Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          y7J36HA45XtfuNT7S+ck/MRGY0o1RB7IEyrXsk4ZpiE=
Subject key identifier:   88:AD:53:C8:5D:F4:17:A3:14:5B:C1:B5:73:CD:B7:B9:0D:DE:2E:C5
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019FAB9A09D3DF36AE50A2876D5381CEEFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1A05
Signing time:             Wed 29 Jul 2026 02:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:26 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: Ix2Emo443PNPqy+WTS4WveWkk9iHgflC+SjT1nmqMKQ=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:09:d3:df:36:ae:50:a2:87:6d:53:81:ce:ef:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jul 29 02:00:26 2026 GMT
            Not After : Jul 30 02:00:26 2026 GMT
        Subject: CN=88ad53c85df417a3145bc1b573cdb7b90dde2ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:4a:42:df:3f:ba:88:1b:bf:80:14:06:ac:
                    14:20:45:99:04:52:57:94:6a:23:ab:d1:f1:cf:d0:
                    73:3c:b1:b2:5a:7a:b4:e8:bf:f0:97:9f:4b:27:e5:
                    63:9c:42:bd:18:7e:ee:b3:77:77:d9:e8:78:a9:a9:
                    76:38:e5:16:20:14:ba:cf:7d:fa:5a:b4:27:f8:e9:
                    df:5c:13:32:1d:06:97:f6:ef:f7:f6:aa:8a:c8:cc:
                    27:04:3f:6d:eb:8f:3b:c2:e8:4f:46:e4:4a:a5:00:
                    5d:aa:ea:0b:f2:aa:e4:b4:2e:c9:6e:a0:be:4f:9f:
                    85:39:a4:7a:4e:96:dd:76:8c:fa:c4:e5:bb:b0:bc:
                    9f:f2:f7:92:66:4b:55:17:41:ce:d8:46:e5:e7:90:
                    32:f8:17:8b:c2:e8:83:fd:36:9e:69:f4:aa:00:80:
                    3c:e7:d8:5b:5b:8d:62:d0:db:57:b5:a3:e8:76:60:
                    ea:4c:61:9c:3d:d4:03:a0:dc:66:35:61:87:8a:e3:
                    82:a8:ee:a0:f3:0a:0f:77:9b:9c:e3:10:85:d5:91:
                    a2:66:e1:55:84:22:0f:c8:aa:55:df:fd:df:52:36:
                    c0:d4:7f:90:a3:1f:67:94:a7:85:4f:21:82:cb:bd:
                    dd:d6:97:43:be:7b:58:50:ee:76:c7:98:fe:b1:b3:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:53:C8:5D:F4:17:A3:14:5B:C1:B5:73:CD:B7:B9:0D:DE:2E:C5
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:42:e5:a7:da:18:0e:ee:80:a6:53:36:25:98:e9:1b:32:12:
         5c:90:cc:81:e4:0f:48:3c:39:cb:6d:c6:fb:dd:9c:96:da:ee:
         cb:cc:fa:bf:da:a0:c0:30:21:71:63:e1:39:9f:a2:2a:68:50:
         21:e5:1e:40:e8:ca:d8:67:21:bb:0c:fe:86:22:53:7e:f6:cb:
         8b:df:5c:84:c9:c3:2b:fa:66:d6:f1:51:ed:a9:80:de:4f:ae:
         38:21:4f:7d:df:6b:ed:97:70:ab:c8:c5:dc:8f:b7:29:aa:2b:
         b3:d7:76:28:e6:d6:c5:f4:ce:8e:d1:ad:30:f2:ec:4a:6b:57:
         4a:14:8c:ad:8b:d4:39:fb:d6:61:99:1b:08:ac:57:49:f7:9a:
         e5:a4:8e:1e:69:76:98:db:0e:65:a1:6b:21:09:ae:38:c2:58:
         a3:08:3b:7c:60:81:4c:cf:2b:fe:0f:4d:e4:55:1b:b3:e4:79:
         4c:2d:a3:7c:a1:55:fa:79:24:bd:91:92:4e:c4:2d:b5:6c:32:
         f4:47:17:a6:ea:a1:84:1f:90:26:95:7d:6b:94:dc:70:a9:91:
         fd:e1:c9:4d:a8:83:f3:2c:60:ad:23:d9:7b:88:73:72:c6:12:
         3c:0b:c4:37:1a:4d:d3:9c:df:68:41:9e:9b:82:f2:0d:6e:ec:
         8f:1d:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:16 2026 by rpki-client