Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          w118KnkIM+hkMT2rJOtwqhmwl327HiRpb3Va5H0jO+c=
Subject key identifier:   9D:4B:1F:FD:96:0E:E8:47:2D:D8:68:F0:D3:46:58:76:39:14:1E:B8
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       019E31851930AF9522369FE1FEE96CABF1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          07FE
Signing time:             Sat 16 May 2026 16:01:06 +0000
Manifest this update:     Sat 16 May 2026 16:01:06 +0000
Manifest next update:     Sun 17 May 2026 16:01:06 +0000
Files and hashes:         1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: oc1PcXvpAZviLYGKqnXhgrQkRUrm6ZjQTS2S/BEt0D8=)
                          2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:19:30:af:95:22:36:9f:e1:fe:e9:6c:ab:f1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: May 16 16:01:06 2026 GMT
            Not After : May 17 16:01:06 2026 GMT
        Subject: CN=9d4b1ffd960ee8472dd868f0d346587639141eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:b8:42:22:96:94:7c:36:0e:62:1a:77:48:
                    37:18:d2:9c:32:ba:ed:e8:46:09:31:28:71:c2:52:
                    6c:f0:da:e5:51:fe:35:3c:72:62:e3:8e:0d:64:8c:
                    47:0b:8b:54:ab:6e:4f:8a:40:9c:fb:70:a5:45:42:
                    cf:3d:c5:b5:38:f4:27:5a:30:5f:35:b6:36:82:4c:
                    0b:e9:74:3b:8a:90:90:ea:ff:d1:bf:1b:59:29:71:
                    77:97:65:24:33:2c:db:bb:7a:d6:6d:e5:35:7b:57:
                    fb:61:cf:8e:be:50:18:97:27:d1:7c:bf:8e:c6:74:
                    c1:12:b1:c3:28:2d:2e:1c:42:2a:17:9d:e5:b7:da:
                    23:e3:58:a5:0d:98:0e:68:83:66:7e:d6:b4:3d:5a:
                    5c:9a:4e:70:ab:ac:78:b1:e4:1b:64:d0:ac:df:65:
                    1b:b7:5f:fd:bf:88:86:82:1b:64:00:fb:d0:2d:c6:
                    e0:28:48:2c:0c:19:43:bd:db:f3:d4:d5:c4:1d:03:
                    d6:0d:be:f3:a9:ab:43:2a:b1:6c:78:e4:75:cc:64:
                    e9:e6:fd:4d:86:7e:c9:d0:7a:71:fe:b4:65:e3:87:
                    9f:a0:a0:c3:59:0e:d7:d0:58:d7:ed:0d:c8:9a:c7:
                    97:52:c5:2e:82:50:f0:55:30:c2:27:dd:14:ff:7a:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4B:1F:FD:96:0E:E8:47:2D:D8:68:F0:D3:46:58:76:39:14:1E:B8
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:17:79:96:8a:a6:7d:63:b1:b7:fd:8c:5d:bb:eb:ee:28:8e:
         a4:72:52:38:fe:2b:ea:91:1c:3e:55:0a:aa:9a:f8:44:51:89:
         25:7a:e3:83:83:3b:27:86:40:ec:d3:39:b1:e4:ca:87:80:b1:
         6b:6d:ee:b5:ae:e5:f1:50:5b:d7:5b:21:6b:5e:2e:b7:a0:83:
         61:90:e6:27:9b:31:8a:4b:48:ab:98:42:7e:16:c8:5f:39:29:
         3d:24:57:d2:03:47:53:37:53:67:bd:42:45:16:b7:dd:df:07:
         1c:a6:2d:46:9a:07:e2:b3:72:ea:6d:5e:bb:63:9a:d2:9a:2d:
         3c:72:10:da:be:a9:97:f5:07:79:85:cb:2e:fd:70:f3:45:f4:
         f8:d3:a3:a4:df:d8:4c:5b:d7:4b:7d:d8:ec:a0:aa:d6:a5:8a:
         56:5b:d9:ed:2c:5f:0a:b0:54:f9:06:24:cb:5d:7d:c7:1d:bf:
         e8:f4:dd:a9:71:0e:dc:5a:10:45:31:69:a2:a4:38:30:c0:ba:
         7e:18:b7:4d:72:42:ad:9a:da:45:22:ea:23:50:17:31:28:77:
         7a:54:68:3d:5e:25:1e:f4:ae:b0:cd:02:26:02:63:b2:78:78:
         d4:68:99:7c:11:68:13:a0:bd:b0:ac:b4:70:1d:f3:7d:f7:40:
         c8:2c:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:45 2026 by rpki-client