Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File:                     iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier:          f0WsT56T4X1e+2/PBd3UOYhn7/8/nY3z/wdztTbTyv0=
Subject key identifier:   10:6B:4E:94:31:9B:DA:90:AA:24:54:94:CB:8F:85:66:51:ED:36:59
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer:       /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial:       019FAC768E9E132C1BC7244D1C71572801DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number:          0488
Signing time:             Wed 29 Jul 2026 06:01:18 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:18 +0000
Files and hashes:         1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
                          2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: zGvYKTggir/KteNKZeagentM/jgrx2s9htW21LS6NtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:8e:9e:13:2c:1b:c7:24:4d:1c:71:57:28:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
        Validity
            Not Before: Jul 29 06:01:18 2026 GMT
            Not After : Jul 30 06:01:18 2026 GMT
        Subject: CN=106b4e94319bda90aa245494cb8f856651ed3659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b8:c6:5c:4c:5e:c1:c2:1a:83:38:91:b3:0f:
                    6c:ba:22:71:c1:21:1f:a6:2e:84:03:c8:f8:24:87:
                    ea:dd:cb:eb:13:38:07:25:35:87:d2:a5:df:73:ad:
                    3a:f1:f4:7f:41:2e:2e:f5:6f:cd:ce:05:58:2a:36:
                    36:ee:19:38:27:aa:6e:5f:e7:d0:3b:0c:66:dd:1d:
                    17:99:1f:27:0b:65:ba:f0:b0:05:16:16:f7:4d:a8:
                    2a:7d:c5:fa:73:9f:b8:c5:b1:9c:60:b8:10:a9:33:
                    c1:3a:89:56:41:bf:0e:ea:05:b1:7a:0f:9e:8b:45:
                    69:df:c3:5c:7e:ab:45:62:eb:fd:81:d3:55:19:4f:
                    6c:ad:4a:c8:a6:7b:8a:ce:b1:6c:30:c0:f0:fc:89:
                    3f:f0:05:c0:f0:25:03:41:a5:76:cf:54:38:5f:68:
                    0d:ad:33:ed:a3:10:6a:8c:f0:b9:1b:1d:3b:d5:67:
                    9d:9a:b4:a5:12:2a:98:99:35:08:df:0b:5e:0f:95:
                    f6:5a:54:25:94:b0:23:b1:09:e2:3a:61:48:16:f5:
                    11:1e:05:64:91:17:c2:6c:14:c4:af:bd:56:87:57:
                    8b:d1:ee:0d:f5:a3:8c:a8:5d:ec:ec:c2:23:00:2c:
                    61:c6:09:22:fb:fb:53:fe:1e:ef:42:11:2f:18:43:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:4E:94:31:9B:DA:90:AA:24:54:94:CB:8F:85:66:51:ED:36:59
            X509v3 Authority Key Identifier:
                keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:51:ea:6b:e1:be:05:ed:e3:5d:6c:ea:65:d9:4c:fb:14:b5:
         98:2d:4f:31:6a:34:66:87:5a:6d:41:2b:2e:e4:f8:c2:09:b9:
         58:3f:99:e5:ba:5a:06:e0:bc:fe:11:c2:9a:31:68:51:1d:70:
         36:96:f1:79:e0:f9:02:eb:d5:23:e4:03:57:ea:c8:ca:6d:88:
         47:9c:86:6f:63:e5:a5:a8:c8:b1:6a:e9:f4:84:f3:c0:12:e7:
         51:30:ea:00:e9:54:93:af:4c:96:54:f9:24:a1:6b:c7:be:f2:
         e0:62:bf:13:fe:54:84:df:ca:23:63:af:e2:d0:25:c4:e1:31:
         eb:3d:94:02:c2:55:ab:52:bc:22:8a:bf:cc:ef:ef:ff:99:8f:
         8e:b1:0b:94:a7:88:0d:89:31:24:c9:23:90:02:d7:71:a5:7f:
         f2:75:73:dc:99:be:00:ab:a6:c9:51:15:94:a0:f7:d8:ac:ce:
         62:04:0c:23:e6:5f:1a:76:8e:ee:12:c3:e3:04:e3:b0:8d:0d:
         0c:68:02:32:10:da:b3:da:5c:f3:d7:9e:77:df:f7:0f:d9:6a:
         45:8e:b6:a6:00:53:eb:94:63:5c:0f:d1:ba:8b:5d:c8:9a:ec:
         71:e2:7d:fe:f6:8c:a1:e6:9e:de:6e:88:50:e3:e7:9b:a3:0c:
         ed:92:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:58 2026 by rpki-client