Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
File:                     ijndHRPq-YwAdGPZWosv_eojbOM.mft (raw, json)
Hash identifier:          tvmEr5MoVMbIuQ6s0RTCxtYVimejH+68B4LWm2LCjec=
Subject key identifier:   C3:1F:73:E4:E1:17:24:17:3E:60:EA:B3:23:E5:5F:EE:D8:B5:3C:B6
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Certificate issuer:       /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial:       019F36AA6B1359B040381A55A435913D293D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
Manifest number:          11
Signing time:             Mon 06 Jul 2026 09:02:45 +0000
Manifest this update:     Mon 06 Jul 2026 09:02:45 +0000
Manifest next update:     Tue 07 Jul 2026 09:02:45 +0000
Files and hashes:         1: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (hash: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=)
                          2: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (hash: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=)
                          3: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (hash: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=)
                          4: ijndHRPq-YwAdGPZWosv_eojbOM.crl (hash: xW55shtH/rcvf75iyTWSmUvEV02wuGgN+Zh1UJby3oU=)
                          5: qEVDrxw8lXCl8aRODSA_1SPziJA.roa (hash: Q8I9Y/Qx/205GtVMmvPcisKl71EAafMgAUaQkhvO3XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:aa:6b:13:59:b0:40:38:1a:55:a4:35:91:3d:29:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
        Validity
            Not Before: Jul  6 09:02:45 2026 GMT
            Not After : Jul  7 09:02:45 2026 GMT
        Subject: CN=c31f73e4e11724173e60eab323e55feed8b53cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d6:86:b7:02:33:24:53:f6:98:f0:21:5e:06:
                    72:41:7e:a1:11:be:df:95:3d:ca:ac:20:7d:ee:2b:
                    23:a0:f2:9f:e0:74:e5:bc:94:7a:be:e3:7a:19:15:
                    17:b8:49:4f:3b:5a:cb:63:89:63:cd:a6:6e:13:cb:
                    22:ab:65:88:74:66:3f:e2:36:1a:f7:96:59:36:48:
                    6d:75:38:08:0c:c3:92:e3:34:2f:20:a5:f3:f5:6b:
                    18:4b:8b:a3:55:29:44:51:be:32:f2:d7:d6:37:c8:
                    6e:4c:81:1e:41:e5:c9:18:c2:37:24:ff:8b:bf:6e:
                    8f:0f:81:6c:17:0a:56:77:c8:1a:ce:40:79:e2:3d:
                    5e:1c:b5:9a:91:c6:d5:21:0d:77:f3:5a:ca:0d:4c:
                    58:f0:c7:97:bd:ec:5e:11:df:3c:aa:f7:dd:83:12:
                    96:67:b4:95:59:57:c9:32:ea:ba:95:e9:d8:1b:aa:
                    42:79:57:34:19:c2:3b:57:78:15:6a:66:52:6d:c2:
                    ef:6e:f1:5a:a8:db:48:0f:e7:27:12:bc:c1:e4:04:
                    01:8d:3e:b6:1b:2a:c9:2f:95:e8:b9:bc:12:ab:05:
                    3b:77:65:9e:75:80:0d:8b:66:26:1a:8e:12:af:0c:
                    72:3d:a6:9a:9a:42:e2:7d:bb:56:db:ab:5c:67:1f:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:73:E4:E1:17:24:17:3E:60:EA:B3:23:E5:5F:EE:D8:B5:3C:B6
            X509v3 Authority Key Identifier:
                keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:dd:7a:61:65:97:73:67:64:71:b5:14:5e:28:92:c7:cc:
         b1:dd:f4:b8:9a:a7:43:7c:06:19:e2:31:24:a8:50:18:ab:63:
         1c:31:4e:5a:5b:af:3a:cb:64:4f:67:35:60:00:8c:ca:c4:3a:
         5d:68:17:33:ae:aa:61:2b:5f:59:7d:cd:8c:5b:e2:61:e8:99:
         07:29:88:9c:fa:37:38:32:5c:88:7c:4b:94:24:41:90:1b:1e:
         2a:b6:69:41:cf:5a:43:5a:66:68:25:c2:2a:96:4c:49:1e:57:
         ed:ef:19:c5:74:a5:08:ea:ba:e8:27:2a:4c:c5:77:bb:3e:8a:
         b6:03:26:e9:8d:f2:86:aa:47:94:01:ec:3a:c1:e7:70:a2:1c:
         3d:ef:15:25:11:5d:67:d7:06:ff:03:98:4e:f5:62:8a:8b:db:
         13:58:18:17:93:ec:d4:7c:a5:d6:ed:ab:ba:b6:41:6c:e1:b2:
         cd:12:8c:4c:64:b3:db:2e:61:96:ca:50:90:5d:5e:7a:20:e7:
         6e:66:76:10:9a:15:8f:8a:8b:68:52:28:69:df:bc:ce:e0:a8:
         94:37:3a:a5:dc:38:74:50:ad:1c:5b:d1:25:a4:8a:cc:45:52:
         01:0f:98:42:05:2b:17:e3:c6:c5:f5:ae:5e:16:ce:d7:3b:90:
         85:0b:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:26 2026 by rpki-client