Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          NT0mwjXuYFRSRt+4cHcTqQq9Es8egnAh0ATm/py62bE=
Subject key identifier:   89:D3:3F:A1:4E:47:A8:92:6C:F4:F6:B5:06:8F:31:3F:A7:3E:23:81
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       019FAC07B9C3298EFA1F9CB869D3DA12F648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          108C
Signing time:             Wed 29 Jul 2026 04:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:15 +0000
Files and hashes:         1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: XOQ2Hl9iJmvPxZqITdgJQ69ULLtldVaOfApDtj4FEYI=)
                          2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:b9:c3:29:8e:fa:1f:9c:b8:69:d3:da:12:f6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Jul 29 04:00:15 2026 GMT
            Not After : Jul 30 04:00:15 2026 GMT
        Subject: CN=89d33fa14e47a8926cf4f6b5068f313fa73e2381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:de:7f:c2:1f:9c:db:f0:9a:0e:9d:5b:7e:
                    da:25:88:4b:2a:4c:ee:37:ed:8c:53:a5:c6:f1:fe:
                    1d:41:f5:ec:66:80:73:16:fa:6b:9d:05:a2:6f:2b:
                    2f:9a:af:0d:19:6a:7b:ad:e3:77:35:e3:4e:83:5f:
                    ad:ab:ff:c7:92:52:d4:03:3d:54:cc:46:e6:b0:84:
                    92:94:5d:5c:f8:e6:68:1e:7e:65:e7:cd:34:16:22:
                    d1:fb:fc:b2:65:27:16:07:0c:bf:fe:18:15:ae:81:
                    51:b2:67:cc:3a:6d:cb:c5:6a:6a:9d:47:31:df:d4:
                    df:c1:36:f2:7b:ca:ad:ab:73:63:11:b3:0b:f9:71:
                    ec:f8:09:48:d0:82:ab:1e:7e:4a:3e:ba:3b:af:a0:
                    27:58:af:96:db:56:31:08:fb:92:34:d4:54:ea:34:
                    2f:fc:3b:23:38:f7:61:47:a9:55:f4:7b:98:00:b9:
                    c1:6d:27:cc:0b:6d:21:df:c6:49:c0:99:18:64:19:
                    2d:a6:1b:11:47:29:56:02:e9:bf:c7:0e:34:a0:0a:
                    cb:20:11:66:ba:34:05:68:31:42:b2:65:90:79:e1:
                    03:26:10:2c:85:6b:88:ee:aa:c0:f7:75:31:66:c2:
                    c2:65:48:41:77:5f:20:37:18:c9:bd:bc:1f:46:ff:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:3F:A1:4E:47:A8:92:6C:F4:F6:B5:06:8F:31:3F:A7:3E:23:81
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:39:d3:db:27:13:aa:8a:ff:de:6e:b8:92:f4:91:f3:da:85:
         bc:1b:d4:40:78:b4:f2:1e:94:93:ae:a2:61:3b:24:78:90:8d:
         e4:fa:68:c7:67:c4:bc:f2:d4:6b:fb:af:c5:7f:2d:a2:66:29:
         77:d3:b3:aa:ab:26:5d:bd:80:f2:ce:d9:dc:2a:cb:05:f2:e0:
         8b:d6:ae:40:45:aa:32:8e:bf:f9:d0:79:53:6c:68:a4:49:11:
         83:92:90:4a:f6:15:53:76:f6:a7:3f:56:3e:e2:73:b3:9b:55:
         1f:3e:82:ea:a9:06:37:6f:4c:38:39:de:07:1e:5b:c0:6c:30:
         ad:35:c1:3b:c0:13:96:b6:ef:40:b1:a2:c6:a8:1f:96:fe:83:
         d3:59:7b:3b:fc:08:a1:87:d2:30:53:7a:4b:a2:87:7e:33:8c:
         4d:73:3d:d1:f9:3a:a8:fb:82:35:fd:bd:cd:0f:f9:93:16:2a:
         0e:fa:63:df:1e:ec:9d:4e:2f:11:d6:20:58:86:5b:ac:93:2d:
         c8:43:d8:4f:fa:1b:5f:58:ad:91:4c:b9:36:ac:50:e0:b0:76:
         b5:ae:6c:e9:86:bb:46:81:17:31:8e:cf:ec:9a:23:6f:24:83:
         76:af:d0:dd:83:82:d4:51:cf:27:a0:e2:7d:e7:22:ff:77:09:
         4b:97:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:20:58 2026 by rpki-client