Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          J4q2hk7lbo8n9IAPqDn32yiMQToX3elCgDeegoIOgxo=
Subject key identifier:   0A:F1:19:DA:E7:55:5C:18:BD:D0:B3:1C:27:EA:F9:E7:9A:26:D7:37
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       019FAB9AC42B684875358B6767F1AFF139B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          19DD
Signing time:             Wed 29 Jul 2026 02:01:14 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:14 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:14 +0000
Files and hashes:         1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
                          2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
                          3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
                          4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: +0oSKuQyaaimGa6KpgaUBJxrtLPzy4QYU7RNzBPn7pc=)
                          5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
                          6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:c4:2b:68:48:75:35:8b:67:67:f1:af:f1:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Jul 29 02:01:14 2026 GMT
            Not After : Jul 30 02:01:14 2026 GMT
        Subject: CN=0af119dae7555c18bdd0b31c27eaf9e79a26d737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:da:b5:bc:d1:8e:36:aa:d2:1a:75:29:91:
                    00:e9:2f:a8:5d:68:4b:0e:5b:87:4c:32:07:7d:96:
                    61:df:71:ae:af:e6:01:a3:bb:ce:2d:0b:6e:b3:d8:
                    9c:9f:81:a8:42:26:1b:bc:ba:24:98:0b:0e:72:3d:
                    19:65:4e:75:27:38:8c:a7:f4:62:d5:85:2c:78:3a:
                    03:7c:d5:10:17:f3:58:92:9a:57:2e:6f:51:4a:2d:
                    28:60:3d:17:45:5d:6e:90:91:13:e6:0c:91:5c:a8:
                    91:52:7d:95:a4:76:e4:ae:0b:74:17:00:86:af:c6:
                    76:66:fe:0f:bf:00:32:59:a2:0c:b3:df:18:13:7e:
                    6c:5a:dc:0f:3f:db:6b:bb:c4:7f:39:8a:bb:4e:13:
                    98:ff:00:b6:13:3b:54:04:f7:4c:1a:14:6d:9d:a6:
                    64:0c:73:49:2e:9a:eb:c4:ad:ed:d5:2b:e7:e4:57:
                    5f:4e:6a:a5:43:42:2c:e9:6b:8f:a7:58:a6:7b:88:
                    5f:b2:86:98:ff:fb:d4:77:0e:4e:74:e4:4a:fa:d1:
                    cb:46:da:47:64:55:2f:0a:1a:9a:7e:ec:ed:4e:b1:
                    d3:aa:d0:14:ee:56:73:3c:7f:12:ff:b3:65:26:b2:
                    f5:c4:99:f7:79:9e:a5:5a:5d:a7:6b:77:63:a0:9a:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:19:DA:E7:55:5C:18:BD:D0:B3:1C:27:EA:F9:E7:9A:26:D7:37
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:95:ff:d3:36:55:35:43:a2:2f:6a:4b:ae:87:21:7c:75:11:
         0f:c2:43:4e:15:9a:2e:85:9d:66:7c:4b:f1:35:c8:b4:80:96:
         0a:a1:e0:39:b6:05:9f:29:58:93:24:63:e2:3b:af:26:25:2b:
         2d:6e:f5:e5:a1:b6:ce:72:87:f8:75:bc:1b:71:f9:75:a3:e0:
         aa:7f:87:e3:40:8c:5d:9f:b5:a9:15:ad:57:84:a4:6f:15:7f:
         e3:6f:25:b2:49:68:21:d2:a2:60:1a:f0:d5:e2:0f:6c:f4:88:
         14:07:0d:12:e2:f8:66:80:55:57:f9:bb:79:3c:e3:67:d8:12:
         a6:59:a9:1c:c0:03:b1:fe:92:10:6c:69:4b:83:4c:ab:39:a6:
         20:ec:f2:be:6a:90:d6:ab:37:47:31:a4:1b:8e:47:a7:3e:00:
         61:8b:e6:9e:3b:fc:e4:cd:d5:8b:2c:e0:9e:b1:3d:f6:62:89:
         c4:4a:87:9a:4f:96:1a:e1:03:89:68:21:c8:10:c2:a9:73:d8:
         88:9c:d3:3e:22:89:5e:37:6f:1f:9a:54:21:80:b9:01:6c:c5:
         5d:9d:fe:45:2c:03:ca:2c:43:cb:dd:92:4d:16:24:08:0d:9f:
         06:0d:c7:a4:d5:fb:99:a3:a4:43:a0:5e:8a:a2:40:09:49:36:
         09:75:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:39 2026 by rpki-client