Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File:                     IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier:          BA29zGbMcasTwrqpFdayC6Mo4VN3W1JZ72tPBGlPxf8=
Subject key identifier:   1D:A2:06:87:36:1E:1A:43:88:51:CC:EA:F5:79:39:10:FC:2B:6C:6A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       019CE146A994E9ECDAD27629E0E2A8FE6301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number:          1440
Signing time:             Thu 12 Mar 2026 09:00:30 +0000
Manifest this update:     Thu 12 Mar 2026 09:00:30 +0000
Manifest next update:     Fri 13 Mar 2026 09:00:30 +0000
Files and hashes:         1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=)
                          2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=)
                          3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=)
                          4: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=)
                          5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=)
                          6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: oYpvxiP5WCyWnHNEPXbxy8IIJ3rHYIT7tHT2ZkZKmi4=)
                          7: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=)
                          8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=)
                          9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=)
                          10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=)
                          11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=)
                          12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:46:a9:94:e9:ec:da:d2:76:29:e0:e2:a8:fe:63:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Mar 12 09:00:30 2026 GMT
            Not After : Mar 13 09:00:30 2026 GMT
        Subject: CN=1da20687361e1a438851cceaf5793910fc2b6c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:1c:b9:1e:4a:f6:28:38:e2:d2:ac:00:84:
                    7f:ff:c1:a9:a1:3c:d8:de:d6:d4:07:e4:cf:c8:05:
                    ac:6b:16:8a:82:ee:d4:d3:34:10:68:aa:18:d6:34:
                    51:7c:1c:26:68:65:26:6f:87:57:0a:d0:f1:c7:24:
                    e5:b9:61:c4:88:35:ef:ad:59:c6:f8:2a:f9:f1:c5:
                    72:8c:fc:89:9d:87:64:cf:2a:fd:8c:25:a0:21:b6:
                    ed:90:e6:19:ce:07:14:2a:8d:c6:73:eb:9b:b6:4c:
                    fb:90:48:25:80:5e:92:15:0e:27:f5:2d:c8:55:94:
                    ee:0e:11:f4:bc:61:70:97:63:96:c1:a4:79:bc:70:
                    11:5e:00:e6:fc:6b:da:d5:1c:91:bc:4b:3f:ff:8a:
                    2a:e8:7a:e9:86:8f:d0:3c:f3:fd:fb:6f:7c:90:c7:
                    48:67:76:e2:98:a8:13:e1:4d:08:52:54:da:ec:79:
                    07:70:94:bd:41:3b:1b:53:3e:d1:6f:28:42:43:55:
                    42:c5:98:e2:56:dd:46:80:a6:54:5b:72:6a:9f:8d:
                    59:62:6c:df:f9:27:8d:69:22:b6:c9:78:e0:59:47:
                    aa:e6:5f:d7:8f:74:23:25:c7:4a:c2:6b:33:b1:f3:
                    2d:b3:0b:a4:e8:da:50:ca:bf:87:8c:ae:1e:1a:a1:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A2:06:87:36:1E:1A:43:88:51:CC:EA:F5:79:39:10:FC:2B:6C:6A
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:94:b4:10:5f:62:91:7a:6a:af:45:d4:30:a8:30:ee:d6:7d:
         86:a6:f4:e5:4c:4f:5f:da:12:7b:cd:74:06:ae:4d:52:a0:e6:
         fa:8a:de:04:59:38:ea:ba:9b:09:4e:76:08:72:df:99:35:ef:
         24:21:0a:92:76:4d:0c:c6:73:54:e8:5f:46:f7:87:29:6d:19:
         e3:42:af:74:eb:64:68:98:e6:08:c4:1b:9b:fc:9c:3d:64:99:
         b9:36:aa:c0:ff:42:6e:3a:ee:b8:f5:d9:5b:09:be:a6:a4:a8:
         bd:81:be:82:87:f4:68:b4:6c:6c:44:6f:d4:80:15:3a:70:45:
         a9:18:b9:26:0c:75:d4:02:53:52:05:4a:9c:d7:82:42:5e:1a:
         6b:5b:45:6f:ce:7a:2b:b9:36:8e:ad:a7:13:ea:c1:9d:f4:43:
         2e:0d:d7:aa:0a:e2:58:06:68:4a:fd:b7:2a:06:79:04:dd:3a:
         87:eb:58:c7:27:ba:62:8e:a3:90:05:97:38:19:60:6d:72:21:
         ed:87:9a:bb:9f:f7:ee:f3:95:d5:d3:d6:54:ec:1a:89:70:9a:
         a9:7a:03:f2:4f:f4:ff:ee:9b:cf:eb:a8:7d:6b:63:ab:05:23:
         86:4a:27:f4:98:e7:1b:bb:1c:93:a8:99:62:c1:80:42:01:c4:
         b3:e5:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:02:00 2026 by rpki-client