Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File:                     IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier:          1ahJ4IL1bnfDniZDt7lTjUVSdM0eFTyuUNlJD1dZJiE=
Subject key identifier:   94:58:2A:62:49:43:13:61:D5:18:54:18:88:57:FA:35:91:39:79:F0
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       019FF7C8A046E643DD3760178273DA99AC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number:          156D
Signing time:             Wed 12 Aug 2026 21:02:28 +0000
Manifest this update:     Wed 12 Aug 2026 21:02:28 +0000
Manifest next update:     Thu 13 Aug 2026 21:02:28 +0000
Files and hashes:         1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=)
                          2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=)
                          3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=)
                          4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=)
                          5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=)
                          6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: x1AsKn8idJGoTKHZ96TVbS15fskog/HwOsecwHXjI+I=)
                          7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=)
                          8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=)
                          9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=)
                          10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=)
                          11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=)
                          12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=)
                          13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=)
                          14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=)
                          15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=)
                          16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=)
                          17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:c8:a0:46:e6:43:dd:37:60:17:82:73:da:99:ac:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Aug 12 21:02:28 2026 GMT
            Not After : Aug 13 21:02:28 2026 GMT
        Subject: CN=94582a6249431361d51854188857fa35913979f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:91:47:17:fa:43:55:72:22:4f:66:4e:4a:
                    09:26:a2:98:ac:2f:2d:08:56:d5:39:77:4e:f5:76:
                    85:04:06:20:40:14:01:73:ef:bc:ae:6f:0c:8f:ef:
                    13:3d:af:48:f0:fc:82:58:10:0c:26:8b:67:fe:1a:
                    d1:a9:67:b0:2b:e9:89:f1:07:a1:37:54:37:c4:90:
                    b1:0d:53:b3:6c:d0:61:1a:bd:b9:ff:80:2d:bd:c6:
                    75:3f:d7:6b:bb:df:7c:8f:59:a6:74:e6:42:a6:ec:
                    5f:cd:73:13:a6:73:fe:c0:c9:55:1e:3d:cf:b9:1c:
                    ee:17:9c:49:58:aa:51:12:29:e1:5e:01:29:f7:5f:
                    35:dc:95:ca:22:3d:d1:5a:64:ed:a8:81:e9:d6:56:
                    02:da:88:ba:43:1f:74:00:49:19:d1:66:f6:d3:73:
                    ae:01:da:88:2e:36:b8:30:62:75:2c:59:3b:07:80:
                    da:ee:69:8d:4f:13:1a:35:b6:ad:c7:c5:7a:e2:92:
                    f0:79:65:47:28:62:86:c7:a2:58:72:2c:f4:88:54:
                    dd:8f:a9:ed:6c:9d:76:8f:03:4a:8b:af:f4:10:a8:
                    bd:7f:32:e0:7c:33:ec:06:d3:13:eb:f6:5a:67:a3:
                    af:35:e0:9d:0d:29:2d:8a:af:95:34:dc:c9:90:3f:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:2A:62:49:43:13:61:D5:18:54:18:88:57:FA:35:91:39:79:F0
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:df:84:03:a0:a5:53:37:d4:4b:c9:42:db:dd:f3:67:c7:3e:
         e9:36:fb:cb:8b:50:e4:48:ad:cf:04:93:25:df:2c:2b:96:b5:
         c0:8a:50:b2:b4:7f:76:62:d5:f1:37:81:3e:eb:70:76:9a:13:
         0b:c8:cc:2c:f2:0d:af:bd:9c:d5:0f:50:f5:08:d7:0d:69:27:
         4c:47:a3:1c:9e:93:4c:0d:30:d9:06:4a:62:aa:29:b5:6e:b0:
         8a:25:89:20:bb:1a:17:18:98:5b:bb:6c:a2:ce:37:38:23:11:
         db:cc:4c:38:27:be:2f:cc:34:d1:f8:c2:92:1a:e8:31:87:cd:
         f0:f1:b3:29:98:23:5b:5e:b7:43:fc:b6:2a:2d:be:fa:6d:b0:
         aa:44:6c:c1:a8:6f:56:79:72:55:cb:34:76:26:c8:63:82:91:
         b0:8c:3b:97:89:73:50:b5:80:76:e6:d6:dc:ff:dc:d6:e7:42:
         c9:4a:73:30:48:2c:b2:04:88:66:d9:7d:79:83:7d:68:ac:84:
         97:5d:6b:9f:1a:b0:53:a9:37:a6:3c:7c:ab:92:b9:44:20:22:
         fa:d7:f9:86:35:be:51:29:a4:3e:9d:8c:24:ab:af:36:51:71:
         0a:7c:95:0e:f8:b8:88:2a:24:72:c9:6d:7c:6c:97:d7:72:fe:
         57:36:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:56:15 2026 by rpki-client