Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          P1l0vkiDBwSNuRNRtNdICw8xFVopOAt6Zy+2l5PgePk=
Subject key identifier:   9D:C5:5E:22:A6:83:EC:C1:DB:85:6A:9C:A3:84:5C:47:92:2C:15:CC
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       019F92486D764C73E1CE92038C553641005B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          195B
Signing time:             Fri 24 Jul 2026 04:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:47 +0000
Files and hashes:         1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
                          2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
                          3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: lAQ9rudxFj7kHeah6K4qztJx4NGirWzq7u/IXzM3cmQ=)
                          4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:6d:76:4c:73:e1:ce:92:03:8c:55:36:41:00:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Jul 24 04:00:47 2026 GMT
            Not After : Jul 25 04:00:47 2026 GMT
        Subject: CN=9dc55e22a683ecc1db856a9ca3845c47922c15cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:4d:95:80:4a:3e:0d:f9:07:5f:2f:a2:16:
                    8b:99:02:06:89:dc:8b:81:2e:93:f4:34:30:7b:d6:
                    87:c2:3a:24:d6:21:b4:7e:74:fb:61:32:11:cc:7b:
                    80:fa:90:ce:eb:bc:d3:70:a5:48:92:8f:ea:76:2f:
                    e6:10:eb:da:e7:cc:53:b3:be:1f:db:a1:d3:48:04:
                    bd:12:c9:73:8c:c8:8a:1e:20:d6:ee:db:2b:ea:67:
                    48:9d:d1:b4:22:2c:ba:35:9c:4e:9a:6e:11:06:ab:
                    fb:31:f1:2b:ab:ab:bc:dd:e4:97:6a:00:90:59:81:
                    38:ca:49:f1:2d:30:90:76:cd:2d:05:cf:3c:6b:b3:
                    2e:23:37:81:8f:ad:97:f8:1a:af:c4:be:6b:95:0e:
                    b2:be:17:9e:61:67:48:ac:be:d5:53:b3:42:57:60:
                    96:e7:9b:89:22:9e:4d:18:63:29:ad:2f:ec:9f:14:
                    58:b1:26:78:4b:6a:cf:d1:0a:fc:a7:6a:e3:59:78:
                    c2:b0:09:43:53:70:0a:c8:3d:f3:49:d9:d7:85:df:
                    57:b3:97:d7:a2:a7:9c:20:14:ae:2d:f5:2f:44:eb:
                    8f:7b:d2:b6:6d:a1:17:51:f3:b2:00:63:c7:83:5e:
                    67:89:8a:dd:54:7d:3b:89:4f:02:51:9b:5e:a8:f5:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C5:5E:22:A6:83:EC:C1:DB:85:6A:9C:A3:84:5C:47:92:2C:15:CC
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:c5:d1:d6:e2:ce:16:dc:f1:87:10:ab:cd:26:e6:fe:53:
         da:c1:94:34:20:1e:72:3a:cd:b6:43:31:e3:33:92:b9:71:f1:
         c6:38:09:fe:a0:1b:f0:54:5e:42:1c:26:f7:36:36:71:d6:8b:
         a1:93:46:bc:71:10:0a:76:62:da:f9:26:39:a6:e9:00:55:ec:
         2f:34:c8:d3:39:98:c3:df:65:2a:1f:d6:e4:37:cf:71:a4:b8:
         0b:ce:91:cb:8c:de:66:ac:78:fe:3e:17:08:e6:a5:22:b1:0b:
         03:f2:7d:21:72:23:76:e0:1a:a6:eb:f9:05:7b:da:a1:85:2b:
         de:da:f3:cd:a6:e8:a6:ad:c3:40:3b:9d:37:a8:50:ac:a7:56:
         63:fa:95:0c:6c:e1:72:1b:c5:98:94:d3:61:b8:21:89:32:06:
         72:33:5c:18:fd:3c:9c:74:c6:c1:77:f8:7b:94:94:10:bf:d4:
         e8:c4:8a:a7:aa:58:db:5f:ce:ce:19:3e:e4:31:dc:88:b3:86:
         bb:94:f8:ff:64:1c:0a:23:d3:81:64:8a:8b:9a:1b:cb:43:b7:
         5f:89:ec:de:9f:ac:79:84:3f:a8:ff:6e:5c:bd:2a:c8:21:79:
         d4:02:07:31:fa:74:07:6a:73:67:f6:41:4b:ef:34:eb:2b:3a:
         5f:a5:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:51 2026 by rpki-client