Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File:                     iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier:          F2WEYB4ysF8f9MVIo3ensqnKPGdyMApoWUhUGdLprUY=
Subject key identifier:   6D:A6:87:E8:4A:95:C1:0E:F2:19:AE:4F:E4:45:90:DA:ED:09:33:8B
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer:       /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial:       019E608336D1B917B6278B5202EB953D0D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number:          192A
Signing time:             Mon 25 May 2026 19:01:12 +0000
Manifest this update:     Mon 25 May 2026 19:01:12 +0000
Manifest next update:     Tue 26 May 2026 19:01:12 +0000
Files and hashes:         1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
                          2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 2VCnedIRoHZKb4badoJorTUaSAZz8fDYNh6p1H7KRdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:83:36:d1:b9:17:b6:27:8b:52:02:eb:95:3d:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
        Validity
            Not Before: May 25 19:01:12 2026 GMT
            Not After : May 26 19:01:12 2026 GMT
        Subject: CN=6da687e84a95c10ef219ae4fe44590daed09338b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:fe:91:e7:41:ee:2f:78:1f:22:b7:4a:6b:
                    13:48:9c:56:17:c8:0c:e9:d2:ad:63:d6:d1:d4:fe:
                    fc:64:59:b9:4e:f0:97:ab:1c:10:db:3f:c7:26:0b:
                    ec:1e:99:09:c9:36:75:7e:ee:be:fc:c2:d6:85:3d:
                    3a:15:a0:29:c8:3f:93:ef:f9:b2:52:58:f3:8c:03:
                    9e:2f:d6:4c:ce:09:12:6f:94:07:b0:8b:4b:91:c5:
                    94:d0:69:3f:16:ac:6f:d3:6b:d6:45:6e:57:4a:bd:
                    de:92:44:df:fa:68:96:b8:9b:82:9a:87:98:39:f0:
                    b0:6a:4b:06:39:d9:51:65:0a:5b:5f:4e:20:4f:aa:
                    a9:5c:2a:c5:8c:0b:ea:be:ff:bd:f3:f0:56:50:98:
                    08:09:98:f7:55:f7:2c:68:f2:de:45:df:74:00:87:
                    bb:91:c3:67:79:c1:85:1a:a2:3a:15:85:71:0d:e7:
                    3a:69:a7:2c:f3:e5:b5:d5:8c:bd:9b:10:8e:4c:cd:
                    d6:63:34:c9:24:e7:d7:3a:51:9b:8d:79:3f:cc:77:
                    7d:ce:df:d7:71:b8:66:0d:33:b8:a7:d6:65:5e:13:
                    85:bd:0f:3a:65:f2:6b:12:0b:2a:dc:cd:67:ac:49:
                    d5:3f:08:69:fa:ff:7e:04:60:b3:28:5a:5b:b0:fd:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:87:E8:4A:95:C1:0E:F2:19:AE:4F:E4:45:90:DA:ED:09:33:8B
            X509v3 Authority Key Identifier:
                keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4c:73:63:7d:20:76:e3:14:69:45:dd:3e:2b:9e:9b:1f:92:
         2f:fd:23:80:4e:ae:8d:cf:07:ef:ba:b0:c5:55:7c:c6:9e:5b:
         eb:9b:81:66:0e:cc:7e:63:5e:cd:9e:bb:4d:e1:36:b6:5f:65:
         d9:ae:4f:40:ef:53:53:84:d9:a1:12:ce:26:76:c9:04:25:05:
         66:a2:7a:0a:7f:6b:23:70:61:79:45:ce:63:50:12:75:74:d9:
         c0:47:cb:cb:14:09:f1:d5:9b:d3:a2:36:a0:eb:68:df:e2:ed:
         19:3d:5e:3e:33:19:35:13:c1:07:8c:97:03:bb:d8:10:32:0c:
         bd:fb:c9:e2:25:fc:7e:9f:49:67:78:07:5f:62:a9:36:d0:98:
         74:11:be:d2:c7:51:1a:55:a2:e2:9f:67:bc:e4:b8:88:63:5c:
         82:dc:71:80:f1:eb:50:3a:1c:e3:01:3f:40:1d:7c:33:dc:bd:
         17:a9:73:fa:14:62:d0:cc:b4:15:6a:6d:86:d4:e4:3d:a3:a5:
         12:a7:8b:b7:72:be:6b:c5:63:76:c2:bd:3d:3c:ed:20:6a:9b:
         9c:08:40:b1:1d:52:aa:38:f5:f6:7d:ad:d4:08:99:ea:98:d0:
         79:09:92:6c:65:9c:76:95:8c:b0:69:9f:0b:7e:ae:6f:4b:29:
         46:c4:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 00:06:26 2026 by rpki-client