Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          FGWatIlbtXjJNAwezXfCIS2paIJCySEIIHUNyx8NtwY=
Subject key identifier:   1A:1B:2A:76:B6:0A:E9:98:09:7B:A8:96:EB:B4:2D:F9:3E:EA:3A:50
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019FAB63348051EDAAFD83427AEBBD4B7302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          12DE
Signing time:             Wed 29 Jul 2026 01:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:33 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: Z0LEs3r8P7+YXn67vznSfjxBH0MukfckmXlq1I3kV1w=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:34:80:51:ed:aa:fd:83:42:7a:eb:bd:4b:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jul 29 01:00:33 2026 GMT
            Not After : Jul 30 01:00:33 2026 GMT
        Subject: CN=1a1b2a76b60ae998097ba896ebb42df93eea3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:a6:9c:c4:0e:15:19:f8:ed:d9:50:d4:4f:
                    b8:7c:8e:17:9a:d9:a6:43:81:94:98:1d:d3:0f:10:
                    d2:0e:61:32:36:9b:7b:a2:f2:c7:ab:d7:a9:19:d0:
                    41:14:4f:2a:8d:b5:6d:22:56:83:bb:7c:fc:b8:55:
                    32:11:40:af:d7:51:91:96:e1:ae:83:71:e4:f6:5f:
                    30:e2:6a:a7:27:63:c8:12:81:6e:ec:b5:60:bd:38:
                    19:a9:32:d3:5c:5d:e8:69:89:77:83:b2:97:6f:5a:
                    e6:0e:a1:5a:03:96:cf:71:f0:90:b5:22:37:0d:3c:
                    16:15:f1:8b:f9:88:a1:8c:8f:c4:44:45:10:fd:76:
                    25:9e:47:d9:5c:02:97:d9:b3:c9:b4:43:cd:40:1f:
                    0d:c1:b3:ae:e8:bf:1b:33:f2:36:40:fe:07:00:a4:
                    68:77:da:93:30:f9:79:ca:29:ef:d4:0d:02:80:30:
                    c7:75:22:d3:7b:02:a3:fd:ed:2c:e4:24:c5:08:e6:
                    3c:a6:c1:8c:f9:8d:6d:97:60:c8:b5:dd:ea:35:54:
                    d0:25:0c:61:bb:76:a2:cc:34:71:9b:1f:16:55:55:
                    f2:48:75:ad:34:7b:29:d7:a5:2f:80:8f:42:46:84:
                    56:fa:6c:26:28:e6:05:22:51:8a:64:16:71:2d:21:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1B:2A:76:B6:0A:E9:98:09:7B:A8:96:EB:B4:2D:F9:3E:EA:3A:50
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:01:f0:41:51:05:41:7a:a0:8d:59:94:4b:e4:d7:20:cb:aa:
         b8:fc:0c:13:a0:81:f5:15:da:51:56:6b:28:46:9b:c4:a1:3d:
         18:15:9c:54:e7:90:d1:17:1d:0c:66:70:60:16:bf:17:8a:4a:
         df:1b:68:ad:2d:4b:98:77:4d:7f:50:16:93:5e:95:cd:30:80:
         88:a6:0d:46:fe:64:1b:b3:59:c7:a1:21:c2:45:d1:ec:c5:c4:
         41:62:94:27:ad:2b:b8:57:e2:d8:71:14:dd:2f:27:1f:45:37:
         a3:80:8a:cd:44:b7:a1:62:b6:36:17:98:87:3c:b8:47:98:93:
         7a:6d:c1:23:51:5e:8f:fb:8e:43:ad:ae:5e:e2:65:d1:c4:c0:
         e1:3f:68:87:42:3e:9d:41:fd:30:5d:69:07:d3:a5:91:fb:00:
         54:10:b9:e7:08:7d:b4:86:1e:38:69:cf:9b:44:13:13:20:78:
         a1:26:50:14:a5:56:e3:42:ce:c6:17:7b:93:cd:ea:df:dc:66:
         49:aa:48:df:00:36:36:a8:a5:1d:f5:7f:f3:43:b6:66:9d:9c:
         d8:57:62:b1:75:c1:14:72:be:e8:35:94:56:99:7d:56:aa:e1:
         d4:e8:97:1a:75:ea:0b:c6:91:bc:c0:35:29:a5:ba:75:9a:f9:
         2d:b0:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:18 2026 by rpki-client