Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File:                     Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier:          SsqHVJ5duezOf0ChwCSKtArj0hsphx/OSWYBsQCViao=
Subject key identifier:   74:CC:97:F9:17:66:44:06:EE:99:C1:D1:A3:71:71:17:37:AC:06:DD
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer:       /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial:       019FA1BC09FAD8D38A01E42B2A1908C08675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number:          0946
Signing time:             Mon 27 Jul 2026 04:01:22 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:22 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:22 +0000
Files and hashes:         1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: hMceL+Te6E8KCiQyEeahXX/E46qdwKR1/Ym3KUDM7DI=)
                          2: cStfMjNC3Zvni5434bm3caCEf5o.roa (hash: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8=)
                          3: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (hash: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bc:09:fa:d8:d3:8a:01:e4:2b:2a:19:08:c0:86:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
        Validity
            Not Before: Jul 27 04:01:22 2026 GMT
            Not After : Jul 28 04:01:22 2026 GMT
        Subject: CN=74cc97f917664406ee99c1d1a371711737ac06dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:56:8a:16:c5:9b:61:55:ac:ed:c2:dd:80:
                    f7:7a:7e:a7:2f:46:52:61:c4:c2:56:1b:5d:95:28:
                    96:ab:80:8e:9a:e8:dc:34:02:bb:9d:c1:7b:6c:e0:
                    6b:36:4f:b6:56:5f:50:0e:6e:1a:0d:ac:aa:1f:29:
                    23:f3:60:e3:8e:68:7f:cf:93:56:fa:a7:d5:02:21:
                    76:69:92:32:91:35:9e:33:b9:07:72:1d:fc:86:98:
                    fe:fd:8f:6c:c4:44:bc:3c:63:b5:7c:e6:dd:48:be:
                    b4:13:b8:f2:67:3a:49:06:a6:2c:9b:8a:c1:34:78:
                    f7:81:f4:0c:9a:12:22:9b:10:4e:04:6f:09:51:5f:
                    16:27:96:70:2c:34:75:34:82:c6:90:de:45:17:6d:
                    1d:be:d9:b1:c3:57:32:51:c6:02:22:d0:9c:92:b6:
                    42:26:5b:3e:f3:68:64:a1:0c:c6:00:20:30:b5:59:
                    a4:e9:0d:79:30:b0:9d:90:0e:07:a4:02:04:72:96:
                    2e:9b:31:70:00:56:99:64:b8:a2:14:0c:55:42:00:
                    0d:cc:26:ea:8b:ca:95:ab:5f:59:c9:ee:5c:46:0a:
                    c4:cd:4f:b6:98:29:68:c6:b0:0b:b6:17:9c:6e:00:
                    cd:06:57:6a:1d:0d:e1:d1:dc:1e:71:01:57:b7:4c:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:97:F9:17:66:44:06:EE:99:C1:D1:A3:71:71:17:37:AC:06:DD
            X509v3 Authority Key Identifier:
                keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:07:c6:ed:93:fe:41:1a:88:25:83:0b:4c:f3:00:8b:82:35:
         d8:eb:e2:df:7c:c0:0e:a6:1e:42:cd:13:71:78:ab:cc:75:00:
         73:b7:f6:32:e4:42:5d:6f:73:9f:46:20:57:c4:af:c1:7d:10:
         61:ee:0e:5a:ec:00:00:30:2d:02:ed:2e:70:d7:83:88:08:69:
         a6:db:ef:02:3b:4f:25:2b:14:a3:aa:c3:93:26:fa:75:56:b5:
         45:22:db:ca:49:50:70:3a:7a:57:06:86:6d:e8:cf:b1:e3:fa:
         8c:3e:14:b5:6f:94:7f:c1:01:21:e2:b6:4f:c2:14:75:34:c8:
         bd:f2:7f:9e:7e:83:66:19:3d:48:16:28:5e:a7:0f:18:2c:ff:
         11:b6:2c:13:97:5a:95:58:d5:7a:01:2f:bf:55:0f:8f:99:68:
         25:bb:36:60:e0:64:f5:b8:ad:8a:b4:3e:b0:d7:2f:bc:c1:62:
         30:05:3a:38:92:35:02:d8:c6:3c:aa:51:28:10:b7:41:b8:f5:
         04:43:ac:b4:b6:62:ed:58:47:24:0a:41:9c:e4:6e:98:34:0c:
         6e:1b:3e:e5:91:9c:43:62:91:2a:43:53:67:4c:d9:2e:78:a3:
         3b:45:f7:cc:e5:59:f5:a8:c6:b4:b5:c8:6c:d2:11:d6:be:4c:
         86:be:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:58:25 2026 by rpki-client