Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          P6Q7sKZcWrb9R0JF5tHTkrGsnoB0UZQAmR5J6Y9wE7M=
Subject key identifier:   B1:12:21:BE:05:FE:D0:2C:5B:5E:38:B4:7C:2D:A0:BA:CC:8F:B6:8F
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       019E8E6DED556AE727B4B614489BDDD59CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          1947
Signing time:             Wed 03 Jun 2026 17:00:29 +0000
Manifest this update:     Wed 03 Jun 2026 17:00:29 +0000
Manifest next update:     Thu 04 Jun 2026 17:00:29 +0000
Files and hashes:         1: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (hash: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws=)
                          2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: opN364F+iI/64ejsbAHHz1B69Nc2xWjBqOWwk9kLoiU=)
                          3: KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa (hash: /5lbXOjfh+/6SdaUgfM3MyOsJ/JBXtRsEqHn8qkyRLY=)
                          4: a_bZi_JF-htWi2WNdUEbarLHqjE.roa (hash: 2XF8puYADeEdrWHojv63xz3QjBToR9sg7lU4Wxe4W+4=)
                          5: fWjrIUWb0Uxvfjvry6nROOIzUx4.roa (hash: gTxk/gRGNSiFKqGiLyaw7PhZ38jlD9pkvVrGhe/pqVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:6d:ed:55:6a:e7:27:b4:b6:14:48:9b:dd:d5:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Jun  3 17:00:29 2026 GMT
            Not After : Jun  4 17:00:29 2026 GMT
        Subject: CN=b11221be05fed02c5b5e38b47c2da0bacc8fb68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:85:fb:cd:40:08:7c:5f:0d:95:c4:0c:a9:
                    65:7c:64:09:48:37:fc:5b:4e:58:34:3d:89:99:23:
                    a2:2b:ca:b9:09:9c:7a:66:91:eb:c5:d2:ee:c1:de:
                    cf:56:29:68:fd:a3:74:b5:08:32:4b:23:96:87:96:
                    01:ee:59:e3:f6:72:43:c5:f9:18:0e:81:37:e9:96:
                    d9:d4:c0:dd:3d:8a:f6:b8:9b:ca:ea:51:0b:6d:53:
                    ab:8a:79:46:a7:7d:42:5d:4e:24:fa:e0:ce:0c:c7:
                    54:b7:58:55:f5:45:e1:07:11:aa:fa:9a:76:b8:bf:
                    62:52:48:3e:32:f3:0e:0d:10:6a:f6:ba:43:b0:c2:
                    d3:3b:03:1b:10:59:0b:36:06:45:cf:29:f5:54:4c:
                    ce:21:94:f3:bc:36:1a:f6:aa:ac:3c:22:2d:c6:99:
                    54:d3:a0:db:ec:e7:6f:a1:eb:c0:d5:b0:1a:53:da:
                    d6:75:4b:84:6d:48:f7:60:c6:28:f6:91:40:19:e3:
                    26:47:94:0e:90:2b:50:11:de:93:a2:09:81:23:ae:
                    bc:a6:96:9a:ea:61:73:b9:ba:2d:d4:d1:cf:6e:26:
                    af:d3:3a:69:56:d7:0f:08:dd:53:0b:e7:9d:34:ac:
                    45:12:02:c7:c8:d8:2f:3a:52:0f:3f:f3:04:27:b1:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:21:BE:05:FE:D0:2C:5B:5E:38:B4:7C:2D:A0:BA:CC:8F:B6:8F
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a3:37:ca:52:76:a2:23:80:b2:ca:c0:a7:30:7f:b1:b7:df:
         12:83:0a:0b:70:e1:cf:b7:16:db:0b:3a:c9:42:3c:89:8d:b6:
         f6:b7:86:79:78:f5:f2:45:18:75:b5:98:f1:3e:cc:66:57:b3:
         1b:de:c4:b7:55:81:0a:b1:30:8d:8a:3c:bd:e9:c3:93:70:0d:
         cd:2e:57:4d:73:27:ab:76:7b:e8:4a:a2:22:e3:86:12:e5:03:
         b0:fb:eb:06:a6:4e:74:3b:9a:e2:f9:55:d4:5e:f7:86:9d:be:
         c2:47:81:e8:17:b4:60:ed:1a:6b:bd:6a:a3:77:e6:e6:d1:c9:
         9f:d8:28:51:bb:12:b3:0b:3e:a8:b2:e4:64:93:a7:02:8d:7e:
         6d:dd:7b:1f:b6:61:5d:aa:dd:84:37:b5:16:a9:06:56:40:e8:
         d0:cf:01:0f:3a:ae:a9:be:61:5d:f7:8c:bc:a4:3a:37:9e:7b:
         f9:2d:5e:7d:6e:72:48:62:1a:39:d7:bd:f5:ba:22:7e:b1:aa:
         d6:d1:16:34:d9:68:a1:e3:39:2c:d5:09:9e:35:8f:85:db:7b:
         2f:af:b6:0f:20:a3:01:0c:66:ef:a6:ab:67:0e:92:56:6a:68:
         19:d3:0d:37:86:13:a1:9b:42:27:d3:f8:62:e6:76:a6:ac:fd:
         b5:e2:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:09:05 2026 by rpki-client