Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File:                     iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier:          AhLnkXzada7DFW73ATCHoSHfUgugUeFQ2w8eQk6NAsk=
Subject key identifier:   28:C9:30:BD:4D:C4:7C:40:62:68:95:D5:71:6A:D7:40:C8:8F:08:7C
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer:       /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial:       019F189E87140FD70C036F4F198E8AF6A619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number:          124E
Signing time:             Tue 30 Jun 2026 13:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:10 +0000
Files and hashes:         1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
                          2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
                          3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
                          4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: qeB780sWuXesErMwYPzGMccKZ8O77LvBkGVH1cQl4zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:87:14:0f:d7:0c:03:6f:4f:19:8e:8a:f6:a6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
        Validity
            Not Before: Jun 30 13:01:10 2026 GMT
            Not After : Jul  1 13:01:10 2026 GMT
        Subject: CN=28c930bd4dc47c40626895d5716ad740c88f087c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:2f:c7:5c:41:22:37:d8:32:6b:15:4d:3c:
                    6b:eb:69:8e:47:da:9b:51:d6:12:13:13:42:91:55:
                    47:96:01:92:9e:50:27:53:8a:8f:5a:a7:30:0c:a0:
                    8b:f4:d6:05:05:7a:50:29:24:0a:ff:0d:3d:d6:6e:
                    81:1d:cc:bd:2e:92:29:3c:eb:37:8c:bc:b0:9e:85:
                    c0:20:bc:60:b1:8b:f2:df:ef:4d:c6:c6:52:96:42:
                    37:54:22:3a:85:5e:ce:ff:40:58:cd:e6:b0:a7:5e:
                    dd:93:22:9b:7a:f3:b6:9a:85:31:74:c5:24:f4:ed:
                    9c:3e:7f:19:14:d4:fe:eb:5d:45:5a:6f:c6:88:16:
                    9f:26:af:aa:83:e2:30:93:ca:a0:bf:41:2b:35:8d:
                    8b:14:41:9c:e4:94:df:0c:fc:1b:a1:c6:17:c5:d3:
                    df:69:85:82:69:96:39:c9:23:f0:6e:2c:23:11:a3:
                    ec:15:2c:1f:e1:c2:6b:34:a8:ae:f0:cd:73:80:0d:
                    ad:6a:04:fa:9b:30:db:90:71:61:45:43:52:4b:52:
                    82:9b:96:05:1a:1f:1d:76:1a:89:ca:7d:38:69:05:
                    5f:42:f9:db:6f:b1:a9:75:9c:7a:fe:cb:e9:68:6c:
                    7f:dd:55:6e:15:fb:80:25:35:d4:2a:bf:67:ca:06:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:30:BD:4D:C4:7C:40:62:68:95:D5:71:6A:D7:40:C8:8F:08:7C
            X509v3 Authority Key Identifier:
                keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d2:2f:dd:7f:0f:22:24:39:14:03:d7:0e:6e:62:76:d1:e9:
         44:12:15:b0:56:4c:f1:b1:df:ec:39:c2:1b:57:41:7a:5c:90:
         5b:39:00:60:c5:7b:4d:18:ac:5e:72:e5:c2:0b:79:63:49:1a:
         1d:0d:d1:20:e0:92:b9:8e:b7:ed:04:be:e5:01:01:89:b7:8d:
         87:1c:cb:84:89:ee:8d:60:a6:2b:e8:76:c6:5f:3b:fb:88:0b:
         e6:ee:53:80:06:94:42:bf:e7:72:28:2d:fe:af:b1:f5:50:cd:
         87:e3:ba:64:8c:6d:2c:ab:2b:65:0b:47:be:4f:1b:e0:6b:3d:
         08:79:bd:e0:f8:69:15:f8:8c:de:22:2a:e7:10:d0:f2:d1:71:
         06:80:b8:a3:da:6c:a1:f4:3f:c0:e4:1e:3a:7f:33:48:ae:96:
         2e:c2:53:18:7c:e0:84:da:16:86:35:d2:a8:75:34:55:bb:9e:
         b4:09:3e:cb:91:1d:22:26:80:ce:8e:62:1f:52:36:33:43:70:
         9e:3e:01:b3:73:46:08:b1:e9:4c:44:52:ea:84:0a:d1:24:99:
         8e:ea:6f:27:c0:71:b2:10:56:d4:03:91:b4:a6:bd:17:a1:e5:
         f7:02:65:77:c0:98:b9:c6:47:39:60:a8:d9:93:34:1d:e6:00:
         f1:fb:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:29 2026 by rpki-client