Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File:                     igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier:          3cwNNUFpFMmnpz3ToLQrciqWAbUCvIPaifIIyKQWTwQ=
Subject key identifier:   83:23:63:F1:14:5F:73:DA:76:25:20:4D:6C:09:D1:34:7A:27:3F:A7
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer:       /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial:       019FAD51509DB7A31110C1A9367A804E4EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number:          1968
Signing time:             Wed 29 Jul 2026 10:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:15 +0000
Files and hashes:         1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
                          2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
                          3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: B3nBMojt7WTAva9NP5WazSlf0vK6RvaMc1iXaECaOpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:50:9d:b7:a3:11:10:c1:a9:36:7a:80:4e:4e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
        Validity
            Not Before: Jul 29 10:00:15 2026 GMT
            Not After : Jul 30 10:00:15 2026 GMT
        Subject: CN=832363f1145f73da7625204d6c09d1347a273fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:d8:09:94:48:86:9a:fa:5d:02:eb:09:9b:
                    09:18:26:a2:4f:a6:e7:8e:c9:bb:25:c1:69:89:e8:
                    a4:ee:2a:c9:b7:2d:87:c9:e5:ed:a4:d6:7c:18:ba:
                    c8:7d:c5:0b:dd:bb:ed:fa:6c:45:7a:38:39:1d:07:
                    23:26:58:04:f1:2d:26:e0:5b:fb:b8:a5:d0:37:91:
                    38:14:9f:5f:31:82:ca:5f:14:00:b4:69:ca:f3:0b:
                    57:93:5a:12:e9:6e:bc:26:96:a7:ae:9c:e1:73:67:
                    dd:f5:ef:68:6c:f7:6e:0e:77:32:43:eb:87:31:1e:
                    ef:9a:af:8d:79:47:f2:58:89:6a:c0:cd:04:44:de:
                    11:0b:77:60:cb:27:97:20:c3:2a:f3:7c:22:3c:c7:
                    e5:1d:14:7b:90:e1:6c:a9:db:0c:8d:9b:c4:a9:d9:
                    6c:82:ed:4b:38:b2:45:b9:c7:cf:a2:78:10:fa:f6:
                    d2:c4:61:89:83:4c:e8:49:6c:d6:ff:49:46:19:e4:
                    78:fb:1b:aa:d3:ec:e6:0a:23:e9:2c:19:d6:1d:69:
                    4c:5a:8c:d9:2c:04:a8:71:32:f6:65:0b:58:9c:b8:
                    8c:32:79:82:a1:70:17:7e:72:0d:45:89:13:08:53:
                    f4:b4:78:f6:c9:c3:fe:67:7f:23:0b:2f:d6:95:83:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:63:F1:14:5F:73:DA:76:25:20:4D:6C:09:D1:34:7A:27:3F:A7
            X509v3 Authority Key Identifier:
                keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:44:ec:2e:38:5c:08:21:90:0f:6a:42:50:9e:82:a7:be:
         8c:30:5c:8a:c1:d7:92:ad:a9:5e:54:3a:c4:3c:c1:6f:01:32:
         29:e5:9d:e3:ed:a6:0d:21:e9:06:28:fa:f1:15:76:02:3c:57:
         22:cf:15:c5:5d:ba:36:87:64:3e:f8:ad:50:f3:82:ff:a1:28:
         bc:1d:9a:69:f7:a4:2e:77:9d:bd:fb:39:a5:e3:e3:4f:2d:2a:
         2c:13:d9:e9:75:79:62:94:81:31:3c:2f:14:bf:27:24:fb:03:
         14:23:10:e5:59:a5:b0:16:17:52:bf:94:76:7f:f0:c9:b2:62:
         01:6d:a5:ca:63:0e:8f:7d:da:bb:89:21:fd:03:5a:c6:f7:3c:
         ae:0e:09:63:b3:fa:5a:fd:a8:86:a5:41:e1:f8:e1:b8:e2:97:
         37:d6:df:8a:1f:a4:de:c8:23:be:98:77:47:05:ba:e7:43:9f:
         b8:9e:4d:c6:fd:b7:cc:c4:bb:f9:50:0d:8e:be:59:cd:40:0d:
         73:4e:70:8c:1d:4d:9f:0d:a4:08:11:05:9c:46:5f:e0:d7:c9:
         f4:15:b3:91:ec:fa:4a:e7:2d:fd:d9:9f:08:19:58:21:30:ef:
         d0:cc:71:43:cb:87:3f:00:8e:f0:f9:90:6c:90:71:21:b4:90:
         98:c9:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:11 2026 by rpki-client