Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          iczzwp90l6jiCeAvmE/rNNg4sm0qy3fJQ6pumdj9hAg=
Subject key identifier:   C6:73:A8:A1:20:49:80:AB:CA:B1:92:B0:0B:02:50:77:45:1E:75:06
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       019FACE4536751F7E8B8F27677356C55FD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          1069
Signing time:             Wed 29 Jul 2026 08:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:12 +0000
Files and hashes:         1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: yUAgJc2yfs0xz/Fx2MS2eIVJlo4adn+qz8qlT5BXFV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:53:67:51:f7:e8:b8:f2:76:77:35:6c:55:fd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Jul 29 08:01:12 2026 GMT
            Not After : Jul 30 08:01:12 2026 GMT
        Subject: CN=c673a8a1204980abcab192b00b025077451e7506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:a3:87:df:d3:56:9c:79:dc:fa:d1:dc:71:
                    e9:f5:db:ff:bb:0d:59:2c:bc:c3:4e:58:b9:51:b8:
                    10:8c:df:00:66:a2:13:31:a9:3f:b4:cc:d1:da:7a:
                    0a:6a:8c:c4:b9:59:f0:c1:ab:68:93:1b:a2:1e:1e:
                    08:72:0f:44:75:f1:09:a9:7e:ec:dc:9f:ff:35:b7:
                    8a:d0:69:70:6d:76:6b:ae:83:32:a0:b0:31:ad:ba:
                    a1:a4:9e:de:81:b3:af:87:a5:6a:e2:4b:2e:c5:ed:
                    97:f3:37:b4:09:b1:87:a6:4d:35:3e:c5:70:cd:84:
                    5b:c3:7b:b6:34:9c:50:46:73:4d:c2:dd:da:84:57:
                    d2:32:c8:30:a8:e0:29:19:a6:ec:9c:82:64:0d:7f:
                    34:4a:3e:3b:bd:39:b2:b3:ec:69:cc:bf:79:27:a5:
                    32:6b:e1:29:e6:a0:98:a1:46:11:a9:aa:b7:23:f2:
                    9d:ad:5a:ba:50:17:5d:b2:86:ae:dd:c4:2b:f5:70:
                    3c:3a:c7:55:60:10:52:bc:c4:92:e5:a5:35:f3:5f:
                    6c:c5:05:c3:30:b9:fc:a4:f9:6a:78:8f:8c:7b:b0:
                    61:3b:38:c7:17:47:88:7f:b8:d8:b6:a8:26:60:36:
                    47:b5:24:8b:a5:a3:7d:69:67:d7:b4:14:9c:9f:23:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:A8:A1:20:49:80:AB:CA:B1:92:B0:0B:02:50:77:45:1E:75:06
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:91:6d:5f:ea:1d:db:93:69:5a:98:16:df:28:30:d0:26:
         78:99:bd:bf:63:c1:92:f7:63:d7:6f:c0:5c:62:d1:1d:03:b9:
         4d:12:72:0e:a2:79:6f:1b:5c:80:82:ca:b3:f6:8a:87:97:1e:
         e4:44:13:ba:04:59:1e:7a:a8:4d:ce:d2:fa:8e:fe:d4:72:30:
         bf:e9:a2:8d:03:a0:00:2f:b3:80:c0:62:fa:89:e6:ea:75:5e:
         cb:6c:2f:a4:a7:12:ee:3b:e5:7c:6e:aa:76:7c:db:6d:ee:74:
         bc:17:04:e0:65:c0:d8:e0:ca:7f:ed:8f:a3:e6:05:f0:34:2e:
         ff:b5:e9:f2:d6:d1:44:24:43:62:c6:4a:88:24:d4:cd:73:67:
         76:5b:93:52:dc:76:5a:ef:e0:fc:71:11:32:47:84:b9:61:fd:
         c5:b3:c3:02:7f:2e:38:9c:3f:25:b2:81:9a:6b:17:55:94:9d:
         26:2f:b4:24:f0:d9:1c:b4:1f:3f:09:93:34:3d:b8:8c:3e:2e:
         27:df:f2:3a:47:f8:c2:86:56:26:96:46:aa:88:23:ed:66:84:
         df:95:4a:dc:38:02:0f:d5:c1:7a:2f:e0:3e:42:d0:69:5c:cd:
         c8:9d:75:22:69:c4:c1:00:ce:3a:78:05:36:00:c3:36:ff:92:
         c1:a5:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:54 2026 by rpki-client