Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          WywPVMrSUQoFVptJGmLSGAUJB5PMHxkIu7uVA1Wyu6Q=
Subject key identifier:   48:C9:12:2C:A7:64:E0:F5:39:21:00:92:FA:71:6D:D8:89:E8:77:91
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       019F194387F7BDB4136D30230CFAB282344E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          1985
Signing time:             Tue 30 Jun 2026 16:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:23 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: WSvovmFTq8VCvDSql6/lAy/umPI80oB5BbDeoUQkcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:87:f7:bd:b4:13:6d:30:23:0c:fa:b2:82:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Jun 30 16:01:23 2026 GMT
            Not After : Jul  1 16:01:23 2026 GMT
        Subject: CN=48c9122ca764e0f539210092fa716dd889e87791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:91:9a:bd:b1:e4:98:08:1a:be:9b:c2:ed:
                    a0:2b:1f:e9:50:7c:a8:2f:5e:76:1f:d5:84:45:9a:
                    6e:cd:5d:7a:36:f2:fe:98:db:be:d7:1f:77:52:7d:
                    fb:72:80:51:54:6e:10:97:f2:5a:4f:a2:1e:09:bf:
                    74:ff:ae:40:c5:2d:69:8f:c2:2f:4c:39:8a:75:ed:
                    86:8b:84:b0:20:6a:d8:2b:c2:3b:96:f7:dc:96:3d:
                    93:f1:e6:5d:29:c8:59:97:aa:fc:a9:59:b5:0c:19:
                    00:59:02:53:2f:9a:78:9c:ba:5f:d0:cd:70:61:16:
                    5a:ae:7d:c4:60:d9:a8:c0:8b:56:5b:42:52:0d:e5:
                    9f:72:66:93:e7:c3:3e:74:20:78:97:88:87:61:9b:
                    8e:10:51:1e:80:41:b1:82:bc:ee:99:0a:99:dd:de:
                    3f:94:ec:cb:47:77:15:42:58:70:e1:21:e9:4f:6a:
                    92:9a:7d:d9:1c:be:3e:ef:74:77:86:f7:db:c3:fe:
                    0c:7b:d1:35:0f:66:49:bc:10:e1:16:d5:3e:d0:0d:
                    62:22:cc:8f:68:f8:59:18:af:1a:79:b1:2d:cd:86:
                    92:e5:f9:5f:a3:03:e2:cd:6d:a8:ba:5b:17:d4:89:
                    c7:b7:4b:03:6a:4b:6e:b4:db:b8:4b:36:00:9c:15:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:12:2C:A7:64:E0:F5:39:21:00:92:FA:71:6D:D8:89:E8:77:91
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:a9:df:14:79:28:9e:52:4f:99:c5:54:dd:cf:d4:11:c9:
         20:27:63:1e:15:80:a2:e7:ad:ff:97:40:d0:bb:19:5f:ec:4d:
         6a:71:25:70:5b:9e:74:6b:22:ee:ce:54:7c:39:13:5a:c4:db:
         f8:1c:40:35:df:ae:d2:6e:fa:86:a5:42:28:15:17:38:ff:90:
         53:01:88:80:ec:5f:03:30:c2:20:e0:b3:58:92:9d:c2:3c:16:
         31:b4:32:fb:25:98:a0:30:76:53:45:e8:38:bc:7f:ee:37:f3:
         f1:74:38:94:7f:8c:bf:e9:4c:b9:4c:49:ec:9f:ea:b5:06:96:
         f6:af:f2:11:43:7c:2d:bd:36:0d:1f:dd:05:24:a6:d6:dd:94:
         47:9f:0e:e4:28:96:e8:94:42:c4:9e:66:45:3d:20:16:2a:7a:
         14:43:4b:14:01:51:b3:ef:8a:41:4e:31:bf:96:17:9c:47:f5:
         5d:d1:22:34:ac:5b:f7:66:47:9f:e5:d9:ea:52:3e:56:95:26:
         14:44:d5:b2:27:05:06:e4:77:44:6c:43:c8:d1:5a:f8:5f:f0:
         3f:d6:4d:8f:66:04:45:7b:28:30:4d:4d:ae:7a:f5:c4:2e:ea:
         e2:af:e3:d0:f5:11:91:cc:fc:88:43:17:19:35:69:43:b2:be:
         2c:6e:99:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ4f3vbQTbTAjDPqygjROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl
NjYwMmUwHhcNMjYwNjMwMTYwMTIzWhcNMjYwNzAxMTYwMTIzWjAzMTEwLwYDVQQD
Eyg0OGM5MTIyY2E3NjRlMGY1MzkyMTAwOTJmYTcxNmRkODg5ZTg3NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01WRmr2x5JgIGr6bwu2gKx/pUHyo
L152H9WERZpuzV16NvL+mNu+1x93Un37coBRVG4Ql/JaT6IeCb90/65AxS1pj8Iv
TDmKde2Gi4SwIGrYK8I7lvfclj2T8eZdKchZl6r8qVm1DBkAWQJTL5p4nLpf0M1w
YRZarn3EYNmowItWW0JSDeWfcmaT58M+dCB4l4iHYZuOEFEegEGxgrzumQqZ3d4/
lOzLR3cVQlhw4SHpT2qSmn3ZHL4+73R3hvfbw/4Me9E1D2ZJvBDhFtU+0A1iIsyP
aPhZGK8aebEtzYaS5flfowPizW2oulsX1InHt0sDaktutNu4SzYAnBVKiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjJEiynZOD1OSEAkvpxbdiJ6HeRMB8GA1UdIwQY
MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt
MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl
LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE+p3xR5
KJ5ST5nFVN3P1BHJICdjHhWAouet/5dA0LsZX+xNanElcFuedGsi7s5UfDkTWsTb
+BxANd+u0m76hqVCKBUXOP+QUwGIgOxfAzDCIOCzWJKdwjwWMbQy+yWYoDB2U0Xo
OLx/7jfz8XQ4lH+Mv+lMuUxJ7J/qtQaW9q/yEUN8Lb02DR/dBSSm1t2UR58O5CiW
6JRCxJ5mRT0gFip6FENLFAFRs++KQU4xv5YXnEf1XdEiNKxb92ZHn+XZ6lI+VpUm
FETVsicFBuR3RGxDyNFa+F/wP9ZNj2YERXsoME1Nrnr1xC7q4q/j0PURkcz8iEMX
GTVpQ7K+LG6ZHA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:26 2026 by rpki-client