Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          E0b4lsyPye/O0jZTMyagEKs6qA/xE9wJMT6ug7VruRs=
Subject key identifier:   09:87:44:B4:4B:B1:65:39:1B:74:8F:73:26:C6:1B:78:A5:47:1F:61
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019F0AAC502995AF2249FB1D0BA7D55359A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          06C6
Signing time:             Sat 27 Jun 2026 20:01:32 +0000
Manifest this update:     Sat 27 Jun 2026 20:01:32 +0000
Manifest next update:     Sun 28 Jun 2026 20:01:32 +0000
Files and hashes:         1: 8GQama4kGymnU_xje0Yvb2zQH-o.roa (hash: NKYIKebNipUgc9YPaLXeciFwdApi4ubVtrOcZFCvldo=)
                          2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: AO68MhTOaDQ/A7zyqFm51hEGeXk9l3Hr8wBqY6hAxH8=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:ac:50:29:95:af:22:49:fb:1d:0b:a7:d5:53:59:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Jun 27 20:01:32 2026 GMT
            Not After : Jun 28 20:01:32 2026 GMT
        Subject: CN=098744b44bb165391b748f7326c61b78a5471f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:b0:20:7f:d3:29:4b:f4:4b:13:56:e2:b1:
                    0b:ba:ef:eb:1a:ec:15:f7:8f:a5:72:93:4d:d3:6d:
                    2f:a2:6e:b4:5c:04:6c:a2:69:d9:45:8d:a2:bb:1f:
                    cd:28:ff:98:d1:4d:63:1e:04:16:2f:09:01:c4:ea:
                    92:fa:bf:72:17:f4:62:9d:82:f3:be:50:2a:f5:df:
                    91:99:e1:6c:ad:c6:43:3f:76:e1:2d:77:90:3c:49:
                    b3:8b:c8:41:d2:13:0d:09:f6:53:62:58:1b:97:d0:
                    65:fa:d9:b8:63:73:7a:53:67:af:82:12:6e:5f:ce:
                    46:ca:c0:01:56:98:ce:b1:4b:df:62:43:7f:46:ce:
                    9e:c9:94:10:f2:8a:c6:23:37:57:93:36:70:d6:42:
                    b4:be:3e:4d:fb:45:98:b5:4e:6f:4c:56:f7:0b:45:
                    3e:3b:2a:82:b5:81:ce:dd:8d:91:87:71:bf:60:cd:
                    59:8c:24:7a:7f:4a:7c:93:a8:f0:49:04:7e:0f:c0:
                    f9:09:b9:78:df:e2:41:f5:9e:3a:ef:4f:ae:af:0b:
                    36:3b:bc:69:e0:d7:42:fb:a0:18:73:e0:80:7c:f3:
                    8f:1c:0c:a6:11:8e:7e:86:09:8e:e5:bd:42:a0:c6:
                    da:fb:bc:a9:8a:20:f3:fe:70:8d:ad:ca:10:a6:ad:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:44:B4:4B:B1:65:39:1B:74:8F:73:26:C6:1B:78:A5:47:1F:61
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:29:3b:7c:0e:5f:24:fe:7a:6f:f4:6f:89:ed:78:f1:b7:
         a4:a0:f1:fe:49:1a:d9:2a:f5:6e:b8:d6:5a:82:13:f4:b2:80:
         b4:80:e0:03:c8:cb:2d:ab:56:78:84:ef:8a:b7:14:66:3f:f6:
         20:af:31:9a:ad:8a:7f:d8:fa:79:ca:4f:e9:0e:e4:72:e8:a9:
         db:1c:1a:06:ed:98:c7:f8:72:c7:d8:7a:44:88:da:57:e0:dd:
         83:04:65:1f:7d:70:bd:86:78:23:7a:87:f6:37:49:38:9a:3c:
         11:db:2f:37:d9:97:ea:08:fe:a7:10:a9:f3:e5:54:53:15:cd:
         6b:7c:29:9d:e7:b4:68:ba:a2:6a:e1:8e:5c:e9:c5:35:a1:98:
         f6:26:1a:4e:2d:6c:58:0e:53:c3:98:aa:bb:5a:18:40:f4:d7:
         c7:12:44:75:93:7e:cf:9b:1f:f3:be:80:2f:15:c9:3c:7a:2d:
         cc:8e:72:c7:e7:a5:bc:89:5f:a1:35:d9:b1:35:26:f2:cb:fc:
         2a:85:e3:e5:d2:9c:c6:8c:6c:63:da:0a:ec:8a:f4:0b:ab:c1:
         a7:fb:7f:83:6f:35:4c:56:b5:9c:ff:9a:29:83:89:76:10:9c:
         f9:df:b8:bc:34:d2:0f:62:a1:29:24:1b:02:43:7f:9a:cf:6d:
         3d:ca:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:52:05 2026 by rpki-client