Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          7Sfh7xxWY0o5AY46omYETotBD48Zs4gC5czU5Obn8zc=
Subject key identifier:   D8:8C:01:70:DD:75:25:96:43:AF:80:08:53:13:DA:CE:BB:76:36:2C
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019E205A49F335BB0C086A4A13E6854572B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          064B
Signing time:             Wed 13 May 2026 08:00:48 +0000
Manifest this update:     Wed 13 May 2026 08:00:48 +0000
Manifest next update:     Thu 14 May 2026 08:00:48 +0000
Files and hashes:         1: 4GRqDQUSb-zxr8Uio1ztz9ttwpQ.roa (hash: ATHhAZBwTjYGOPvU16akA/fsoKv3w9kmqPeuvaUthH0=)
                          2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: 3SRoKEFfYV7J+oCTx0EhlISLdct08wzGOS22ZbziQ+s=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:49:f3:35:bb:0c:08:6a:4a:13:e6:85:45:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: May 13 08:00:48 2026 GMT
            Not After : May 14 08:00:48 2026 GMT
        Subject: CN=d88c0170dd75259643af80085313dacebb76362c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:15:49:e9:f8:cc:54:05:f4:ab:ef:c4:0c:
                    66:ab:b6:92:0a:1a:15:db:2a:f3:fe:a4:4a:88:67:
                    c8:4d:07:60:55:02:2c:d4:ff:9e:3b:0b:84:5d:bd:
                    23:bb:c2:d0:8e:43:a5:d1:62:ba:61:53:0d:bb:d4:
                    9b:fb:f9:9f:32:2b:ac:eb:f7:f3:01:57:a0:ad:99:
                    7c:c1:b0:96:4d:6a:dc:2c:9c:7f:cc:8d:96:6c:c2:
                    b7:b3:aa:1b:b3:c7:fa:9e:b5:c6:ff:c7:c7:2e:b3:
                    08:9f:be:5a:52:d0:54:81:8d:48:fe:08:93:b4:81:
                    1d:31:99:62:a0:4d:cc:45:84:8c:b5:e6:b7:99:5e:
                    a6:85:71:4a:5d:05:f1:79:8d:79:9b:3f:ad:02:ca:
                    5a:6e:1e:0e:75:aa:3f:6a:34:81:2b:8c:58:b5:28:
                    8e:ca:d0:3c:77:2f:6d:cc:ab:a8:04:a4:85:47:8d:
                    22:19:b2:87:de:53:75:d1:95:83:8d:5d:4b:1d:f8:
                    ec:d5:49:87:c6:ac:59:15:87:f7:a8:db:e9:24:00:
                    21:8a:f0:38:50:27:8e:d0:16:15:41:b9:5a:d3:29:
                    eb:2d:76:9e:bd:0c:d2:e8:10:c6:71:36:2b:04:8a:
                    ad:1f:7a:5f:fa:f7:35:b5:57:61:62:59:59:ba:f8:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8C:01:70:DD:75:25:96:43:AF:80:08:53:13:DA:CE:BB:76:36:2C
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:de:03:d2:a0:8e:e1:c8:65:73:f9:22:29:38:fb:e3:79:
         86:b7:e4:fe:2e:f4:c9:b0:1d:b6:03:b3:77:77:6f:81:2e:ab:
         1b:13:62:95:e8:4f:87:98:f0:de:d6:b6:b2:61:cf:7e:03:51:
         84:42:42:59:be:99:59:46:df:d8:fd:42:75:a1:1a:34:7d:b3:
         fa:1d:f8:8b:b4:26:1f:3c:af:25:08:86:5f:a0:fb:9a:69:28:
         ab:6f:f2:55:02:6b:94:c5:47:2f:96:ae:0c:8e:dc:9d:5a:56:
         37:7a:49:0c:3f:e4:06:79:6a:78:40:a8:af:16:74:31:41:51:
         c8:b5:ed:a6:87:8d:ce:75:b4:93:74:6b:71:0f:70:cb:53:e6:
         75:f8:fc:c5:e6:d2:2b:54:af:dc:ff:5c:b9:33:74:aa:ec:10:
         c9:ff:7d:7d:0a:d7:b6:b7:f7:89:3d:71:35:58:9e:e4:97:12:
         43:23:bb:c4:2d:60:c8:18:5f:7e:7b:c7:47:4b:55:a4:55:8d:
         39:54:f4:84:d2:da:82:38:b5:78:a8:0a:2a:e5:81:76:9a:ce:
         d7:c1:43:91:c2:ef:99:e4:da:88:67:a7:6b:a3:f2:42:59:84:
         5c:b6:84:e1:63:97:6e:13:c7:98:72:95:b7:92:9a:dc:a8:09:
         89:76:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:57 2026 by rpki-client