Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File:                     iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier:          UhoSxUYTp7hMJxvbLOrKUkMYCxXvlrLF9zU8LJ0sRDE=
Subject key identifier:   BE:5F:ED:54:F9:CE:6F:7C:B7:54:A1:93:13:71:06:24:36:BB:4C:65
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer:       /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial:       019E31BC3B036210B78EA19BD8F28F135595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number:          170E
Signing time:             Sat 16 May 2026 17:01:19 +0000
Manifest this update:     Sat 16 May 2026 17:01:19 +0000
Manifest next update:     Sun 17 May 2026 17:01:19 +0000
Files and hashes:         1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
                          2: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (hash: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM=)
                          3: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
                          4: fzC-AcNh2yOJ_5dGUvrvfw9vsok.roa (hash: tSTIZaYoRGt64j2os/R+JCN+/UAvU/awUqy9sBJwtAc=)
                          5: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: PIDLv4HEcEFV8dfs13lI2FLP8IyTc+Myghe3o6S7xEQ=)
                          6: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (hash: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik=)
                          7: xpN5zraKiIDTkd918KKze_PLUR4.roa (hash: NFN27n7LM3oXIoVyd7siXk3IhtAWZMYT7ZhRr4tRlec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:3b:03:62:10:b7:8e:a1:9b:d8:f2:8f:13:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
        Validity
            Not Before: May 16 17:01:19 2026 GMT
            Not After : May 17 17:01:19 2026 GMT
        Subject: CN=be5fed54f9ce6f7cb754a1931371062436bb4c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:fa:7c:56:40:0b:05:ec:ae:cb:94:4c:29:
                    57:0c:10:ba:b2:8b:da:ae:fd:ea:9e:07:fb:0a:e3:
                    eb:3b:f7:bd:5f:3b:fe:48:14:c7:70:12:b5:ef:82:
                    ad:6b:79:c3:be:7e:73:c9:5f:ad:3e:68:09:7c:a3:
                    e1:21:32:8a:5e:28:d9:58:1d:d7:09:38:17:89:7a:
                    f9:ab:41:26:54:52:5c:bc:a4:1f:2a:7e:19:a7:28:
                    63:a2:dd:2b:7c:c5:70:6a:1b:ee:d1:4d:4f:c1:47:
                    d1:ef:fd:24:99:71:af:06:c9:89:b3:17:81:3f:ff:
                    f5:e1:d1:92:bd:38:1d:e9:4d:ad:b2:11:6b:49:5a:
                    95:36:29:f7:74:38:52:88:1e:33:ae:c1:69:45:1d:
                    31:3c:cd:0a:d2:b6:4c:96:95:34:50:6b:69:58:0d:
                    d1:22:d1:5a:11:d6:7c:94:d5:9c:e2:54:2a:70:0f:
                    20:53:48:cd:f4:62:ed:e7:d9:c0:d6:2a:47:6a:f2:
                    9e:92:95:d2:78:3a:3e:77:c8:b4:36:73:37:2c:81:
                    d6:26:52:3d:b0:ae:ab:4b:ae:b8:e9:45:a8:e4:d2:
                    18:71:05:4b:09:96:39:b3:fa:5a:2b:92:ca:b8:d0:
                    af:b6:3c:34:4a:b4:29:91:f2:33:67:77:f1:41:d3:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5F:ED:54:F9:CE:6F:7C:B7:54:A1:93:13:71:06:24:36:BB:4C:65
            X509v3 Authority Key Identifier:
                keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:c7:44:fb:03:62:08:00:56:4b:4c:7c:e5:fc:d1:c4:64:
         c8:26:a4:ec:ff:91:85:f6:36:18:63:d3:28:75:7d:63:7c:30:
         42:72:59:99:03:3e:2c:a1:e4:a2:c0:d5:76:d7:96:ad:3c:63:
         76:7e:b9:82:36:2d:bd:fe:36:ae:54:d7:f3:c3:c5:f9:2f:2e:
         ee:cb:84:5d:09:8d:d3:04:55:5c:66:75:9f:20:3f:35:f2:9a:
         80:bd:b4:51:ed:c1:4b:bb:58:57:4d:ab:0b:a8:43:18:07:b1:
         d5:39:1e:a0:04:f2:b8:09:c5:c2:3b:92:9a:4a:a0:e1:ff:24:
         79:a7:f8:14:15:b5:11:57:88:ec:c9:c7:50:04:8d:91:3d:33:
         d1:81:50:e0:3b:9a:83:89:84:7b:11:b8:e3:28:9f:20:e1:b9:
         4e:dc:fd:8b:81:11:44:71:bf:df:cd:e5:7a:34:b7:18:f4:16:
         30:04:b2:43:a8:89:82:8f:1c:5a:4b:42:83:e6:0f:ab:b6:b6:
         a0:9b:73:ad:5c:87:f3:1b:30:81:9c:70:88:7a:a1:5d:b6:9f:
         55:b8:3f:27:35:14:7a:87:3b:e3:37:67:5c:3d:27:e8:20:16:
         b4:62:71:99:39:80:a7:db:d3:b6:87:79:ca:bb:95:09:61:64:
         42:e2:54:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvDsDYhC3jqGb2PKPE1WVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi
Mjk5NDAwHhcNMjYwNTE2MTcwMTE5WhcNMjYwNTE3MTcwMTE5WjAzMTEwLwYDVQQD
EyhiZTVmZWQ1NGY5Y2U2ZjdjYjc1NGExOTMxMzcxMDYyNDM2YmI0YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbX6fFZACwXsrsuUTClXDBC6sova
rv3qngf7CuPrO/e9Xzv+SBTHcBK174Kta3nDvn5zyV+tPmgJfKPhITKKXijZWB3X
CTgXiXr5q0EmVFJcvKQfKn4Zpyhjot0rfMVwahvu0U1PwUfR7/0kmXGvBsmJsxeB
P//14dGSvTgd6U2tshFrSVqVNin3dDhSiB4zrsFpRR0xPM0K0rZMlpU0UGtpWA3R
ItFaEdZ8lNWc4lQqcA8gU0jN9GLt59nA1ipHavKekpXSeDo+d8i0NnM3LIHWJlI9
sK6rS6646UWo5NIYcQVLCZY5s/paK5LKuNCvtjw0SrQpkfIzZ3fxQdMOsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5f7VT5zm98t1ShkxNxBiQ2u0xlMB8GA1UdIwQY
MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt
MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj
LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqh7HRPsD
YggAVktMfOX80cRkyCak7P+RhfY2GGPTKHV9Y3wwQnJZmQM+LKHkosDVdteWrTxj
dn65gjYtvf42rlTX88PF+S8u7suEXQmN0wRVXGZ1nyA/NfKagL20Ue3BS7tYV02r
C6hDGAex1TkeoATyuAnFwjuSmkqg4f8keaf4FBW1EVeI7MnHUASNkT0z0YFQ4Dua
g4mEexG44yifIOG5Ttz9i4ERRHG/383lejS3GPQWMASyQ6iJgo8cWktCg+YPq7a2
oJtzrVyH8xswgZxwiHqhXbafVbg/JzUUeoc74zdnXD0n6CAWtGJxmTmAp9vTtod5
yruVCWFkQuJUKg==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:53 2026 by rpki-client