Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          6FTeBlU6361WiTKX2j1a9MIzKChrq0yAb494mD2IlFw=
Subject key identifier:   3E:D8:20:F0:8D:30:BF:DF:92:0D:74:09:F6:EF:E0:05:ED:BB:A9:2B
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       019F965C54C0B1A9D2FE2CFC1ED636737C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          0937
Signing time:             Fri 24 Jul 2026 23:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 23:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 23:01:01 +0000
Files and hashes:         1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: mtXQfc9UN11W0+rBx9/rlTJSMgazhpQYbBns7aSca3U=)
                          2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:5c:54:c0:b1:a9:d2:fe:2c:fc:1e:d6:36:73:7c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Jul 24 23:01:01 2026 GMT
            Not After : Jul 25 23:01:01 2026 GMT
        Subject: CN=3ed820f08d30bfdf920d7409f6efe005edbba92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:83:bb:b2:09:f2:b5:42:57:ee:5c:f7:42:
                    2b:63:30:11:c1:db:c7:a8:46:f1:e6:a4:ef:b1:4d:
                    43:87:9d:45:0e:b1:07:83:19:fc:7e:e5:0c:31:40:
                    5e:c5:b0:41:a1:f8:dc:ab:96:0c:0c:40:dc:55:e8:
                    d7:bc:7e:99:25:c1:35:b4:5a:63:69:ee:a3:bf:52:
                    7f:45:6a:e4:6b:50:19:8c:7e:e1:72:ab:1b:72:ab:
                    68:88:f0:1b:54:ac:a1:6d:b8:ba:dd:e2:04:8b:5c:
                    12:f1:f8:e9:02:04:ee:48:a9:c3:b1:38:0c:41:b9:
                    54:57:06:a1:9f:7e:bf:dd:85:15:bf:31:a4:98:39:
                    7d:db:02:85:1c:ff:ee:19:22:aa:8b:85:40:62:de:
                    c5:21:9e:b7:82:e3:8c:f6:39:b3:8c:4d:33:dc:0c:
                    a7:ba:d1:df:46:93:40:d7:7e:77:25:f2:f9:5f:30:
                    5e:a6:88:4e:48:15:be:2b:d2:0b:50:20:87:67:b9:
                    7f:18:af:7a:b5:78:58:f1:52:97:b6:2e:de:db:80:
                    92:4f:41:5a:c6:76:87:9c:56:c2:75:ba:cd:45:55:
                    04:20:d1:94:ad:37:2f:f0:c9:31:27:48:ef:41:f9:
                    fc:f6:c8:f2:15:85:85:99:da:95:5e:4d:7e:08:66:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:20:F0:8D:30:BF:DF:92:0D:74:09:F6:EF:E0:05:ED:BB:A9:2B
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:58:de:bf:69:d6:4e:f1:32:32:f7:32:43:ba:f5:b2:e9:
         16:58:13:4d:65:ca:cf:71:43:25:e6:58:6e:d9:8d:51:4d:02:
         27:af:d0:6c:4d:39:95:a4:cf:cc:b0:2e:7e:f2:5e:d1:89:4e:
         49:c1:18:b5:28:1c:a7:96:84:83:75:7c:79:8e:90:8d:e2:37:
         3b:57:7a:c4:6f:5c:31:a6:d6:a5:b7:e9:0b:89:69:3e:99:9b:
         ac:b1:14:c3:ad:40:93:f1:cb:e7:61:9a:e7:d1:e6:e0:de:cc:
         d5:36:ef:6f:75:a6:33:55:9b:e1:da:de:6d:f8:e6:ab:2d:69:
         7b:95:19:c4:a9:a6:2e:20:91:a2:99:7b:d5:03:50:9c:15:89:
         e8:bc:4f:a9:b0:91:63:02:44:e1:eb:07:9c:37:f3:cb:c6:31:
         fd:95:5d:1e:76:20:71:87:d0:95:70:33:78:d7:b2:4f:03:e9:
         fc:52:20:e3:09:56:35:39:1e:4a:3d:18:b8:c8:61:f7:eb:0b:
         1c:9c:c9:0d:74:28:4b:c0:9c:c2:57:e4:4a:36:de:76:e3:b6:
         aa:60:42:26:4b:a4:0c:f5:7f:da:90:b9:cf:3f:7a:4c:f8:35:
         63:28:4e:82:cb:7d:3a:bc:e6:6c:fa:af:46:fe:ab:08:f7:d0:
         b4:0c:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:41:43 2026 by rpki-client