Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File:                     Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier:          ussiL+2yxOaiJX4iud3HrmA6Nb5ScciBurbzTw2NNTQ=
Subject key identifier:   78:28:54:6A:4E:31:93:79:53:35:CD:EF:D0:10:D2:26:99:88:BA:3F
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer:       /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial:       019F9391D02F68245A96FBB3A7613090C5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number:          1452
Signing time:             Fri 24 Jul 2026 10:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:34 +0000
Files and hashes:         1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
                          2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: RrfEtOZzuNfFWeRwgVXohhoD8JAcXupj0KC9qIfmfcI=)
                          3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:d0:2f:68:24:5a:96:fb:b3:a7:61:30:90:c5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
        Validity
            Not Before: Jul 24 10:00:34 2026 GMT
            Not After : Jul 25 10:00:34 2026 GMT
        Subject: CN=7828546a4e3193795335cdefd010d2269988ba3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:15:d1:63:60:a5:31:36:58:0d:ac:96:fe:
                    c7:5b:89:90:25:1c:8f:14:c6:89:dd:1a:4d:db:3e:
                    32:4f:04:21:99:c6:fe:b8:99:57:7f:f3:9c:ad:cc:
                    55:e9:e1:e9:91:ac:8d:4c:5c:9f:65:bc:33:f7:73:
                    0e:bb:a5:57:bd:4a:0f:a5:6c:53:01:22:ba:70:9a:
                    43:cb:f9:9f:1f:9c:7f:7b:e3:b5:3e:0a:0a:3c:c3:
                    bb:d2:2d:0a:77:d1:16:28:a4:60:e9:0b:7e:93:10:
                    46:43:2f:83:3c:31:25:bb:5a:3d:53:99:cf:41:aa:
                    ed:44:99:bc:3c:0c:95:96:34:ad:35:13:26:a7:84:
                    75:43:24:8a:1b:68:7f:75:9a:39:5e:55:bb:f1:c7:
                    f0:de:9c:a4:aa:e6:e4:45:e4:8c:30:43:16:a5:51:
                    e2:d9:d8:3c:29:f1:d8:78:5a:ce:9e:d4:9a:fb:0c:
                    c1:34:46:45:aa:5c:4b:94:c8:c4:1a:6b:c1:2e:af:
                    24:37:14:d2:4e:07:5d:f5:5b:c9:4b:c4:ee:0f:cb:
                    84:f0:68:c3:c8:1e:2c:e6:8d:f6:08:67:a6:5b:f3:
                    2d:f1:f6:8b:6e:82:4c:e0:2a:7e:7d:a4:5e:a9:cb:
                    88:55:ae:b3:c2:a7:d1:25:6b:4e:d8:9b:75:44:ac:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:54:6A:4E:31:93:79:53:35:CD:EF:D0:10:D2:26:99:88:BA:3F
            X509v3 Authority Key Identifier:
                keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:ce:6a:6f:bf:43:46:26:59:d7:4a:35:ea:0a:02:b4:8f:
         5a:6a:a9:1e:4b:b3:88:f8:9b:c0:5b:c8:02:ed:c2:f6:5c:f5:
         dc:05:c2:ca:12:89:71:f3:c9:81:b8:0d:77:c8:66:d5:cd:9a:
         cf:6a:ca:de:d3:cf:13:dd:60:f9:55:f8:31:eb:f2:16:87:13:
         9b:a1:ad:4f:3c:4e:3e:b3:36:26:3b:a5:43:e3:a8:83:24:e4:
         cf:04:8d:1c:63:86:b1:95:c8:b7:18:87:ad:0a:d6:5c:3a:fb:
         83:8c:a6:22:4d:c4:80:9a:a9:ef:83:9c:58:52:75:af:a1:1a:
         77:d8:72:54:a7:1e:3f:4f:75:0f:12:63:b4:da:34:e9:41:a7:
         7d:12:5e:53:7a:b7:ea:19:b3:63:36:75:43:fc:93:4c:5f:98:
         d2:3f:1f:3b:e2:27:30:90:5b:6c:40:d3:6e:77:a1:82:50:53:
         f9:f8:c9:54:e9:12:13:a4:2f:f2:8d:f9:73:34:34:be:e0:85:
         01:e8:ac:96:b6:f5:cd:81:d1:c4:b7:0d:3f:87:1b:72:59:f6:
         8e:ec:6d:1f:be:93:64:5b:ce:c7:80:2d:68:19:d0:6c:b5:6b:
         0d:aa:2c:8d:20:5a:99:8b:22:ba:66:2b:80:18:f0:8d:ce:bd:
         6c:ec:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:56 2026 by rpki-client