Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          V/hO1PBR8DMJpFIUhqgIFrOfzup7N/odg+fE20Uae2Y=
Subject key identifier:   94:64:48:53:14:0F:CE:32:7E:AB:5D:20:55:CE:DA:91:34:A4:95:72
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       019F86B237FBE4A5D78E4308AD4A0AF546D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          1304
Signing time:             Tue 21 Jul 2026 22:00:54 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:54 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:54 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: kP8NW1NxttcoG8Z4a5U006A+gSIAJHPyiss75zooKh0=)
                          2: pl9mzp_8YMyJw55sEo1vdEjuXI8.roa (hash: gvQ9YBNcPAS5X5E1J1OqXa8f8Nq/+m7113n6v9qADuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:37:fb:e4:a5:d7:8e:43:08:ad:4a:0a:f5:46:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Jul 21 22:00:54 2026 GMT
            Not After : Jul 22 22:00:54 2026 GMT
        Subject: CN=94644853140fce327eab5d2055ceda9134a49572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:8a:97:bb:6f:af:4b:29:f2:eb:d6:7a:01:
                    c9:d3:3e:75:69:9b:d3:72:3d:59:c6:49:c3:02:86:
                    4f:45:ad:bf:bf:16:56:47:67:64:5a:f9:16:9a:0f:
                    62:9b:52:82:1b:4e:35:9a:8f:b4:a3:c9:b3:48:0e:
                    4a:44:45:70:08:33:2b:b3:95:9a:8e:70:7d:7a:a8:
                    8e:c2:db:4f:f9:dd:c3:38:a0:a6:34:dc:f1:ff:3e:
                    bc:99:a8:2b:8d:5b:8a:40:93:17:51:a7:04:d0:58:
                    ac:61:28:5b:66:20:a3:dd:af:21:ef:aa:24:23:b3:
                    3e:c7:95:53:e9:a9:7e:c7:9f:5c:51:e3:54:44:8a:
                    03:db:ab:95:85:4a:7a:fa:17:cf:32:7d:cd:9b:44:
                    1c:c3:fc:ca:32:b0:00:03:67:69:95:96:60:e8:b3:
                    01:f3:a4:7c:a0:c3:65:bc:1e:72:1b:81:b9:a5:31:
                    e2:70:06:30:fa:56:51:b9:cf:26:05:94:c6:83:99:
                    90:54:47:68:f1:d7:31:ed:d8:e7:b1:7a:03:b4:b5:
                    c3:a2:31:9f:9d:76:6c:7c:68:f5:1c:b8:d6:17:d6:
                    46:12:1f:87:f6:33:08:a9:95:43:e1:ca:3a:82:aa:
                    e7:86:80:1d:98:ec:50:ff:9f:a4:87:ad:49:65:14:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:48:53:14:0F:CE:32:7E:AB:5D:20:55:CE:DA:91:34:A4:95:72
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:a1:3c:9d:57:4a:23:94:51:2c:9b:ab:13:54:34:00:a6:
         68:ed:28:ed:db:71:88:8c:ea:b5:72:01:e8:fa:fb:66:d5:93:
         30:7b:25:3c:d7:62:63:c9:12:80:44:e6:34:bf:10:cd:83:7d:
         f7:4d:e8:75:05:5f:12:dd:31:9c:8b:11:8f:f1:74:92:76:9d:
         e0:15:88:3a:54:a0:54:95:e9:3d:71:8b:0c:ef:93:72:86:b4:
         9c:3c:33:d7:aa:1c:49:40:43:2e:c6:d0:ef:8e:dc:61:24:45:
         f7:6d:d9:3d:d2:3b:42:5a:4f:59:ab:87:c1:2c:98:33:16:5f:
         df:8e:f4:c0:3d:5d:9a:de:24:d1:48:85:5f:11:c3:12:89:b4:
         94:70:4f:dc:12:6a:f8:78:92:7f:cd:8e:f7:d0:82:b3:70:19:
         ef:f7:85:3e:b2:d4:91:8f:0d:5d:4d:bc:81:64:44:64:a7:a9:
         7e:41:5d:e2:76:82:51:bc:5e:dd:38:a0:f7:f5:09:eb:99:cd:
         a8:0e:20:31:9d:0a:3f:2b:be:cb:34:bf:ac:26:de:57:a4:5a:
         fb:7c:db:8b:bd:54:38:e8:38:a0:08:35:a4:c6:4d:6d:30:ca:
         07:e7:df:e5:33:e2:69:cb:6b:a3:1f:e4:f2:6a:a5:fb:5e:bf:
         d4:de:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:13:48 2026 by rpki-client