Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          XwrtgGE5C86Enhun9Vtt1bTwoNziduFLn2WM+AAnvR0=
Subject key identifier:   F8:81:00:88:1E:34:BA:7C:5D:FD:8C:89:9C:63:19:24:81:30:FE:FC
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       019F93C8B6A7D58A70580474984190EF8930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          0E59
Signing time:             Fri 24 Jul 2026 11:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:32 +0000
Files and hashes:         1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: l9XO3PJWX9L0mbd2sAfK+lwW1NXuPVEI4QXK75kIAe0=)
                          2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
                          3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
                          4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:b6:a7:d5:8a:70:58:04:74:98:41:90:ef:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Jul 24 11:00:32 2026 GMT
            Not After : Jul 25 11:00:32 2026 GMT
        Subject: CN=f88100881e34ba7c5dfd8c899c6319248130fefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:e1:c7:cf:f7:12:a9:67:53:53:72:12:2e:
                    cd:e5:ed:86:df:df:ad:91:2f:2c:d4:cb:b3:da:bf:
                    c4:80:b6:1e:d5:fc:96:47:fc:b6:35:ee:07:be:25:
                    2f:fc:0d:e3:bb:3f:e9:b5:78:aa:5f:be:f4:fd:c3:
                    44:c5:8f:79:2f:c6:c7:9f:e5:fa:66:e6:1e:0a:59:
                    32:04:fe:da:7b:6e:14:7d:79:be:26:6c:51:7a:bb:
                    0a:68:7d:98:c6:18:0b:42:77:59:63:c6:8c:45:28:
                    b7:f7:2b:1a:7c:27:44:2e:bc:66:c1:5d:b6:62:f3:
                    9b:c6:ae:b8:85:43:47:98:b9:07:09:e6:e0:16:6f:
                    46:8f:d4:8f:9b:93:46:ae:af:b8:f0:56:19:b6:6a:
                    bb:f4:1f:c2:fe:43:85:8c:c2:98:ca:9a:58:cb:c1:
                    e5:6c:3d:7d:f3:da:d6:3e:26:a3:6f:41:32:fa:ef:
                    05:7e:5e:34:96:19:83:ed:b7:16:dc:9b:52:91:a9:
                    ee:7f:c7:f0:55:82:22:9f:5e:8b:5e:c6:cd:f9:ae:
                    6c:19:92:76:f5:f3:2c:8c:38:50:5f:56:f0:8b:d1:
                    58:5e:f9:a2:5f:28:dc:67:cd:5d:c2:9d:af:c4:06:
                    8b:36:e2:ad:9a:ab:fe:f1:b3:2c:6b:42:a2:bd:ea:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:81:00:88:1E:34:BA:7C:5D:FD:8C:89:9C:63:19:24:81:30:FE:FC
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:39:ff:d7:ac:07:d8:ef:3f:dc:6f:6f:51:ef:9a:f7:f1:
         43:8a:04:91:af:c0:e6:76:a0:5a:67:9d:5e:ab:91:e8:47:7b:
         92:57:0a:81:8f:ec:e6:4c:18:46:5d:84:a3:c7:87:19:89:6c:
         d0:c4:d7:5b:96:59:24:de:94:0b:b6:d9:27:66:20:ef:d1:53:
         ae:83:02:3a:02:2f:2e:46:e5:60:bc:55:59:70:0b:0b:6a:c3:
         3a:4b:65:1e:dc:ad:b7:a7:47:3c:e0:16:e5:5e:13:27:ae:ac:
         9c:e9:01:3c:05:b5:0f:38:16:4a:85:4a:0c:9b:a3:fd:e0:01:
         5f:9d:8b:20:19:f8:5a:71:be:45:a9:b7:af:60:2e:9e:dd:e7:
         0f:ad:dc:dd:46:58:a8:a2:82:55:8d:78:5d:a9:5a:5d:92:a8:
         c5:1c:f5:19:e5:e5:0d:ff:29:18:13:7e:bc:ec:96:82:18:71:
         a2:1d:e3:40:5e:e8:c1:81:0b:15:1a:65:d9:94:85:e7:70:3d:
         3d:e3:98:6d:90:0a:f1:da:ac:9d:c5:6b:86:8f:01:f4:da:ce:
         f5:20:2b:cc:03:22:c0:34:ba:a9:53:44:a8:0e:f2:b8:b1:8f:
         05:54:5d:6e:97:aa:f7:19:24:75:11:34:5e:e5:6f:06:75:16:
         33:17:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:11 2026 by rpki-client