Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          3xOVinJ0oF1nZyzm124q91cbRNS4vusjhPau7T5esOI=
Subject key identifier:   81:B9:B0:85:12:B5:EC:9B:A6:39:B7:F8:A4:7C:C5:73:71:2F:A0:7E
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       019FA03B014D309FF5BFBFFABA8BEBA2E1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          0899
Signing time:             Sun 26 Jul 2026 21:00:49 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:49 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:49 +0000
Files and hashes:         1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
                          2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: QgzefogE4XjDxn+eFt/zFm7ImiSKpDx/+cDlBhXjjBE=)
                          4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
                          5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
                          6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
                          7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:01:4d:30:9f:f5:bf:bf:fa:ba:8b:eb:a2:e1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Jul 26 21:00:49 2026 GMT
            Not After : Jul 27 21:00:49 2026 GMT
        Subject: CN=81b9b08512b5ec9ba639b7f8a47cc573712fa07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:63:5b:3d:05:32:7b:92:43:6c:03:83:15:fd:
                    ea:e8:77:fe:49:12:ad:ff:8f:71:6c:0d:c3:56:4c:
                    26:44:d8:fa:77:61:31:6e:f5:71:4a:ec:21:92:fc:
                    5b:79:81:82:45:2e:d9:b5:eb:22:c6:5a:f1:71:2a:
                    4d:b4:5d:49:62:23:9b:73:34:b1:67:3e:8a:4a:7d:
                    28:9d:3c:ec:25:9f:8d:43:de:36:42:ac:de:7a:63:
                    80:85:9c:1a:c0:19:e8:0f:dd:dd:0c:e2:96:f3:bb:
                    0f:fa:bf:b8:49:e7:ba:94:a2:59:ae:8a:15:f0:8c:
                    df:15:48:65:d9:8e:f2:d1:09:ef:da:da:9c:b9:0f:
                    b8:34:dd:b3:e6:51:79:df:1c:d5:d2:56:fb:46:fc:
                    b1:7a:15:4e:2a:99:aa:04:d6:6d:9b:16:19:8e:e6:
                    55:13:da:39:ca:34:8b:af:28:42:f9:be:82:21:62:
                    51:2a:da:97:69:7b:15:b5:92:0c:94:09:28:5d:9a:
                    b1:a2:9d:fa:44:ce:2d:70:b2:96:ed:5d:7d:d7:3a:
                    fa:4d:75:b0:43:8b:67:3a:fa:0d:b3:18:d3:4d:19:
                    34:45:d4:f1:ef:0a:09:b6:42:06:67:3f:1e:97:0d:
                    be:bd:c0:72:41:42:0d:71:ee:5e:22:18:80:84:e9:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:B0:85:12:B5:EC:9B:A6:39:B7:F8:A4:7C:C5:73:71:2F:A0:7E
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:64:4e:87:df:a2:87:c9:f5:f7:07:72:41:0d:15:48:1f:
         2c:5e:ec:55:4c:b4:d1:3a:8d:e0:26:12:b1:2d:af:89:cb:09:
         92:e1:04:54:07:59:76:1d:22:e8:00:dd:70:be:ba:0c:28:35:
         f6:b7:67:dc:a0:34:ed:35:a4:1e:22:74:de:a1:0e:b8:80:ee:
         95:29:7f:e3:75:f0:ca:48:22:6b:80:e2:bf:03:dd:b8:04:f5:
         9a:17:0e:1f:37:c4:f4:e6:a2:e5:6a:3f:62:aa:15:07:f9:84:
         7d:df:d4:d7:26:ea:a9:2e:88:36:8e:2a:0a:5d:80:d5:04:91:
         25:42:a9:4a:ae:e6:ac:c6:ef:4f:9e:2a:22:3b:33:90:c2:fa:
         88:c5:92:a5:85:67:f1:03:97:99:14:43:0b:f4:d2:c4:3b:d8:
         56:fd:33:2f:29:1d:78:47:24:a0:86:79:d6:bd:74:fa:8e:a0:
         d4:2f:75:2d:18:02:f5:45:d4:c4:de:04:ab:1a:02:8b:42:3a:
         f5:3e:3d:3e:3e:1d:50:62:5f:a3:15:70:fd:98:ff:a7:69:1a:
         c5:87:5c:f1:98:8b:cc:9e:fc:7c:e3:22:ab:b5:3e:67:4e:8a:
         50:d8:bb:5e:3b:8f:99:dd:96:a4:53:f6:82:02:01:7f:ba:fe:
         74:74:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:30 2026 by rpki-client