Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File:                     Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier:          M5M9MyCogM2YErX3Et49H+1FoTadiDo8g2l01kuM/Vg=
Subject key identifier:   E5:B2:6E:51:66:B3:46:95:A8:A5:62:60:A1:34:77:92:54:20:BD:E5
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       019FAAF61BF536CC512CE65E851B9DC7ACE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 23:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:23 +0000
Files and hashes:         1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: HSRs6Rd9oQ1L1UHfFna5D1eMRPScKGRg7esTCR+uzNw=)
                          2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
                          3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:1b:f5:36:cc:51:2c:e6:5e:85:1b:9d:c7:ac:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Jul 28 23:01:23 2026 GMT
            Not After : Jul 29 23:01:23 2026 GMT
        Subject: CN=e5b26e5166b34695a8a56260a13477925420bde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:11:1b:c2:35:ec:a5:6e:24:13:49:26:cf:
                    41:24:c1:d1:98:d7:10:df:51:86:33:2d:9c:38:07:
                    6a:4d:a2:a0:4b:bf:f5:a7:42:c8:99:5a:1d:03:db:
                    fb:ab:83:12:2a:0a:27:e6:ee:b5:02:6a:ab:86:d9:
                    e8:7d:23:9e:75:6d:19:ae:0f:0b:bf:b7:ba:4b:14:
                    22:9d:fd:c7:5f:99:48:47:1c:ec:8c:28:0a:53:a9:
                    96:e3:25:1d:4d:0c:c4:2e:75:1e:db:d0:a7:37:79:
                    f8:b9:c0:58:3d:36:75:f3:7c:de:ee:48:f9:d3:ce:
                    bc:5d:8b:4c:a9:c9:1d:81:8d:a3:60:62:8e:46:14:
                    ac:41:36:15:72:ce:b1:7d:00:eb:f1:94:f7:3a:83:
                    d3:ae:53:09:69:38:c2:5f:0b:64:04:82:cc:d5:dc:
                    d4:6a:14:d0:e0:9d:ec:86:51:a1:71:ac:5b:90:16:
                    5b:22:fa:aa:71:81:42:fc:c3:92:56:2a:60:61:85:
                    18:af:97:f5:a2:b7:99:91:35:4f:8d:08:b8:d1:1e:
                    c6:7a:85:2a:a5:28:8c:06:bf:6b:37:bc:c7:5c:56:
                    03:f7:d6:7c:e5:1e:03:a2:72:da:89:fa:69:6f:99:
                    c3:52:a6:6d:f4:d5:15:fa:f6:9c:86:74:62:8e:5d:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:6E:51:66:B3:46:95:A8:A5:62:60:A1:34:77:92:54:20:BD:E5
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:e6:a8:79:0c:ea:7f:10:71:17:9d:83:c5:30:ff:3a:90:
         b7:20:19:c4:1f:5d:14:30:67:7c:3c:4c:60:fd:05:79:93:f6:
         72:8d:34:db:98:3f:c4:35:80:11:73:89:64:79:d8:c8:42:02:
         98:ad:46:6d:33:39:15:87:a1:9b:b7:b6:a6:68:8c:bf:18:01:
         81:10:67:8d:f0:3f:8c:11:fe:c3:b8:ad:9a:6b:6c:2a:36:d2:
         83:69:20:b3:b2:c3:29:c3:6c:c8:dd:29:e2:66:16:a7:10:f2:
         2e:a8:95:6a:c0:3e:fb:5b:62:92:be:cc:16:4a:3a:bc:64:9b:
         6b:11:dc:09:a3:70:b7:0a:3d:89:ee:60:a7:59:97:ee:df:4c:
         b2:83:72:c7:3e:81:00:c1:81:e6:f2:e9:f5:7e:17:7d:00:75:
         51:c0:24:53:e9:24:ad:69:e2:a1:3c:8c:43:d8:53:7f:6c:c2:
         28:20:eb:ad:1d:00:e9:63:83:03:11:58:74:0c:24:95:36:0f:
         fd:70:3a:72:93:20:8e:f8:b2:ea:8e:f1:41:4c:d4:7e:c6:12:
         e6:9c:92:7b:53:c9:e5:d5:07:6e:2e:6e:68:bc:93:e5:5c:b3:
         a0:33:1c:1d:9b:63:4b:3c:0c:32:fc:f2:c0:04:22:44:2b:6c:
         8b:41:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:08 2026 by rpki-client