Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File:                     IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier:          O9yz7VKFs6njlZrnQYqyQkSWISdCMWbhdnjsNt/JVhQ=
Subject key identifier:   5D:76:79:CE:47:4A:22:69:08:A5:14:D0:FE:8E:4D:80:A4:AE:69:42
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer:       /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial:       019E92B8E04F2592FE0CAD906E148F2DC6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number:          1521
Signing time:             Thu 04 Jun 2026 13:00:49 +0000
Manifest this update:     Thu 04 Jun 2026 13:00:49 +0000
Manifest next update:     Fri 05 Jun 2026 13:00:49 +0000
Files and hashes:         1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: fMyDr4NsdWJifPkzML2IJ72VLk2m7HmNUpOrnBuJzAk=)
                          2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:b8:e0:4f:25:92:fe:0c:ad:90:6e:14:8f:2d:c6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
        Validity
            Not Before: Jun  4 13:00:49 2026 GMT
            Not After : Jun  5 13:00:49 2026 GMT
        Subject: CN=5d7679ce474a226908a514d0fe8e4d80a4ae6942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:b4:19:ac:7c:b6:85:c5:54:09:d9:85:24:
                    30:dd:3d:56:88:13:66:2a:bd:e0:85:69:fd:c5:06:
                    c5:1d:82:28:2f:4c:11:e8:75:c7:14:9e:52:c6:e7:
                    f9:79:ab:50:2f:aa:6b:e5:ab:55:41:b1:e8:94:c7:
                    76:ea:d8:cd:53:53:bd:3d:60:d6:e4:7c:4e:c0:89:
                    94:08:5e:94:7b:c5:32:1f:32:17:64:0d:c2:f0:30:
                    11:60:f9:50:44:53:7c:a6:f6:43:ed:f2:c5:14:74:
                    f7:c2:78:03:af:78:38:f8:67:05:19:a7:5c:c2:f6:
                    cf:e8:64:f3:a2:7b:3e:f5:0a:13:db:fa:4a:dd:9b:
                    da:53:c2:fd:1a:05:70:42:6a:c4:e2:05:d3:9b:6c:
                    8e:68:de:18:69:a5:69:9a:b0:d8:e8:66:77:33:5e:
                    ac:df:d4:9d:d5:52:73:68:31:8b:33:5d:73:7b:4b:
                    d7:63:3b:61:7c:99:19:18:5c:49:48:c2:ea:fa:7f:
                    f3:81:09:38:0d:94:fc:f5:03:41:ef:8c:c6:73:69:
                    08:03:6a:f5:d9:39:c3:aa:d4:e5:56:b7:ce:6c:e3:
                    c2:2d:f8:0c:61:e1:77:51:5e:f0:d3:72:37:0f:7d:
                    0f:06:c0:a4:11:13:53:a7:83:fa:af:4b:04:ff:82:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:79:CE:47:4A:22:69:08:A5:14:D0:FE:8E:4D:80:A4:AE:69:42
            X509v3 Authority Key Identifier:
                keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:0c:39:4c:3b:13:46:c9:19:29:6d:ab:de:4a:c4:d6:81:
         45:4e:7e:57:da:55:25:8f:6a:85:40:09:b6:ab:7a:0a:d8:2d:
         43:0a:ba:e0:3c:fe:16:03:6a:f5:bd:ec:72:4d:53:0f:f8:bb:
         3d:93:4d:9b:a0:6c:ea:a1:e9:40:89:93:98:54:49:50:45:22:
         a7:8c:50:26:60:83:4e:13:90:2d:22:40:8e:2e:c9:d2:69:0f:
         3a:0a:74:47:94:85:d2:af:e4:c6:9a:e8:d4:87:12:38:cf:f3:
         41:00:f8:3f:b9:86:ff:0d:86:65:d0:12:3c:7f:01:8b:7e:5c:
         82:58:be:6e:f9:f1:14:85:1d:2a:c2:71:93:7e:10:c9:4e:9d:
         7b:d5:b8:25:57:86:e4:a8:4a:c3:20:33:7a:24:44:86:cc:58:
         82:4d:74:a2:6b:05:79:6c:a8:5d:b2:8e:5a:c8:37:db:89:16:
         38:45:01:54:e6:5f:6f:84:85:b9:ae:b3:6c:ac:90:2b:a4:00:
         1f:77:c6:7c:bd:d2:51:a2:76:00:fa:d6:8a:8e:6b:71:bb:d6:
         96:cd:18:92:f6:74:b1:f3:1c:e6:d0:f8:4c:56:c6:b7:88:65:
         31:2c:40:67:e6:f3:9d:98:1e:85:6c:61:3b:8c:3f:eb:9c:1b:
         77:41:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:22 2026 by rpki-client