Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File:                     iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier:          KX1Bmhc1Pg/PNEODP8HWbVmMXmVhMjGsodzpAwtjPw8=
Subject key identifier:   F9:8E:BF:83:43:87:65:C5:D2:26:80:94:C7:C2:E4:AC:C3:4B:21:BE
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer:       /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial:       019DFACDFBB524CE68793EBEAA6EF2825108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number:          051B
Signing time:             Wed 06 May 2026 01:01:36 +0000
Manifest this update:     Wed 06 May 2026 01:01:36 +0000
Manifest next update:     Thu 07 May 2026 01:01:36 +0000
Files and hashes:         1: 5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa (hash: wiv18quwyClsd4yVsJMpmHhiUfcPB5/Y1Yp9XFRzyRk=)
                          2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: amZSyVpTSgJYkFHLPIZzqYfNZdiE6HlWUgyMlIq/wNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fa:cd:fb:b5:24:ce:68:79:3e:be:aa:6e:f2:82:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
        Validity
            Not Before: May  6 01:01:36 2026 GMT
            Not After : May  7 01:01:36 2026 GMT
        Subject: CN=f98ebf83438765c5d2268094c7c2e4acc34b21be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:f5:10:5e:f0:e2:50:89:13:01:26:f3:d3:
                    e4:16:32:fc:83:e6:11:82:01:12:c1:75:be:75:6c:
                    47:99:c4:53:98:7b:c3:dd:17:97:32:2f:b1:e5:96:
                    ef:50:0b:84:7b:e7:ba:4a:db:c8:58:1d:04:f2:bd:
                    57:78:f5:9b:45:02:54:dd:e6:ef:5a:9a:27:04:1b:
                    85:1b:d7:e8:4b:fc:90:e3:bc:f6:a6:e3:0c:1d:0a:
                    92:2f:9b:29:33:aa:46:7c:0e:ee:b3:28:95:f7:2e:
                    0b:96:30:05:39:49:72:84:cd:7f:3f:79:c9:c1:61:
                    3d:82:52:b1:16:f5:1a:88:bb:1d:b7:63:fa:59:ef:
                    b0:de:cb:15:d0:15:f0:5d:3c:dc:37:ff:c4:b7:32:
                    0d:52:d6:95:74:94:57:ec:7b:47:75:27:3d:86:85:
                    d3:f7:2b:ac:0f:5d:4b:a9:56:03:5a:c6:0d:33:a4:
                    75:b5:25:14:d8:3e:52:cb:0a:d7:87:3e:68:aa:86:
                    0b:43:a7:87:5c:2d:2f:57:e9:ea:c0:25:ab:08:a9:
                    fe:81:af:29:91:15:ce:73:4e:e8:a1:19:35:0d:a2:
                    07:e0:32:b1:3d:c0:8c:88:ac:85:45:65:77:00:45:
                    d5:f8:7d:33:1d:2e:25:2a:02:ef:88:25:1b:c5:2c:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:BF:83:43:87:65:C5:D2:26:80:94:C7:C2:E4:AC:C3:4B:21:BE
            X509v3 Authority Key Identifier:
                keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ff:c1:d7:62:82:10:74:e5:b9:0b:65:c4:3b:29:da:02:8f:
         86:36:ad:7b:45:17:d3:68:2a:c9:49:ec:2b:ad:9d:ed:03:1c:
         8c:37:b4:09:67:9a:71:f0:4b:79:8e:b3:0b:ac:2f:d7:8e:fe:
         cb:56:60:90:64:81:cf:29:11:36:ec:28:2c:23:0a:ab:c2:e4:
         1b:08:3e:6d:66:e2:be:98:e2:9f:00:03:dd:52:d0:d2:fe:c5:
         00:b3:76:0d:01:86:b0:ed:f6:fa:1b:5b:82:9a:cd:5b:33:d3:
         a1:0d:cc:97:47:92:7d:55:b2:dc:d1:d2:07:5a:cc:ad:b0:a6:
         97:7b:12:7e:93:65:0d:fc:a1:9d:0e:8a:21:c4:53:29:dd:ed:
         6a:99:39:33:03:63:f2:fd:4d:01:47:e5:3f:c6:06:5f:19:6d:
         f9:85:ae:40:ff:01:6c:7b:ce:bc:5a:00:97:3e:ce:b8:03:ab:
         7d:e4:88:1e:41:61:c9:55:22:df:9c:69:39:14:48:ff:a2:33:
         6b:f4:ec:16:30:3f:f9:f0:6c:1d:5d:e7:e9:6c:57:04:82:ed:
         65:09:32:f0:9d:95:e4:61:a4:00:7b:4f:4b:76:db:45:00:29:
         ce:cb:8b:92:f0:fb:c4:0a:b3:f5:bf:be:52:20:ae:7f:9e:22:
         34:77:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:05:35 2026 by rpki-client