Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File:                     Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier:          W4Sys9GekmPp8pFLHyBRgbjcjS0NxBzYQCMwa4VjI1c=
Subject key identifier:   D4:D1:B8:9C:A0:36:93:4D:D1:0A:D3:BD:35:BB:DA:84:79:BE:CE:66
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer:       /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial:       019EE88DA0FD7083DEC08299ABA8F98F2ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number:          01B8
Signing time:             Sun 21 Jun 2026 05:00:56 +0000
Manifest this update:     Sun 21 Jun 2026 05:00:56 +0000
Manifest next update:     Mon 22 Jun 2026 05:00:56 +0000
Files and hashes:         1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: ThMHd9ylJpYziV/cxjPAuAFgPhHxVkakAajr+eMFK50=)
                          2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:8d:a0:fd:70:83:de:c0:82:99:ab:a8:f9:8f:2e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
        Validity
            Not Before: Jun 21 05:00:56 2026 GMT
            Not After : Jun 22 05:00:56 2026 GMT
        Subject: CN=d4d1b89ca036934dd10ad3bd35bbda8479bece66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bb:ef:bf:52:2c:6f:0d:68:3e:5f:bd:3b:b1:
                    1b:cb:6b:26:4f:a9:e0:7f:be:20:53:f8:2a:b4:d3:
                    3a:6f:66:dd:90:ea:d2:d8:3d:c0:c1:59:4a:e6:52:
                    b1:99:20:ee:14:df:70:f3:46:75:da:08:db:5c:06:
                    93:bb:13:56:35:c2:b3:41:a5:f0:3f:82:17:a6:74:
                    57:b4:82:1c:c1:56:62:b4:f9:25:61:56:1a:69:a9:
                    b6:43:d9:be:19:09:0f:88:49:b9:b9:d1:31:9a:4d:
                    b5:21:e5:92:e8:74:84:e0:ac:39:67:98:91:c8:7e:
                    ca:31:78:ed:70:a1:24:ee:3c:13:78:20:de:53:de:
                    cf:b4:e2:3d:fd:5d:d5:d9:56:2f:3a:e0:52:60:9d:
                    af:e2:09:7c:fb:5d:00:86:ed:12:cd:ed:43:a0:d4:
                    34:3a:17:6b:c5:d9:7b:dd:68:82:a1:c8:6e:15:d2:
                    77:33:7f:91:c2:e9:aa:4f:01:b9:b9:54:40:fe:10:
                    b6:de:b4:b4:6f:89:6d:f8:fc:aa:8e:3d:f1:66:25:
                    76:45:be:16:e1:7f:dd:f9:94:0d:c0:03:05:ed:3e:
                    0e:9e:f7:88:fb:fc:b3:e3:74:89:26:ee:90:33:01:
                    4a:72:b4:d2:ee:94:68:c3:79:c2:58:32:d8:25:30:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:B8:9C:A0:36:93:4D:D1:0A:D3:BD:35:BB:DA:84:79:BE:CE:66
            X509v3 Authority Key Identifier:
                keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:3f:0d:ad:ea:dd:06:cf:be:38:3b:2d:08:10:a9:98:e6:
         54:92:65:cd:d0:1f:cb:d7:d6:05:c8:e7:00:5c:8e:91:54:74:
         08:b9:3f:00:3b:66:97:b4:8c:dc:61:3c:57:db:b7:cf:b9:cf:
         d3:a5:bd:e0:3f:59:2e:a9:3c:9c:25:3d:7d:cc:36:c5:69:b9:
         0e:73:cb:1f:be:bf:81:80:0a:6f:fb:bc:13:72:b1:63:41:df:
         f4:3a:41:34:92:23:2d:2d:8d:fa:23:40:f5:69:16:ca:c2:fb:
         ef:a6:10:2a:3d:0d:8a:ba:5f:2a:61:90:d4:ef:6d:d8:e3:19:
         f8:de:31:3f:76:d1:c9:9d:d6:a3:39:06:ce:bc:d3:49:c8:90:
         d1:2c:a0:6a:69:c5:05:f3:56:74:81:22:b8:3c:5a:34:93:b1:
         cc:85:fc:a9:cc:fc:7d:e6:8e:02:c7:a2:c6:53:9b:d3:df:d9:
         81:74:04:25:03:ed:70:d0:a3:a9:29:2e:08:22:1f:18:1a:ed:
         f5:b8:2b:78:b3:2b:5d:72:df:fe:e1:a8:87:59:5b:7a:bc:08:
         97:ef:5f:db:ef:c8:27:73:b3:a5:b5:e5:c0:35:a8:7a:9c:83:
         1b:62:2c:57:7c:28:37:7b:d2:45:f2:3b:4d:fe:5b:e3:f1:9e:
         ff:9a:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:14:58 2026 by rpki-client