Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
File:                     ihz-evMMHHJdI25KL8Kv1wn65kQ.mft (raw, json)
Hash identifier:          qjhvVIdTBtgXKrZaj2OEwBrgcuDoh58/LQdbsjfPb2c=
Subject key identifier:   18:78:2D:FC:D3:F0:74:90:2C:3A:DD:8A:CA:A1:56:40:39:79:10:E6
Authority key identifier: 8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
Certificate issuer:       /CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Certificate serial:       019FA07291F660AB3CF5E97804ECB2A709AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
Manifest number:          0D8C
Signing time:             Sun 26 Jul 2026 22:01:30 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:30 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:30 +0000
Files and hashes:         1: ihz-evMMHHJdI25KL8Kv1wn65kQ.crl (hash: 3DtYAW644QBuZUZ+PLIjQ96ty7UGdWCgil6yS3CDLG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:91:f6:60:ab:3c:f5:e9:78:04:ec:b2:a7:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
        Validity
            Not Before: Jul 26 22:01:30 2026 GMT
            Not After : Jul 27 22:01:30 2026 GMT
        Subject: CN=18782dfcd3f074902c3add8acaa15640397910e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:4d:41:1a:69:09:3c:14:be:89:75:13:86:
                    61:42:1c:bc:1e:a3:be:ec:97:88:3a:d2:09:d2:7a:
                    e3:10:ec:83:d3:66:42:6d:d2:21:19:73:96:cb:3f:
                    8a:0f:7f:1d:ba:f1:07:a9:7b:45:72:66:c9:24:85:
                    eb:24:16:c5:7b:a5:b6:b9:8c:e5:79:12:fd:4d:93:
                    29:97:2f:90:b2:84:15:36:66:18:17:6c:3d:27:28:
                    90:ef:28:69:f7:bf:ec:fb:27:8e:5c:7b:64:03:b4:
                    b1:ce:f3:b9:0d:b2:32:a9:d7:b7:44:86:a9:b8:6a:
                    40:be:98:f1:cc:dc:c5:aa:c7:f6:ea:13:bf:b4:1b:
                    c3:e2:b5:bb:4c:2b:d2:dd:2d:5a:b1:0c:b0:26:13:
                    ed:21:8b:42:14:ba:34:b8:8c:5e:73:2b:33:b0:2f:
                    54:a2:88:21:41:78:17:d3:1f:ce:67:e1:3e:63:65:
                    a6:80:8a:00:eb:62:94:0e:8d:95:11:b3:53:7f:54:
                    43:10:00:6e:26:95:ec:ef:fa:f0:28:83:fd:17:15:
                    14:36:f6:e9:ea:76:79:0c:46:14:48:ea:85:72:a0:
                    61:59:8c:27:a0:67:8e:1b:b4:33:d2:7f:30:46:5e:
                    8f:22:b3:8c:e7:e8:0f:15:56:b6:34:8f:b2:4c:41:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:78:2D:FC:D3:F0:74:90:2C:3A:DD:8A:CA:A1:56:40:39:79:10:E6
            X509v3 Authority Key Identifier:
                keyid:8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:85:55:89:39:f5:07:04:89:24:0d:c8:67:ac:94:aa:01:0e:
         dd:fd:75:1e:71:df:33:1f:43:eb:83:e0:64:e5:60:38:52:8b:
         d3:c8:e5:58:f7:05:cb:7c:cf:d8:3c:d2:02:05:8b:a0:4f:bc:
         53:af:c8:75:a2:f7:28:f3:8f:d4:9b:b7:8f:7e:ec:91:98:44:
         a1:f1:9f:81:bd:de:82:58:ca:3e:c5:a1:90:8a:74:40:07:25:
         80:4e:7d:bc:c4:4e:db:30:e0:9b:92:50:e6:54:65:d6:40:e8:
         61:d2:36:e2:ff:50:28:7c:3d:34:7c:cc:f0:cf:d4:0a:e5:67:
         b4:57:6d:bb:23:d3:91:2d:84:b4:f3:76:73:e1:7f:8c:19:00:
         d7:d9:96:1b:89:a8:43:28:ce:35:44:f4:f6:19:f8:23:da:31:
         5a:0b:dd:05:fc:dc:e5:5a:13:50:cb:16:94:a4:4c:23:84:e9:
         55:71:73:1b:f7:fc:67:e3:31:bb:2b:61:48:56:c4:c2:d5:5b:
         5e:0a:0f:3c:93:b3:88:71:21:d8:9b:b4:6f:f5:73:36:14:09:
         9f:5a:e6:cd:c1:66:23:e7:cf:81:74:18:35:29:2e:10:d7:d8:
         17:23:f1:99:e0:d9:4c:df:cd:19:04:eb:19:ad:7d:d2:6b:5f:
         70:1c:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:09 2026 by rpki-client