Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
File:                     ilqFDZoDAtO1zC3firM8qrfM5KY.mft (raw, json)
Hash identifier:          UXAqHt4+ofQK1NYv+RedVel/RiYFvBmDZIr8gPNT3RU=
Subject key identifier:   90:70:0B:E7:22:A7:14:3C:A1:64:82:39:39:FC:8E:8D:F3:F1:F2:FF
Authority key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
Certificate issuer:       /CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Certificate serial:       019EA0E353941043B4A4D9442FB12BFE2134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
Manifest number:          01BE
Signing time:             Sun 07 Jun 2026 07:01:52 +0000
Manifest this update:     Sun 07 Jun 2026 07:01:52 +0000
Manifest next update:     Mon 08 Jun 2026 07:01:52 +0000
Files and hashes:         1: X0sJvwV09OqcfyACoi0QzOiDpSI.asa (hash: 4DIZkxx6C1+CqW+PWxpXd6bNAzfNgcYhwNzEirfyRvY=)
                          2: ilqFDZoDAtO1zC3firM8qrfM5KY.crl (hash: /7/LCgAuNDMA8SGLTriwADcLObdE96TRWRYjPOU4L9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a0:e3:53:94:10:43:b4:a4:d9:44:2f:b1:2b:fe:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
        Validity
            Not Before: Jun  7 07:01:52 2026 GMT
            Not After : Jun  8 07:01:52 2026 GMT
        Subject: CN=90700be722a7143ca164823939fc8e8df3f1f2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:69:38:a3:7f:bd:3c:34:d3:86:5f:9d:0b:
                    a2:94:b0:87:1e:50:b5:e7:a8:85:80:49:61:88:7e:
                    58:77:8e:e5:d4:39:6c:f2:bc:65:b8:8a:4c:35:cf:
                    76:ba:47:65:33:be:c4:2f:1d:31:46:20:d4:bb:f4:
                    0f:77:5b:91:04:7b:a0:79:24:a6:ba:70:33:a3:c4:
                    e0:38:95:fe:c4:01:8f:b5:e3:1f:0f:ad:e5:bf:c9:
                    89:f2:ef:1e:b8:52:34:8e:43:a4:45:87:f9:fa:5e:
                    fc:02:6b:1e:ed:9b:f1:fc:cc:b6:5e:d4:a4:b4:38:
                    11:85:81:e4:8f:39:77:b4:a2:5b:46:9b:48:7f:e5:
                    11:f0:14:de:3e:e0:b7:19:a9:a5:ed:41:66:8c:34:
                    d9:5e:5d:47:35:c2:b7:be:2b:5d:1a:6b:d9:4d:0f:
                    56:42:97:6f:3a:fb:c1:a2:38:93:f8:31:f0:f2:45:
                    f9:49:00:28:31:18:c2:9d:46:8f:6b:25:dc:d3:cc:
                    f8:7f:08:94:89:c7:99:d7:a3:63:8b:ca:30:c0:0a:
                    a8:ee:c4:44:c6:bb:2d:8a:c5:68:c6:cf:19:ab:8a:
                    58:de:87:0c:17:1a:58:08:25:f9:45:41:f5:fe:71:
                    86:50:d1:31:42:e3:23:f1:87:5a:a8:ac:4e:f1:0f:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:0B:E7:22:A7:14:3C:A1:64:82:39:39:FC:8E:8D:F3:F1:F2:FF
            X509v3 Authority Key Identifier:
                keyid:8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:21:1d:f0:b2:6b:7b:8e:31:c5:bf:c4:bd:2d:9e:2f:87:
         d1:f9:99:0f:36:1d:5c:93:9f:69:37:8d:61:c8:d7:12:31:8b:
         33:e5:03:a9:b2:c9:60:07:bf:3b:38:34:b4:79:3f:b6:cc:94:
         35:38:db:45:72:be:2a:8d:f2:d6:8c:3e:e4:65:5c:55:cb:a8:
         13:b7:28:f7:4a:f7:4a:8e:26:eb:d9:0b:a7:bc:d0:64:8d:d3:
         0c:9b:2d:e0:70:0f:cc:6f:8e:52:71:b8:1a:d6:6d:d4:90:86:
         f2:5c:49:9b:0b:2b:43:e0:01:31:aa:bb:d7:6c:37:a3:96:a7:
         a5:f7:ee:58:25:3f:b4:e1:e9:a4:4a:4e:e2:11:75:46:00:40:
         de:7a:46:1f:d2:54:67:27:72:74:28:4b:1a:1c:b6:4d:f4:1f:
         5f:44:a0:a2:cc:65:7f:46:0b:40:ba:12:ac:b4:a2:e2:41:0b:
         05:29:2b:45:23:7f:2e:72:ec:2c:1d:81:8d:b1:81:2b:65:11:
         42:09:f4:62:9f:6f:e2:8c:82:cf:cc:6d:88:ad:3d:f6:2d:9c:
         2f:40:2a:4e:f1:4a:da:08:3f:57:90:41:42:8d:ad:e6:76:49:
         2b:d5:ce:be:df:ca:a5:68:62:91:d8:c7:6b:1c:58:31:4c:64:
         fd:45:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 10:14:57 2026 by rpki-client