Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          C5E4qIV25YdMXZoSuWZdfa4pNCqpxWESkhxjEK02y6k=
Subject key identifier:   22:97:EB:92:FE:84:53:B2:86:42:7F:2B:38:3C:19:0B:60:CC:29:8B
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       019F11C0AD9818473C2E1C3C5B44ECCCE2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          1999
Signing time:             Mon 29 Jun 2026 05:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:07 +0000
Files and hashes:         1: 1-lkGZhIuyoLc-xdILurzrx5fcUA.asa (hash: APoM994M8OUix1Q1A5wwIVp1ItNTgJQaQCCwGYmbLkI=)
                          2: Tn7Pc__H_TUg_32ubkt6NJOEaYg.asa (hash: AN7Na+UF8ieY7ZxLnQVVQNOsUynIOsLl+t6+Vp7i4NQ=)
                          3: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
                          4: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: H5qOxYmNBG+YuvltK7WQY3ZGjvFNmYO+AMiXaBKiJW4=)
                          5: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
                          6: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:ad:98:18:47:3c:2e:1c:3c:5b:44:ec:cc:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: Jun 29 05:01:07 2026 GMT
            Not After : Jun 30 05:01:07 2026 GMT
        Subject: CN=2297eb92fe8453b286427f2b383c190b60cc298b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:90:e1:4b:15:0f:62:88:a2:fa:06:45:f8:
                    01:5f:09:c6:f9:df:9b:dc:19:12:42:f2:5b:db:18:
                    90:ac:bd:7f:28:19:86:d2:67:08:e6:c8:69:fa:1f:
                    3a:ec:a7:84:b2:5d:f0:61:21:3a:29:c2:6c:45:13:
                    7d:9b:76:4c:2a:ec:3d:9c:67:54:09:ce:bf:36:ea:
                    ca:27:07:31:97:15:5b:af:a5:fc:98:b5:e4:88:3d:
                    c4:0d:28:6e:5d:5f:9f:87:3c:1c:f0:1e:93:ca:ac:
                    8f:b2:4a:74:2d:44:b6:63:29:5e:cc:87:25:9c:09:
                    dd:4d:44:a0:11:0e:1f:0c:3d:41:5d:b4:0c:15:74:
                    b8:45:1c:19:0a:f3:d5:2b:f6:c4:64:b4:16:74:75:
                    62:2a:87:99:1c:37:ac:51:6e:13:1e:48:cd:ec:c3:
                    6e:4f:87:80:e4:f5:f2:20:c3:74:ea:ee:d8:50:e8:
                    35:3e:32:d8:13:85:ce:cd:f3:c6:17:14:f5:6d:33:
                    95:89:ea:78:1f:26:cd:57:ad:cc:97:50:20:15:92:
                    4a:3f:b2:ab:ce:4b:5e:c2:22:44:07:58:84:49:fb:
                    00:1a:ba:fb:74:96:a6:76:ef:bf:8c:99:c1:44:26:
                    68:a6:29:b7:d1:09:eb:43:b1:eb:aa:1b:71:7a:56:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:EB:92:FE:84:53:B2:86:42:7F:2B:38:3C:19:0B:60:CC:29:8B
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:ab:7f:a8:ad:65:b1:a2:43:d9:6e:ae:32:8a:b9:b6:6f:
         ea:2f:6a:87:75:2a:78:56:4d:cf:85:42:5c:c4:37:28:f7:35:
         ce:06:ca:a5:da:8e:e4:79:32:54:23:f1:3b:02:12:fe:31:4d:
         3f:75:3a:e7:e0:b7:10:03:d1:cf:6c:c1:bf:09:48:7b:a4:97:
         92:ee:5c:a9:65:6d:c7:65:3c:23:49:3e:e4:92:11:7a:3d:21:
         65:d3:a0:bf:4d:54:2b:f0:64:39:6e:46:ee:20:b4:20:02:32:
         54:f1:12:56:30:36:c7:c0:84:bf:bc:ee:5c:73:1a:10:52:89:
         4f:42:78:16:1b:d8:d4:cb:60:73:b2:b1:98:9a:05:87:be:db:
         b1:2d:2c:e9:83:02:74:c3:33:cb:1e:36:01:76:da:9b:fb:68:
         e3:ae:bc:33:10:5d:cb:64:0e:28:14:4f:89:9a:64:93:f9:58:
         ce:5e:97:d6:cc:be:e5:60:56:39:62:25:bb:21:94:1a:8e:f8:
         e2:01:54:77:aa:c0:a5:76:dc:7a:fb:ec:50:80:60:28:47:06:
         fa:cf:0f:ca:9e:57:21:38:b3:6a:52:5c:38:e2:af:37:99:03:
         94:aa:f2:21:1d:52:d5:9b:26:e3:c1:9f:c0:6b:bc:c5:cf:a9:
         2c:4d:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:13 2026 by rpki-client