Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          dYaisLlEWyTuY2uwC/7XC1YBJiRxu9Bx5uJfoVy0izk=
Subject key identifier:   C8:48:57:C9:52:9B:5D:49:50:61:3A:57:47:91:7B:71:BF:F1:8D:E7
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019F11C0388C4AC46D985D36B84E13793412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          02CA
Signing time:             Mon 29 Jun 2026 05:00:37 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:37 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:37 +0000
Files and hashes:         1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
                          4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
                          5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
                          6: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
                          7: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: mcm+s9nLmE1W3N9E+PlaQkx1/Pq+6QuMU9+9zQUOzUU=)
                          8: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          9: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          10: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
                          11: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:38:8c:4a:c4:6d:98:5d:36:b8:4e:13:79:34:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Jun 29 05:00:37 2026 GMT
            Not After : Jun 30 05:00:37 2026 GMT
        Subject: CN=c84857c9529b5d4950613a5747917b71bff18de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:a3:29:02:e6:08:38:c1:54:64:30:38:f4:
                    17:80:39:f8:f0:53:06:f6:30:ac:ff:dc:88:2c:37:
                    1d:93:e5:32:03:49:4d:f0:dc:90:fd:f2:41:4b:12:
                    a8:c0:3a:31:d0:0f:ff:0b:6b:9c:33:fb:30:4a:2f:
                    bc:f3:f1:e5:47:0b:bf:27:63:08:36:00:9d:0f:24:
                    7a:b1:60:00:ba:4a:80:09:fa:69:9d:e5:ac:22:06:
                    89:43:45:2d:a3:b0:fa:7f:4a:c1:38:55:2a:5f:74:
                    a0:94:cf:a1:06:31:76:3b:15:b8:ce:74:2b:6e:40:
                    60:f5:33:17:31:5b:d9:65:04:79:2d:b1:37:cb:12:
                    38:6a:46:76:6d:ac:1e:da:fa:4a:13:e8:d3:b2:87:
                    f7:73:af:ee:81:d8:d2:73:b5:62:7f:3b:3e:53:3e:
                    73:50:61:67:62:82:5d:bd:2f:df:e9:3a:01:fe:ff:
                    5b:07:7d:9d:6e:bb:2a:1a:f9:c1:04:23:00:62:82:
                    31:59:57:bd:fb:19:3f:4c:69:bf:e3:cd:f9:c3:81:
                    73:e0:af:38:23:78:df:08:cc:91:3d:c2:d4:26:ee:
                    01:29:6c:fb:72:4c:15:aa:b8:0b:27:43:99:b2:5c:
                    7f:84:ea:38:23:cb:d4:71:2f:cc:7a:a1:33:28:b2:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:48:57:C9:52:9B:5D:49:50:61:3A:57:47:91:7B:71:BF:F1:8D:E7
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8a:2f:72:9e:42:ce:e4:51:b8:24:4a:45:2d:b5:de:3d:a8:
         f3:da:f4:f1:03:be:64:b6:e0:b7:da:9a:50:cc:73:e9:d3:55:
         19:0d:48:41:38:af:03:e4:63:af:b0:48:ec:2e:3b:4e:95:76:
         44:c4:62:b3:ef:28:ec:d7:a9:7a:7e:27:64:e2:d0:00:96:09:
         7d:21:91:f2:6f:fd:26:72:d8:81:6c:ec:fa:74:b2:9b:c7:29:
         c4:2f:1b:27:93:44:6c:59:bf:ed:9a:bb:f9:84:d1:52:b1:65:
         07:6f:40:74:4c:cb:5c:18:d3:35:4c:7f:81:21:d6:52:b0:db:
         79:c2:cd:9d:51:30:74:07:df:1d:c0:97:17:fa:f1:35:eb:d8:
         c9:42:a8:b8:eb:a5:9b:91:63:9e:cc:77:47:81:ae:1f:11:91:
         56:e7:f6:7d:8c:0e:a7:e8:f8:06:a4:e0:73:84:85:61:59:79:
         35:ac:f1:ee:41:c3:20:9f:e1:e1:07:cc:43:93:c5:dd:30:d3:
         04:43:3f:e7:df:d9:0f:b8:be:c6:50:fb:31:99:05:4d:15:e5:
         37:31:0f:f8:39:28:67:08:ab:63:e4:0d:a9:e0:d1:bc:fa:d7:
         35:2a:d5:a8:df:2c:4f:83:1c:df:b2:7f:d3:b6:97:e8:c7:8d:
         24:22:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:11 2026 by rpki-client