Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File:                     IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier:          URWr1mwY5jylBAHkMUgtZ2GVdzRJei84jllseGd8db4=
Subject key identifier:   C5:EC:9B:48:56:AA:C5:FB:DE:AA:B3:06:55:2E:D2:ED:B9:A0:34:0A
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer:       /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial:       019F9F2860FC7FBC5F9AE30B5D18DB687CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 16:00:51 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:51 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:51 +0000
Files and hashes:         1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: pVRf2jZtEcaRgyiZp1rdFDkB4sUeup+Qp4s1SMUBi+0=)
                          2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
                          3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:60:fc:7f:bc:5f:9a:e3:0b:5d:18:db:68:7c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
        Validity
            Not Before: Jul 26 16:00:51 2026 GMT
            Not After : Jul 27 16:00:51 2026 GMT
        Subject: CN=c5ec9b4856aac5fbdeaab306552ed2edb9a0340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:07:10:f4:cd:3a:1a:8b:ab:e2:15:55:bc:
                    f2:5f:96:04:13:44:0b:70:62:21:16:69:17:6b:5a:
                    92:00:db:4c:0a:ec:b9:77:6d:f3:5f:7c:cc:cc:0b:
                    23:d4:18:07:6f:12:3e:1d:9c:8c:85:e1:66:36:5b:
                    95:af:4a:6f:25:78:09:8f:d3:56:90:8c:ad:b2:b7:
                    a3:f1:7b:f6:e3:46:e0:84:e0:2a:7b:16:3a:85:38:
                    fd:d9:3b:20:68:b3:6e:be:23:3c:14:39:09:65:0b:
                    65:ec:da:ab:29:60:af:6d:8c:fc:83:9b:d6:39:08:
                    cc:e9:97:bb:cd:a6:3d:a2:37:47:d1:83:06:1f:6c:
                    11:4f:d7:14:f6:b2:df:3d:5b:2b:8a:c7:15:0a:32:
                    32:02:16:a6:62:4e:4c:e5:f4:d4:d3:cc:23:2e:b9:
                    5f:65:97:1e:c6:46:dd:61:68:9b:8f:18:ee:44:1a:
                    29:85:fc:7a:49:89:61:42:f5:7b:d1:fd:e9:b1:29:
                    e1:b9:7e:8b:c8:dd:e0:f6:87:e9:c4:2c:be:29:99:
                    e6:e5:cf:d8:64:b2:b9:ec:b0:00:c0:f1:44:fd:e4:
                    17:da:4c:e1:35:a3:1e:0f:13:6c:14:d8:6d:23:14:
                    8b:7d:e0:d0:ec:dd:ff:f9:f7:3b:b9:99:3b:79:e8:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:9B:48:56:AA:C5:FB:DE:AA:B3:06:55:2E:D2:ED:B9:A0:34:0A
            X509v3 Authority Key Identifier:
                keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:6f:1c:de:92:3d:fd:e3:b8:cf:30:92:54:57:01:5e:be:
         88:70:9a:c2:79:2a:0c:71:8b:06:2d:69:a3:ad:6a:f2:38:c3:
         6f:03:01:8f:62:4c:3a:1e:e7:1f:76:15:04:c0:f6:1d:4e:a0:
         a4:48:a0:eb:51:87:b9:1a:a6:02:1f:58:83:0d:ae:af:cc:12:
         4f:35:10:17:b2:dd:e8:c5:75:e9:78:3f:1a:3f:4f:a4:6b:62:
         cf:54:2e:59:e5:6e:06:65:fc:6a:68:b7:3f:50:0a:37:32:c9:
         ee:f8:4b:d6:fe:67:ce:55:5d:9f:b7:f6:3b:7e:89:64:e4:80:
         ca:c2:0a:2b:58:94:c3:53:3f:d7:68:8d:64:7d:e0:59:b8:c3:
         20:4d:ea:b4:85:fb:1a:af:dc:8e:b4:73:f7:52:35:90:a2:26:
         6f:09:cc:7a:d8:79:b8:a0:62:7f:5f:9b:40:b2:e1:91:ac:c1:
         f9:fc:8c:4f:da:dd:02:02:d6:e0:80:df:d7:5d:3c:f1:07:60:
         e1:ee:f5:98:ff:36:87:f7:3a:33:da:66:66:c0:40:88:46:f2:
         59:ae:ff:fc:59:cb:b1:8e:c8:92:14:40:4e:c2:e9:38:19:0e:
         e6:d6:c4:05:17:7a:75:2f:26:0d:57:7a:a1:84:1f:96:39:cd:
         32:78:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:51:04 2026 by rpki-client