Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File:                     IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier:          IxdL2rNrz1KwE+qc59zcrQk5MUy44gYRi4hR6biZLXI=
Subject key identifier:   C1:66:A5:86:1F:D3:31:AB:74:DB:F1:9A:A7:FD:92:CA:51:83:95:3B
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       019FA116E01A0BADBF72CD5934DE183A2752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number:          15AE
Signing time:             Mon 27 Jul 2026 01:00:58 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:58 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:58 +0000
Files and hashes:         1: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=)
                          2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=)
                          3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=)
                          4: Aldb8rVQEYH7AIYKbirLccTqxfk.roa (hash: xKeQuE6N5Er4acIg7kKR9Q2RvuXmil18lO24CsbXiP0=)
                          5: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=)
                          6: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=)
                          7: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: KJ2BWa4ficn7PlpZWURObdORehVWg7AHXuJDD73erks=)
                          8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=)
                          9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=)
                          10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=)
                          11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=)
                          12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:e0:1a:0b:ad:bf:72:cd:59:34:de:18:3a:27:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Jul 27 01:00:58 2026 GMT
            Not After : Jul 28 01:00:58 2026 GMT
        Subject: CN=c166a5861fd331ab74dbf19aa7fd92ca5183953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:08:22:21:f6:d8:4f:6f:5e:98:00:f7:da:
                    91:d9:ac:78:3e:4c:b6:74:22:db:da:7b:3d:fa:98:
                    64:ed:56:4a:57:34:4c:e8:f1:51:2b:48:82:a4:f8:
                    84:94:2e:17:1f:fc:46:7b:44:b3:f7:28:5b:83:56:
                    ea:e1:e9:28:f0:26:12:74:a7:60:1d:3b:78:98:8a:
                    5f:fe:54:c5:bd:e6:c8:1a:ef:ca:82:a8:ff:c8:29:
                    2e:8c:18:c6:cb:74:36:3a:04:8d:88:c6:35:fd:fe:
                    a9:71:dc:b0:df:8a:1b:5e:df:a4:d0:44:14:48:89:
                    f9:16:34:4c:0c:f0:38:2c:11:1d:38:59:93:68:08:
                    39:e7:3f:9b:da:e3:0d:b7:a7:bf:14:20:68:a0:ae:
                    c9:1c:ef:aa:a7:00:7e:f9:ae:1a:ee:ec:49:c0:9f:
                    c3:2c:22:3e:0a:72:c9:06:7a:58:cb:67:cc:d9:47:
                    56:f0:97:34:78:37:dc:fd:d6:e7:98:f0:32:15:0e:
                    99:52:aa:10:79:5b:02:aa:5e:84:ca:8f:1e:b8:18:
                    d0:2c:44:f8:46:21:57:81:f8:87:58:fa:ba:7d:21:
                    94:7f:84:26:af:2f:f6:a3:07:ef:4d:35:4d:37:8c:
                    0b:5e:be:8f:1f:4c:31:e2:67:1f:52:a3:8f:68:65:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:A5:86:1F:D3:31:AB:74:DB:F1:9A:A7:FD:92:CA:51:83:95:3B
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:b7:65:8b:c2:12:1f:34:5f:ed:2f:3d:d4:c7:4c:a3:b9:
         8b:b0:05:94:a4:b7:13:9f:c6:d8:9d:91:a1:c8:3b:b0:57:53:
         bc:94:bd:f9:32:68:c0:c9:9d:6f:03:81:d3:ca:9c:fb:56:78:
         7e:de:a7:9e:19:86:ed:25:25:68:21:5e:03:18:01:37:e4:52:
         c7:28:a4:7f:21:70:5c:ba:c9:60:77:c7:ad:24:89:ad:47:53:
         ee:8a:2d:92:ea:4f:09:63:1b:4b:db:2e:74:8e:98:1d:75:df:
         84:3b:6a:17:87:7b:2a:ca:35:57:8d:d0:75:c5:4c:0f:7c:e4:
         7e:d5:b4:b4:dc:70:ae:dd:13:89:01:43:96:e6:d7:cc:1f:81:
         57:1d:76:5e:98:e7:68:1c:39:c1:77:9d:e3:3a:6d:14:e9:3b:
         23:b1:1e:c9:07:05:7f:7a:0f:2a:cd:70:c8:28:51:75:39:42:
         fd:9b:b3:49:a6:d1:ec:53:e5:f5:c9:4e:d9:c0:dc:fb:a4:d5:
         a6:f2:60:7d:73:3e:ac:77:61:2d:12:90:b9:ae:31:db:3d:38:
         50:57:a9:f7:d4:e3:d9:0f:e0:d3:08:86:b5:42:15:dd:4d:74:
         df:4e:48:91:f8:7d:4f:e1:98:3c:be:37:90:ae:1b:46:00:39:
         db:c8:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:49 2026 by rpki-client