Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          26Xs4DasHUyJ4SJyju+WL2C6EjTu9Hiu28V5hbfQ0ak=
Subject key identifier:   32:50:09:71:34:FD:88:77:59:3C:EB:99:AD:77:28:AA:30:85:90:23
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019FAABE8B58359E3A1941016CB77E9F57E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          04E9
Signing time:             Tue 28 Jul 2026 22:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:41 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: +Ho4t5BOWMEiTsfDLQVfcGh6E/BtOSF9vVQFsWHO/pM=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:8b:58:35:9e:3a:19:41:01:6c:b7:7e:9f:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Jul 28 22:00:41 2026 GMT
            Not After : Jul 29 22:00:41 2026 GMT
        Subject: CN=3250097134fd8877593ceb99ad7728aa30859023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:a9:00:18:13:ee:8b:6e:a2:d5:81:eb:ec:
                    59:d7:35:3f:d5:eb:01:0a:57:98:6b:6a:47:62:aa:
                    ff:a0:65:b7:ab:3e:73:5a:fd:35:71:00:c9:e6:36:
                    66:94:a2:ff:c7:f0:69:1f:0e:ec:eb:e8:af:bb:78:
                    5a:fb:49:5f:8c:5f:e3:e7:d2:a7:d6:af:aa:ee:7c:
                    64:ce:64:bf:7f:fd:a4:7e:67:07:34:70:aa:2f:6d:
                    07:2b:ec:95:b7:b7:c2:9b:a7:ae:4b:a6:0c:03:e9:
                    7f:44:c7:24:4c:ad:77:65:a0:fe:b3:27:52:5a:e0:
                    82:c0:5b:25:6d:fb:2f:72:84:f0:ae:06:f2:b5:c1:
                    11:db:5f:b4:c8:49:b8:ba:28:2f:eb:d8:f7:08:22:
                    6d:bc:4b:0e:d1:c2:c0:fd:5f:90:45:5a:5f:d6:fe:
                    a4:55:c0:5e:54:35:eb:ee:24:17:20:67:16:8f:c0:
                    7c:01:39:e6:91:c2:d6:4c:e5:b3:ef:3c:96:90:51:
                    bd:a6:26:45:d8:e8:ca:fa:61:ea:28:4f:76:f0:9a:
                    29:eb:7d:ad:21:ed:c9:86:ad:f3:b9:6f:ed:ab:b4:
                    64:c6:95:06:ab:d2:2f:59:95:74:09:2c:66:4c:0a:
                    fb:fe:c6:96:15:ec:c9:72:2d:4e:f4:2a:79:c6:32:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:09:71:34:FD:88:77:59:3C:EB:99:AD:77:28:AA:30:85:90:23
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:bf:45:ff:2f:9b:bc:c6:8b:08:8c:33:c1:ab:62:7f:f3:
         1d:31:36:7b:73:b4:0f:12:92:6f:9c:ed:7b:06:47:3f:6c:e4:
         3d:bb:fc:1e:53:2b:18:71:0e:4c:57:70:8d:9a:19:66:9f:4e:
         71:a3:b1:f2:28:c8:9a:3a:69:95:94:35:e1:df:ac:68:41:7a:
         0c:30:b8:35:37:51:05:48:c7:25:89:04:ca:c2:50:c0:e0:cb:
         61:31:5c:91:4e:54:5e:18:ec:72:95:48:67:d7:85:9a:31:fb:
         52:92:3b:83:a0:37:7b:61:1c:3f:4a:ab:b3:29:47:8d:ce:8f:
         ec:c0:69:e7:50:ad:27:d7:59:b9:bb:a6:8d:bb:60:6d:0f:85:
         d2:fa:4a:2e:85:30:b5:3f:d6:e0:65:36:b2:f4:e6:fc:90:73:
         c3:06:fc:ee:52:88:57:dc:65:fc:e8:df:2d:44:51:8c:60:95:
         0e:46:0c:1f:14:46:77:ec:5d:6c:ea:35:44:1a:55:72:3b:8f:
         62:4f:50:a5:46:d3:72:5c:6b:54:ec:98:60:cf:c0:cc:38:61:
         e8:c1:fe:b3:2f:de:24:f6:35:71:ad:bc:2d:5f:57:b3:dd:7a:
         2b:5a:9a:20:44:12:8a:3b:cc:3e:e6:52:9f:d7:4b:df:45:87:
         54:32:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:01 2026 by rpki-client