Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          mxR7EJnJ7xeZc1mNhW5aASXB+7fjEh8kYFXJFXpVvWg=
Subject key identifier:   69:C6:2D:E7:22:01:ED:BA:4E:4A:D5:C4:D1:E6:CB:DE:85:B3:C4:B6
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       019FADF63E76B2652B1D301768BC187A1A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 13:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 13:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 13:00:23 +0000
Files and hashes:         1: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (hash: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: QOFZGFlhMaXqqyyOIag2tLl1wrYJtgjcaMkYs+/oLeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f6:3e:76:b2:65:2b:1d:30:17:68:bc:18:7a:1a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: Jul 29 13:00:23 2026 GMT
            Not After : Jul 30 13:00:23 2026 GMT
        Subject: CN=69c62de72201edba4e4ad5c4d1e6cbde85b3c4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:9e:e0:14:90:2a:db:17:62:33:00:41:4e:
                    d2:73:52:e3:32:b9:cb:24:10:5c:57:db:ad:35:85:
                    9b:88:0b:3a:ed:26:b1:bd:c9:8b:6d:30:29:0e:d1:
                    0e:d7:0e:61:6f:0f:f4:21:ba:c7:e1:df:cc:27:b6:
                    47:f3:94:19:b0:64:db:1e:8b:a4:3e:d7:51:d8:55:
                    6b:a1:85:b3:aa:bc:ae:1b:66:c2:aa:f5:ac:76:0d:
                    e9:83:21:dd:4c:c9:98:b3:af:7a:43:a2:d7:41:3c:
                    40:79:db:2b:44:b5:98:bb:ee:8a:0b:ec:26:a5:2e:
                    4f:f1:f8:ee:1e:23:ac:71:eb:f7:3a:25:81:e1:a8:
                    24:7b:ed:07:7b:40:5d:9d:0c:5d:ab:34:5b:b2:58:
                    c9:7d:59:e1:f5:1a:91:f0:0a:59:c9:8e:43:a8:60:
                    63:72:cf:0f:83:4d:bc:20:a9:d4:fa:15:14:94:4f:
                    0e:74:25:b0:45:81:9c:4a:05:6c:23:4e:bb:bf:ca:
                    83:0c:ee:7b:4c:45:9e:2a:47:a5:21:85:83:3e:cd:
                    52:9e:57:ef:21:8b:d1:83:f1:a5:00:81:c1:98:1d:
                    48:63:73:3e:2b:6f:af:78:4d:5b:a2:37:75:c0:a8:
                    12:33:3f:c8:1f:0f:1a:39:c5:6c:7c:5e:dd:11:f4:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:2D:E7:22:01:ED:BA:4E:4A:D5:C4:D1:E6:CB:DE:85:B3:C4:B6
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8b:d4:9c:27:fd:0c:8e:67:a1:4e:91:c6:97:28:43:d7:9f:
         e7:71:26:b5:88:5d:49:9a:f1:29:c4:37:c2:37:0f:b0:c4:e6:
         83:85:f5:1c:38:25:da:57:00:3c:75:b4:d9:06:97:8b:16:f0:
         54:47:b8:a8:83:ac:dc:42:1b:b5:a5:db:f8:42:1c:94:98:7a:
         93:6e:7c:f6:53:dc:57:2c:15:36:c7:5d:2a:97:14:0e:69:ab:
         e2:2d:74:e7:cc:b0:90:de:0c:88:07:ad:89:3c:77:b9:52:e5:
         1d:05:36:e0:4e:18:50:2e:55:0d:43:c5:a0:0d:e8:e0:81:56:
         9b:9d:fa:41:98:e6:9e:72:bb:05:ba:9b:5f:54:1c:b9:7a:fa:
         64:db:66:7d:9d:9f:e4:dd:e3:85:d6:16:5d:90:4e:cb:74:39:
         cb:ba:d3:56:85:7e:c0:37:36:30:e5:18:50:91:1f:b7:76:af:
         78:4a:a6:9f:35:51:40:fa:81:42:55:e6:d9:00:53:e6:ae:46:
         d6:47:a3:fe:73:15:3f:22:36:b4:3a:75:66:17:b6:23:a9:5f:
         0b:cf:f3:8d:c3:61:6e:f8:d9:fd:fc:33:54:53:ad:9e:28:d4:
         06:b5:f1:91:ab:04:b0:6e:c3:6b:c5:c9:71:f4:f7:39:f5:7a:
         ce:9a:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:53 2026 by rpki-client