Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File:                     Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier:          SGix5/we5XkzZp4/C5Zh3XjAsOwHh16q4bjDIaq4asQ=
Subject key identifier:   C8:86:78:A7:7D:8A:F6:67:20:58:B0:E0:31:23:1E:45:70:BD:AB:4B
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer:       /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial:       019FF9ED47C463C4B958523A68EB14F6171D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number:          1487
Signing time:             Thu 13 Aug 2026 07:01:44 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:44 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:44 +0000
Files and hashes:         1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
                          2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: 3rMFdr6ZFY0WtCxyUwGSaDsov7blBj7LH25K+1bSzDo=)
                          3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 07:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:47:c4:63:c4:b9:58:52:3a:68:eb:14:f6:17:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
        Validity
            Not Before: Aug 13 07:01:44 2026 GMT
            Not After : Aug 14 07:01:44 2026 GMT
        Subject: CN=c88678a77d8af6672058b0e031231e4570bdab4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:d2:4c:cb:60:6a:1d:f2:4f:49:f2:51:ac:
                    87:c0:aa:70:74:f0:4a:54:cd:6c:53:fc:33:ec:d7:
                    75:53:6b:1f:25:68:92:1a:bc:0d:c6:8e:69:a7:8b:
                    25:59:58:79:d7:c8:53:c2:fc:83:02:c2:7b:85:2a:
                    7e:f0:3b:49:ae:e7:75:e3:b8:10:08:75:d6:c7:06:
                    fa:20:0e:76:6b:5b:02:14:ee:de:ad:fb:eb:0c:a1:
                    24:b4:d0:81:c2:c5:5a:75:67:ad:ea:e8:6a:2d:98:
                    64:c2:58:6f:85:dc:48:de:a3:24:6a:cb:bb:c3:d6:
                    f8:8c:fb:32:3b:5a:18:34:b9:ab:6a:2d:13:41:fa:
                    2a:8d:27:5f:5d:68:c9:d7:39:f0:94:a9:a6:1b:40:
                    a2:15:6b:16:53:63:ee:b6:1e:fa:de:8b:01:9a:d5:
                    35:b1:05:dc:44:c8:f3:c1:94:16:1a:db:f1:50:4e:
                    c8:2b:1a:fb:7c:c4:d8:60:f0:9b:02:89:52:0e:ab:
                    0d:31:9b:37:49:01:55:ff:68:29:0c:99:b2:71:a6:
                    9d:af:c3:cf:d5:23:fb:31:d2:61:07:2e:b7:e5:a6:
                    6d:ee:0e:8c:46:85:5e:02:fd:bf:b2:e9:2e:1c:7b:
                    4c:2a:e0:6e:3c:b0:67:f8:55:90:17:26:51:65:ac:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:78:A7:7D:8A:F6:67:20:58:B0:E0:31:23:1E:45:70:BD:AB:4B
            X509v3 Authority Key Identifier:
                keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:da:38:f4:71:f8:c4:c3:1f:7a:35:49:f9:9b:45:3d:56:89:
         d7:d6:f3:bf:0b:51:ac:cd:fc:58:a5:9b:92:46:63:bc:21:b7:
         09:a7:75:8d:e5:f8:ae:5e:83:e7:e9:92:7c:ce:c3:42:b9:63:
         20:ab:0f:f7:b1:35:7a:2f:bc:83:b9:28:f6:7f:e8:3d:7c:b2:
         db:ee:69:dd:91:e2:b7:9e:ec:b8:d7:2d:3d:1a:df:81:3e:5e:
         bf:cf:4b:32:ed:e4:9e:d5:19:9f:62:6f:20:4f:60:ef:60:d3:
         50:8a:82:48:39:a7:60:f3:61:24:b1:94:50:0d:b0:ff:1d:9a:
         e8:c7:ad:ce:73:ed:46:3e:f3:a4:24:f7:dd:45:5f:4a:f3:db:
         76:f5:c2:c1:f0:1f:77:10:8e:c5:51:7f:17:53:52:73:55:b9:
         a4:f3:a6:b1:bc:a8:ba:98:64:63:c4:73:97:7b:3d:7c:cb:67:
         29:37:b3:a4:25:66:a6:74:30:e7:fd:01:d7:69:fe:18:b5:1c:
         0a:1d:18:75:63:93:a0:8d:49:33:e3:75:17:99:28:4a:8e:43:
         d6:2d:f4:da:60:4c:dd:e9:80:5b:77:43:b9:11:00:97:07:7e:
         c0:c3:4b:cb:ed:6a:47:f4:ca:9b:b9:16:ad:5b:bc:90:c6:3b:
         cb:92:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:14:32 2026 by rpki-client