Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File:                     i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier:          n15aNVkKfRxW6KymkV8jbEurZFPzk/jIlS3Bqir8DM8=
Subject key identifier:   85:84:9C:FF:C4:BD:DA:98:DB:EB:B7:1D:64:4F:A3:43:7D:3C:53:AB
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer:       /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial:       019EB80EEDE4CA397C92F0FA75C053AFFDF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number:          045B
Signing time:             Thu 11 Jun 2026 19:00:46 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:46 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:46 +0000
Files and hashes:         1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
                          2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: gLkxt00sZbVrW5YZOMotE/xwvTDs2tGyneUSmVr08mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:ed:e4:ca:39:7c:92:f0:fa:75:c0:53:af:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
        Validity
            Not Before: Jun 11 19:00:46 2026 GMT
            Not After : Jun 12 19:00:46 2026 GMT
        Subject: CN=85849cffc4bdda98dbebb71d644fa3437d3c53ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:66:94:32:77:c4:0c:4b:f9:9d:4d:1a:80:
                    48:38:2d:f1:34:97:21:02:72:96:8c:19:9c:9a:cb:
                    a9:eb:1f:fc:99:dc:94:4b:5b:ce:5b:98:e9:bd:f7:
                    37:50:5a:eb:8f:b0:c9:1b:c3:cc:83:2c:89:f6:c0:
                    ee:9e:29:60:86:d7:82:37:d1:3a:dc:28:ce:2d:e2:
                    8f:92:57:84:6b:5a:5b:8a:90:cd:67:e4:c1:a2:42:
                    53:8f:c5:01:ca:3b:8e:e6:cc:8d:49:a6:94:07:76:
                    8c:0a:e2:4a:e5:cb:ee:6e:06:f3:ea:17:e7:af:83:
                    e5:bf:dc:ff:14:ae:5a:59:db:57:57:f9:d3:5f:42:
                    35:30:2a:7b:94:96:a2:eb:5a:cf:1a:4c:54:59:da:
                    73:54:32:b8:dd:80:17:7d:92:77:fe:2f:46:e4:6f:
                    0c:0a:e6:b1:9c:0e:19:af:2c:49:dc:d0:3a:9d:a9:
                    46:82:ec:65:4b:33:e6:70:4f:5a:c7:68:14:80:ae:
                    02:b2:eb:63:b3:89:18:c4:4b:b9:c7:9b:86:4c:b2:
                    9b:b9:04:20:2a:1a:7d:2b:6d:65:dc:01:9b:2c:37:
                    1e:4e:00:ba:82:12:70:3a:37:40:d2:54:71:84:b8:
                    33:0f:a9:cd:54:81:3f:6b:e5:aa:e2:b3:cb:8d:bf:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:9C:FF:C4:BD:DA:98:DB:EB:B7:1D:64:4F:A3:43:7D:3C:53:AB
            X509v3 Authority Key Identifier:
                keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:97:d9:da:32:75:d4:5e:ec:1f:59:c6:62:33:2b:21:54:ed:
         62:f9:2d:39:19:b7:9b:5e:2e:53:eb:3c:4b:01:e6:d6:f2:eb:
         32:2a:6f:04:8b:e9:84:32:e8:6f:a5:b1:c9:1a:8d:01:d3:e3:
         70:12:33:e7:89:36:db:7e:fe:00:64:9b:fe:95:44:b4:61:e1:
         d7:ae:18:62:62:6b:e9:01:6d:9e:72:11:b3:33:29:f2:38:6c:
         95:2f:8c:16:cd:6d:87:bd:33:33:d4:3a:fe:37:57:a6:e3:d5:
         b1:a7:67:77:20:42:2e:6c:dc:82:69:2a:35:ee:83:9e:9f:12:
         74:23:cf:19:5b:4f:55:f3:eb:33:1f:98:fc:93:a4:fd:20:2c:
         e6:35:65:c5:33:96:84:e4:5b:31:10:7f:9f:e6:80:36:66:c2:
         f0:2b:e4:d9:b3:48:8a:14:65:cf:99:ba:67:b7:f5:3d:cd:cf:
         bb:98:60:73:57:9f:94:9e:18:6e:39:b2:6f:03:eb:0e:59:08:
         31:96:a2:a4:5b:76:f1:30:f4:45:76:05:9f:5c:11:cf:26:c1:
         dd:18:4d:13:4b:1a:6e:7e:b5:ff:a2:f6:eb:77:e8:b7:7e:97:
         2f:ce:ea:d7:35:17:0c:78:2a:5f:41:2a:69:db:99:9e:8c:e7:
         c8:eb:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:48:40 2026 by rpki-client