Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File:                     I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier:          oQYnZ4f83TbBh5/OPiwcEY9fibsROdG4C2ao6hHl/P0=
Subject key identifier:   98:E7:BA:61:E7:C1:E8:28:6F:B8:E9:E3:2B:1B:D9:31:66:9E:43:B7
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer:       /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial:       019FA86232C9490B0544BC7163615F2E409D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number:          0D1C
Signing time:             Tue 28 Jul 2026 11:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:35 +0000
Files and hashes:         1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: jfW8OSkvN9Lrhr1w8ckSavprRx8YBbA8REUxnslFr7o=)
                          2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:32:c9:49:0b:05:44:bc:71:63:61:5f:2e:40:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
        Validity
            Not Before: Jul 28 11:00:35 2026 GMT
            Not After : Jul 29 11:00:35 2026 GMT
        Subject: CN=98e7ba61e7c1e8286fb8e9e32b1bd931669e43b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:aa:59:15:7c:45:91:95:e1:6d:3d:e2:53:
                    25:df:3b:59:c0:00:04:cd:ce:b0:8c:18:6c:71:d2:
                    3f:7b:ec:68:75:46:41:05:80:15:c1:66:c8:df:c0:
                    43:88:b4:2d:ab:5d:b5:0a:ac:01:34:e8:7c:99:5c:
                    7d:f0:9d:5e:f1:59:76:5c:8c:1a:0a:b4:53:08:c7:
                    4f:50:3d:e5:33:d7:12:00:43:ad:27:1a:dc:29:92:
                    96:d7:42:b1:69:d9:39:62:03:36:9b:77:f2:9d:6c:
                    34:4a:a2:39:00:02:ff:42:03:9d:c0:5d:6e:88:30:
                    f9:0a:fe:b9:aa:3e:76:4c:f2:f4:e5:29:4d:ae:7a:
                    8b:37:8e:1a:8c:d8:2a:f7:27:a7:e2:5c:08:de:0e:
                    8a:58:a4:1c:6d:87:10:06:f7:16:3d:4b:38:b1:dc:
                    26:2e:fc:2c:79:61:6f:dd:ec:47:3d:c4:9a:34:93:
                    24:4d:ca:61:01:c1:3a:2c:57:cd:8b:3d:07:4e:f9:
                    39:6f:87:9e:8b:ca:48:59:30:85:bc:bd:16:21:81:
                    3c:e3:60:df:52:d5:ff:a4:7d:2d:fd:90:1c:a7:d7:
                    ac:b2:e7:a0:a2:11:40:b2:d9:b9:13:e6:e0:62:2f:
                    86:15:b5:dd:9f:b8:ce:7b:90:73:ee:19:ab:45:72:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:BA:61:E7:C1:E8:28:6F:B8:E9:E3:2B:1B:D9:31:66:9E:43:B7
            X509v3 Authority Key Identifier:
                keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:48:3c:52:28:df:cd:ce:a8:b0:05:8e:04:2c:36:ec:5d:
         0e:e7:2b:44:e9:1a:7b:56:59:7a:a7:78:8a:e2:12:e6:34:bd:
         ec:d9:11:fe:8a:92:16:bd:fe:9b:1f:bf:af:52:15:08:08:1b:
         39:9f:74:af:94:4d:bf:bc:ef:b5:2d:05:63:18:5f:53:da:e2:
         cc:1b:3e:a6:f9:20:cb:c2:24:1b:b7:5b:19:be:b6:a2:60:16:
         ac:90:d7:97:c6:3a:06:c0:f7:a0:8b:e0:b1:20:8b:b9:a3:37:
         fc:50:c4:6f:dd:f3:32:80:e7:54:a3:80:dd:ee:99:f3:e2:80:
         40:ba:49:ce:d1:e9:96:ff:43:15:2f:b1:c1:62:7e:88:ac:56:
         45:92:4b:a1:e4:49:35:26:01:62:06:1a:ed:49:c4:85:a3:7f:
         c9:b6:4e:a0:0e:01:17:06:ea:c9:98:fb:a6:c5:25:ec:37:96:
         18:81:8e:37:ac:70:1b:13:36:df:03:61:53:98:08:c5:54:d6:
         d9:99:0a:f1:45:21:22:be:7b:19:45:01:3d:5c:45:9d:ed:89:
         fb:75:66:34:53:fa:b3:11:37:be:1e:2d:03:d6:74:e7:84:f8:
         41:4d:36:8b:ee:55:49:bf:ce:15:b5:51:93:3b:91:9c:42:aa:
         9c:d3:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:53 2026 by rpki-client