Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          WFKByB5Fp8Rm1garSDBkadWxsIbGTSanneV+RfsTLww=
Subject key identifier:   CB:23:09:E0:AA:32:F8:F9:C5:69:78:30:D7:52:31:F3:7F:03:A2:18
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       019FACE3784BF28F3D08E0738A84F0E73774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          0A47
Signing time:             Wed 29 Jul 2026 08:00:16 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:16 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:16 +0000
Files and hashes:         1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
                          2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: ejoNnq8uU1oCwiZfYom8O9AZSgJMiNZqm9D+7CuePGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:78:4b:f2:8f:3d:08:e0:73:8a:84:f0:e7:37:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Jul 29 08:00:16 2026 GMT
            Not After : Jul 30 08:00:16 2026 GMT
        Subject: CN=cb2309e0aa32f8f9c5697830d75231f37f03a218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:ed:ac:6f:2f:0f:9e:07:d5:68:0d:1b:d9:
                    6c:80:61:0d:ea:3e:b9:70:92:00:8b:69:ab:14:16:
                    9b:11:bc:64:75:4c:33:01:87:39:c0:85:94:0f:07:
                    d3:ac:b3:c7:75:83:53:9c:b9:00:1a:ef:0a:1b:e9:
                    23:24:63:08:89:fd:4e:07:0d:df:f1:7f:78:92:1d:
                    17:71:72:09:fb:be:37:c9:c6:e7:7b:48:c4:96:8d:
                    30:10:28:60:6c:c4:1a:a1:d4:0b:b1:6c:f4:48:66:
                    46:15:1e:5c:f4:fa:b5:79:db:03:58:08:de:e3:f9:
                    b4:ac:04:d0:d0:9c:d5:52:22:11:b0:3c:35:49:cf:
                    30:5f:0b:d3:e7:37:c8:20:f5:59:66:84:71:f2:d9:
                    89:03:66:f7:10:da:23:64:43:c5:03:9b:f0:ce:d2:
                    e9:80:40:8f:85:f9:d8:d7:4d:b9:10:b9:ee:7e:6f:
                    d2:a4:b5:48:61:8f:80:f2:34:a7:ca:c9:17:db:f8:
                    c6:8c:e4:ee:78:af:58:a8:ac:75:8f:42:44:6f:94:
                    49:5a:10:52:51:bd:25:fd:61:56:6c:0e:32:d8:e6:
                    9b:d6:bb:43:69:38:b3:f0:b9:e6:81:f9:5f:83:09:
                    93:fe:1a:3c:d6:4d:e6:ea:db:e8:fb:4e:5b:97:31:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:09:E0:AA:32:F8:F9:C5:69:78:30:D7:52:31:F3:7F:03:A2:18
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:ed:20:6b:e8:2a:81:0a:ad:46:f7:9b:f4:d1:fd:cf:4a:
         60:20:42:90:63:99:47:52:38:51:ef:17:61:bb:62:71:92:2b:
         c0:cc:83:64:dd:a6:36:39:e8:14:16:12:74:9c:33:3c:41:d2:
         cd:ae:37:ad:2e:ec:e1:8d:17:92:ec:9a:8b:2e:6f:d9:87:38:
         54:b2:f3:05:e1:a1:ff:2e:ab:53:16:6e:54:ec:ac:04:bf:41:
         b3:86:97:66:b1:74:f7:49:4a:25:92:7f:11:20:ee:45:d2:aa:
         77:d4:39:e8:d3:11:1d:b7:86:93:e2:2a:25:c2:26:cc:0b:54:
         63:eb:a6:1d:bc:61:21:26:04:a4:d1:79:2c:e6:53:5c:be:f7:
         c1:40:e6:b7:40:b0:e5:ad:04:90:e7:71:c1:a7:fb:3d:09:1c:
         4c:e7:28:32:e2:f6:10:71:85:fa:5c:8a:36:d5:e5:2f:78:36:
         b4:4d:5f:5d:5b:bc:48:b5:9b:dd:71:a2:0d:0d:c1:6c:de:f9:
         2e:99:3b:28:ac:cc:fd:bc:23:b0:f0:cc:e0:ab:59:06:e9:14:
         9d:bc:08:5d:81:86:d8:ba:9c:a9:da:95:d8:54:1a:2b:34:b6:
         06:62:52:7f:d4:a1:7c:91:43:fa:0b:7f:fb:58:7f:77:c7:4c:
         ad:30:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:31:54 2026 by rpki-client