Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          ss7UHcrNjVShH67dudRPAXbAjCdKPicSAtRRKRGNuSo=
Subject key identifier:   85:F2:3E:B6:34:43:87:D4:14:45:BC:FC:66:3E:49:2D:24:17:95:5B
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       019ED50790B655E4016288349613B6A90DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          1967
Signing time:             Wed 17 Jun 2026 10:01:43 +0000
Manifest this update:     Wed 17 Jun 2026 10:01:43 +0000
Manifest next update:     Thu 18 Jun 2026 10:01:43 +0000
Files and hashes:         1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 4D9by11MIV+D1bhE3iwShFhGnF1mw+cJItTvH7gOQ/0=)
                          2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
                          3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
                          4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
                          5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:07:90:b6:55:e4:01:62:88:34:96:13:b6:a9:0d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Jun 17 10:01:43 2026 GMT
            Not After : Jun 18 10:01:43 2026 GMT
        Subject: CN=85f23eb6344387d41445bcfc663e492d2417955b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:f1:f7:d0:f7:53:63:7f:8a:e6:bd:71:c9:
                    ae:11:02:1e:97:43:0b:23:4b:61:b2:80:c0:4f:d6:
                    95:f9:30:83:5c:0c:3e:b5:ac:02:97:f4:6b:22:89:
                    40:5e:a1:0e:37:4b:dd:b4:82:9c:35:c2:e3:92:79:
                    5e:fd:0b:9f:af:9a:a5:0c:d8:4a:ae:eb:2d:1e:a0:
                    16:0f:cd:bc:01:93:43:54:39:bc:ba:1a:60:86:81:
                    87:fe:19:9b:63:22:af:fb:17:af:4a:1e:dd:1a:9f:
                    27:fd:14:52:0d:63:46:13:fa:d1:93:89:28:96:e2:
                    09:92:74:cf:80:42:c7:76:41:7f:5a:ce:ae:9b:5d:
                    82:4c:d9:39:27:bf:db:b1:24:f5:53:19:f5:20:ee:
                    f9:96:da:53:e5:f5:f3:0a:23:74:e3:2c:85:44:c5:
                    b9:1c:57:7d:e5:33:fe:cb:88:d4:c7:4a:38:cb:b4:
                    2f:e8:74:f0:9d:76:b5:6f:be:41:50:e9:4b:74:77:
                    31:c3:d5:9e:f2:6f:12:17:6e:6f:58:05:b9:6a:7f:
                    69:f6:a2:24:29:10:df:ff:eb:a4:83:d1:cc:b8:e9:
                    aa:c8:a3:68:36:d9:f0:30:62:df:ef:47:89:0f:d1:
                    e1:75:7a:4f:ca:00:b4:a3:45:e4:ab:c0:fa:6e:3f:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:3E:B6:34:43:87:D4:14:45:BC:FC:66:3E:49:2D:24:17:95:5B
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:8e:68:c1:1e:11:a5:5a:ea:10:16:3c:f6:94:e6:8e:81:
         6b:4e:b4:e8:8a:0e:37:25:e4:68:76:b0:5f:69:a5:89:44:7e:
         6e:8c:99:be:cb:3d:b7:22:af:fa:92:1c:9a:d5:53:85:f9:56:
         21:f3:40:f8:44:38:c1:19:a7:18:ec:b5:fa:f2:7b:8b:86:61:
         2e:b6:6e:b6:22:77:a6:d3:da:25:5a:7c:df:6a:2a:8c:9d:e4:
         4a:17:f1:44:fd:97:c9:99:49:c0:ec:e1:77:af:0c:8e:74:ae:
         e0:d6:c8:6f:42:86:7f:05:05:d9:63:a2:5a:d7:6f:d9:16:2a:
         0f:d5:01:2e:ac:9c:b1:0a:60:0d:a9:5a:0f:74:d2:e1:0a:13:
         c7:7b:e2:d8:43:88:91:d1:d4:1b:3a:6e:b8:4b:7b:4e:6f:2a:
         82:14:b3:33:ba:d3:de:7a:fe:11:61:b1:4a:45:d9:2c:d8:3c:
         5c:33:08:57:02:c7:8c:ca:4d:54:63:63:ef:3a:8a:a1:70:9e:
         f5:51:d3:f8:17:21:57:24:ac:4d:2f:2f:db:63:ff:58:9e:9d:
         af:e7:64:f2:8d:57:d1:6b:cb:67:64:73:d7:d5:36:3f:10:98:
         54:32:fb:68:82:fb:5e:14:0b:1c:d7:cb:20:ab:ab:d0:05:d2:
         81:6d:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:06:55 2026 by rpki-client