Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File:                     izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier:          suDWmtF9bGLyVITDLUKfC61xu+c7LFdUO+vlesCkbTI=
Subject key identifier:   A6:D2:49:35:F2:D4:8C:43:4D:E5:45:01:8D:21:15:13:C5:85:23:E0
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer:       /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial:       019F9EF23EB5AB10E48DFCADD980D5E55DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number:          16C9
Signing time:             Sun 26 Jul 2026 15:01:43 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:43 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:43 +0000
Files and hashes:         1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
                          2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: UUMfHgT24tqi7awc1NHPeGcAFayVLM1qe+9ZiaT0SQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:3e:b5:ab:10:e4:8d:fc:ad:d9:80:d5:e5:5d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
        Validity
            Not Before: Jul 26 15:01:43 2026 GMT
            Not After : Jul 27 15:01:43 2026 GMT
        Subject: CN=a6d24935f2d48c434de545018d211513c58523e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a4:2e:cd:58:cc:a1:ca:c0:76:de:5d:18:b7:
                    9f:ac:da:c7:df:61:0e:9b:9e:49:de:32:60:4a:5e:
                    af:d6:e5:8c:31:c1:1e:40:a9:03:89:15:d9:7a:7e:
                    0a:96:30:91:60:10:fd:86:21:7d:42:21:ea:51:80:
                    69:dd:f2:ee:20:81:a1:90:6a:f3:30:18:64:33:6d:
                    ef:07:c5:58:b8:a9:b9:cd:49:22:0a:3e:6a:2f:97:
                    3d:71:52:7c:3a:37:38:b7:6f:e2:9d:99:59:6b:a0:
                    ca:5a:10:76:a5:5c:ab:70:03:c0:1f:36:d7:93:80:
                    d6:3c:d8:b6:2f:ca:3f:32:cc:84:ad:e4:f0:94:6a:
                    81:1a:9e:fe:f0:e2:7d:fe:af:26:11:8c:6b:01:cc:
                    e6:50:d1:e2:d5:80:df:7e:5a:29:7e:2d:23:6f:4e:
                    26:3b:82:8e:04:52:36:8f:fd:d6:89:17:9f:1b:0f:
                    36:5a:d6:cf:6c:54:46:34:3b:b2:b9:c8:80:14:c6:
                    b8:d8:7e:dc:ed:78:b6:3a:5c:fc:8a:96:a9:0e:e5:
                    13:79:9c:d7:c2:d4:47:13:c2:87:7a:ef:1e:86:62:
                    bd:6e:1f:ce:8c:a0:93:ef:cd:7c:80:47:7b:2a:89:
                    a4:d2:2d:6d:b8:0d:ee:3b:57:af:cb:73:60:e8:d2:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:49:35:F2:D4:8C:43:4D:E5:45:01:8D:21:15:13:C5:85:23:E0
            X509v3 Authority Key Identifier:
                keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:35:35:33:b3:a0:13:1c:1f:d9:05:2c:7a:7c:da:ea:27:
         d0:ce:01:b2:a6:fd:63:54:f7:2f:dd:51:d2:48:a8:99:3b:f4:
         37:46:56:2f:c7:ed:70:49:b0:35:fb:4c:f6:25:df:c3:40:93:
         72:00:9b:b2:b2:7f:be:1f:54:d5:39:1b:20:d0:9f:30:4b:ab:
         6c:f8:64:77:3f:35:6d:89:ef:89:6b:07:dd:b4:42:c5:41:b4:
         f7:81:b6:43:44:ed:3c:3d:de:3c:7b:91:82:5d:df:8b:bb:57:
         41:18:1e:68:b9:97:12:d6:10:1b:09:86:5a:89:77:d0:02:df:
         68:46:ba:68:ff:04:60:f7:d8:e4:b0:3f:c2:99:5c:30:62:69:
         17:0b:82:b5:39:94:28:d4:71:66:4a:0f:81:50:de:01:09:4f:
         97:ad:61:08:3a:f9:e6:a7:5c:ba:48:74:c4:02:15:b1:c1:81:
         3b:bd:25:f6:b3:5e:d1:48:58:47:6f:b4:cc:ab:f5:66:ec:47:
         8b:44:a5:1e:36:a1:42:2a:40:5a:e1:12:4f:a4:22:41:bf:41:
         61:82:f1:cf:1f:ab:7e:60:65:5a:57:11:8c:b6:d2:d3:da:01:
         c7:8a:ca:92:48:66:fe:dc:e5:69:97:6b:d7:eb:e3:4b:e1:27:
         6a:9a:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:01 2026 by rpki-client