Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File:                     igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier:          8yse1/PZtG47FmmmfHu6H1JehxaOHJBjLkzBZQ9ePCM=
Subject key identifier:   D1:C6:0A:A7:F1:E5:93:E0:07:99:D3:68:D1:41:C5:72:BD:63:14:DB
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer:       /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial:       019F86B19F34177C2B72D7A3A527CDBD4A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number:          1954
Signing time:             Tue 21 Jul 2026 22:00:15 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:15 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:15 +0000
Files and hashes:         1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
                          2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
                          3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: PX0ziENqK/cezrr6/qp7VEZAwB6dcRWIriaZ6kGVY2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b1:9f:34:17:7c:2b:72:d7:a3:a5:27:cd:bd:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
        Validity
            Not Before: Jul 21 22:00:15 2026 GMT
            Not After : Jul 22 22:00:15 2026 GMT
        Subject: CN=d1c60aa7f1e593e00799d368d141c572bd6314db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:0b:b6:82:d3:91:6a:a7:d8:38:a2:76:d2:
                    ad:5b:8e:e1:bf:c9:b1:0f:a8:52:c7:4c:92:be:f1:
                    e4:82:d0:e5:35:61:04:f8:d4:34:26:ef:42:fe:05:
                    e0:b3:e3:f8:33:c6:0d:21:5a:a1:8b:e6:51:89:9b:
                    5c:93:b9:1c:b4:a9:42:92:8e:72:a8:92:c6:25:fb:
                    78:16:ee:88:e9:a8:bc:98:bc:f8:ca:d9:1a:8b:b4:
                    8f:85:ec:64:fa:6e:8f:6c:d9:4b:c7:e4:91:3f:57:
                    a0:70:cc:50:6f:0c:45:9e:3e:bf:da:90:20:c8:64:
                    5d:0d:80:1a:b6:8b:8c:22:69:e2:de:cd:ff:f6:cf:
                    23:4c:66:b8:0e:a4:3f:94:cd:98:f2:f7:e6:e6:d9:
                    ba:47:4a:9e:9f:61:5a:cd:bb:b1:d5:36:df:2d:d9:
                    4d:df:04:ad:88:5a:ed:6d:69:39:45:96:23:3a:16:
                    6a:25:89:91:5b:70:fe:06:3b:e1:5f:74:c4:5a:ba:
                    22:90:01:cd:ce:8f:42:74:30:c8:56:d7:0b:0b:69:
                    87:1b:db:01:8e:76:14:c5:1e:a7:d3:8c:3b:66:4a:
                    b2:b0:91:bb:ca:71:a3:b7:81:b4:52:83:b6:74:68:
                    6d:07:e2:63:fb:02:95:a1:8b:63:d2:1e:c4:3d:e5:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C6:0A:A7:F1:E5:93:E0:07:99:D3:68:D1:41:C5:72:BD:63:14:DB
            X509v3 Authority Key Identifier:
                keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:12:31:06:fe:ec:03:df:a0:6b:5d:e8:f0:0f:a9:72:fa:bb:
         79:88:00:8f:cf:70:0a:6e:03:e5:2b:33:ed:24:4a:0f:47:2c:
         07:1f:71:77:06:ef:6d:08:d1:be:07:80:55:aa:8c:e6:36:9e:
         00:a8:84:16:29:49:87:c0:3a:41:2e:e6:06:70:c4:4e:6d:3e:
         d4:c0:fa:14:29:00:db:a7:10:3c:7f:9e:e3:38:9d:5c:47:ab:
         1b:09:4d:e7:2e:18:a0:08:23:e6:0e:e7:7c:35:28:98:37:d9:
         ba:3b:e0:2d:6e:4b:42:82:61:33:84:b5:60:cd:c1:67:ac:b7:
         3f:1c:74:fd:78:eb:b3:67:ee:aa:14:0b:b2:a7:a9:27:b0:b9:
         55:92:25:59:0b:a4:49:3d:de:8b:3b:6c:63:2a:b1:bc:88:57:
         5a:41:8a:e7:10:c6:d9:bf:4f:76:8d:8a:0f:65:ed:1b:f9:dc:
         2b:95:c4:68:13:90:da:1b:b4:a8:d2:8e:b6:11:8a:70:1d:f9:
         bd:d0:b1:a0:86:7f:8c:26:21:29:09:0b:ef:ed:b5:4b:ed:5f:
         f8:80:f5:bf:e4:3c:4c:35:24:e1:2e:bb:51:14:6d:63:80:7a:
         7f:3f:54:94:e8:4f:26:42:c4:7f:30:b2:61:4f:cf:a3:5d:1d:
         1b:41:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:38:19 2026 by rpki-client