Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          sk5yzYAQVo2+7HNv5asVzvFMwMWutGRAPHZ63dE974g=
Subject key identifier:   15:48:E6:45:7F:CB:E1:84:D8:D2:ED:6A:09:A8:6E:FC:7D:6F:95:2F
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019CE3DA4388A11A05718A6F539EC555A9B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0FB5
Signing time:             Thu 12 Mar 2026 21:00:57 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:57 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:57 +0000
Files and hashes:         1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
                          2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: 8REe0jODkWGBgvVoR8Nm2LTqtTmk+ZlpVhlTOXOFxR0=)
                          4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
                          5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
                          6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
                          7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:43:88:a1:1a:05:71:8a:6f:53:9e:c5:55:a9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Mar 12 21:00:57 2026 GMT
            Not After : Mar 13 21:00:57 2026 GMT
        Subject: CN=1548e6457fcbe184d8d2ed6a09a86efc7d6f952f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:eb:40:1a:9b:b4:55:47:4e:49:d7:0f:fc:
                    68:ad:49:47:b4:f2:50:43:d5:ef:00:5e:49:ca:a4:
                    e9:21:66:22:ff:82:2c:9f:74:c4:f1:d9:4c:22:34:
                    c2:cc:2b:47:6f:96:2c:03:97:85:fe:c9:c3:be:f1:
                    17:30:48:43:84:5f:c2:8f:ed:2d:23:f5:92:4b:78:
                    7d:29:87:f4:36:38:72:9d:81:18:9f:65:fa:1e:6a:
                    bb:20:e3:ea:c5:74:f6:82:91:83:12:78:06:ba:f2:
                    c6:76:05:fb:ae:e3:c5:d2:c8:47:21:e2:89:58:a4:
                    24:8e:05:eb:4a:f1:50:19:6b:19:4d:bf:c0:36:62:
                    46:14:8b:52:39:64:88:ae:ef:15:47:78:f5:df:15:
                    d9:e6:6d:5a:17:85:e1:d0:ff:a4:ec:28:ec:8e:79:
                    db:e0:33:72:58:1a:b4:ed:39:29:5d:da:09:50:bd:
                    df:55:54:89:0d:43:86:c8:dd:53:54:af:94:40:01:
                    52:8d:d9:46:91:7d:88:db:34:2a:18:74:c0:c2:63:
                    60:fe:84:55:b5:de:b2:32:4a:ba:b9:9e:7f:76:ac:
                    c7:39:bf:90:a6:69:c9:27:56:a5:c1:12:18:ba:42:
                    36:00:14:83:a6:57:ba:51:ff:0f:a6:cb:9d:3e:3a:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:E6:45:7F:CB:E1:84:D8:D2:ED:6A:09:A8:6E:FC:7D:6F:95:2F
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:90:9f:46:93:01:99:70:1b:02:ea:5a:5f:f9:ab:16:62:ca:
         0b:1f:96:0b:86:4b:3f:8e:0e:fe:92:74:28:44:f5:18:10:5d:
         76:6d:c0:66:56:0d:02:62:8a:ef:9e:98:6f:c5:e2:40:60:23:
         88:6c:1f:79:f3:25:84:d4:bf:9f:82:a4:b8:fa:82:fe:cd:54:
         02:d4:fe:7c:cf:e0:c7:21:70:ed:23:c9:d5:bd:c8:19:b0:cd:
         1f:f0:3a:4a:63:f0:a4:76:d2:9e:45:5d:f7:2b:dc:88:f7:7d:
         5b:fe:5e:38:67:6b:1b:68:14:d8:51:28:75:33:3f:07:f8:31:
         9c:d0:8d:fd:91:be:34:89:d3:21:f2:b5:f1:d9:bb:e8:9e:66:
         f6:cd:0e:f8:b5:47:e2:3c:1e:e1:e0:df:3b:85:75:68:da:8c:
         67:be:c7:5d:b5:70:62:fa:c5:60:13:ef:6b:52:ad:be:a4:cf:
         bc:87:52:36:6c:e6:77:fa:7a:e4:8e:ec:57:93:6c:b1:ba:e0:
         ff:3f:55:37:d0:42:f2:87:ba:2e:a8:07:b2:9b:9b:e3:4c:08:
         c9:98:33:e2:f1:39:ec:70:94:39:f6:4a:3f:97:ff:13:66:68:
         ed:bf:3b:07:70:c3:0f:43:d1:89:c3:12:bb:0f:30:9e:74:d7:
         92:5f:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:00:30 2026 by rpki-client