0c:c5:59:40:b2:d9:ee:8a:
                    1e:4d:95:13:e9:b6:48:58:20:e1:dc:42:3d:f8:a8:
                    bf:68:37:d0:f3:8e:4e:5c:15:2f:f1:b6:0e:a3:23:
                    06:e8:d6:8e:30:15:1e:16:a6:65:1a:ad:0c:48:15:
                    c8:3f:5d:82:8f:35:8c:2b:03:76:5f:84:25:25:c7:
                    2c:06:cc:fd:e6:b0:29:a1:3c:ed:4e:52:46:f6:37:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:04:1E:5C:7D:B4:82:F6:27:1A:CB:3F:17:93:73:53:61:D4:84
            X509v3 Authority Key Identifier:
                keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:00:56:87:1a:cf:ce:c0:9d:f9:5d:69:77:49:2a:f4:42:85:
         bb:20:29:a4:88:85:88:45:98:6b:f8:48:08:c9:18:94:55:6d:
         83:b5:74:e6:4b:a8:87:f5:03:18:f6:a9:85:34:b4:6d:e9:bb:
         9f:50:72:42:6d:9a:1f:53:fe:12:a8:ea:00:b3:49:0c:74:a2:
         28:9b:da:24:2a:a2:be:47:82:9b:58:70:fe:e9:35:94:80:3f:
         1d:01:a2:8c:98:be:8f:69:ed:48:00:a6:5d:ac:85:94:fb:5b:
         b6:d0:47:0f:e3:1f:f0:a2:f3:42:9d:46:d9:cb:3e:2e:d7:e1:
         e5:89:78:cb:03:f7:c1:2b:c1:85:71:0c:90:50:87:c5:3a:da:
         7b:bd:71:6c:f3:b5:81:c4:7d:7e:84:40:9b:6a:e6:40:75:9c:
         4e:12:a2:b3:41:cc:95:49:2f:80:19:b9:70:13:3d:1c:d8:75:
         12:7c:72:e0:30:10:80:ed:36:b1:c1:1a:9f:25:0a:f1:ac:6d:
         46:bf:55:96:c8:66:8f:59:78:2d:62:77:d8:59:23:41:4d:1f:
         e8:d7:ec:b0:81:1b:ab:ef:4a:8e:eb:c8:04:c6:f1:b2:8a:57:
         5d:2c:5d:10:57:10:e5:2f:d6:f6:87:51:eb:90:cd:8a:89:a2:
         a2:14:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:16:46 2026 by rpki-client