Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File:                     IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier:          LdFGkxXlBisTkLLXYO+4ALO1SkVmLAiiMjzcrH/QnC8=
Subject key identifier:   55:10:A1:4D:03:D6:5B:8D:81:1F:29:9D:69:0B:1D:62:67:C0:74:38
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer:       /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial:       019E9D05C8CF1970EEFEB5FDB169A345F24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number:          1946
Signing time:             Sat 06 Jun 2026 13:01:02 +0000
Manifest this update:     Sat 06 Jun 2026 13:01:02 +0000
Manifest next update:     Sun 07 Jun 2026 13:01:02 +0000
Files and hashes:         1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: vTvl/kTtVTcYVdL4/g6hkvbP5ufWCX0BT9jcBPspsig=)
                          2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:05:c8:cf:19:70:ee:fe:b5:fd:b1:69:a3:45:f2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
        Validity
            Not Before: Jun  6 13:01:02 2026 GMT
            Not After : Jun  7 13:01:02 2026 GMT
        Subject: CN=5510a14d03d65b8d811f299d690b1d6267c07438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:1b:c1:42:45:6d:82:d3:a4:fc:d2:e4:1d:
                    f3:e6:3b:4d:74:49:2e:35:49:20:fa:3a:b8:1a:7a:
                    38:c9:68:45:01:a2:63:0f:79:ab:9c:ee:6f:62:11:
                    6d:d5:be:0a:60:1a:d8:c5:3a:08:56:0b:68:3c:88:
                    f4:59:bd:87:56:e8:9f:1b:8c:f4:39:a7:29:92:2c:
                    ac:f8:5b:2c:2d:58:30:bc:51:de:35:74:3a:c2:3d:
                    20:95:99:c6:53:3d:5a:4a:48:e1:74:7c:8f:e4:4b:
                    6e:30:1b:4d:04:38:55:5d:5f:37:37:7c:7e:47:cc:
                    c1:ce:16:3d:0e:5e:6a:45:ec:11:06:ca:19:65:d0:
                    ee:98:11:95:16:4a:be:40:5f:6c:bf:cf:12:9c:13:
                    c1:1e:8f:60:28:0c:b4:3a:85:15:30:4d:15:4a:fe:
                    b3:94:81:a1:e4:21:ec:d7:cc:40:29:b8:cd:87:74:
                    6d:65:40:e8:c2:12:71:8e:59:b8:e0:61:6d:dd:08:
                    92:f9:b3:9d:76:64:50:4e:b5:1d:6a:0f:c1:07:0f:
                    0d:f2:13:d4:0f:69:c9:33:05:ca:87:3c:a9:a8:a5:
                    3f:02:42:03:99:7f:3d:ea:f6:6a:76:c6:d0:94:05:
                    3e:bb:3c:a6:f3:02:8c:7c:3b:57:7d:52:f0:d4:92:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:10:A1:4D:03:D6:5B:8D:81:1F:29:9D:69:0B:1D:62:67:C0:74:38
            X509v3 Authority Key Identifier:
                keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:14:47:16:0a:66:c7:f1:dd:ac:3e:14:1f:f1:c8:01:1c:
         a0:01:8f:ed:ac:32:7b:a6:1a:ff:c6:23:9d:7d:cf:de:da:7a:
         22:01:6e:cf:3c:0e:87:a5:cf:17:32:ff:9f:d7:ca:1a:18:1d:
         6e:ca:04:5a:cf:5b:d1:3a:fb:cf:bb:51:02:ba:ed:65:3d:e0:
         b0:2e:c5:38:33:75:95:0c:2c:49:f7:58:64:b6:2e:7e:de:19:
         b5:df:57:b6:de:c3:c8:8b:99:e5:63:24:e6:97:6e:d1:eb:5a:
         9b:2a:e1:66:c4:9a:42:7b:5c:a0:04:80:9b:b9:f7:3e:ed:de:
         23:b0:91:12:7d:bf:95:52:36:48:72:fa:9a:57:19:e0:2c:a0:
         24:10:9a:6d:7a:fe:c7:e1:96:43:e3:55:4f:8d:6e:ce:b0:02:
         2d:80:fb:c5:58:9e:f1:2e:25:98:aa:7e:05:94:3d:38:64:ed:
         38:9f:a9:e6:88:73:79:4a:0b:86:5c:bd:fb:1a:b6:fc:6e:03:
         18:08:ca:40:98:3f:8b:85:8c:dd:a1:94:3a:ab:f0:c2:f4:a7:
         93:89:09:03:e9:9d:43:29:25:f4:4a:ef:b7:9b:16:3e:4d:2f:
         fe:f6:8c:a4:38:d4:f4:5c:b0:a1:a9:b1:64:d8:50:64:3a:12:
         3f:7b:78:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dBcjPGXDu/rX9sWmjRfJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjYwNjA2MTMwMTAyWhcNMjYwNjA3MTMwMTAyWjAzMTEwLwYDVQQD
Eyg1NTEwYTE0ZDAzZDY1YjhkODExZjI5OWQ2OTBiMWQ2MjY3YzA3NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxIbwUJFbYLTpPzS5B3z5jtNdEku
NUkg+jq4Gno4yWhFAaJjD3mrnO5vYhFt1b4KYBrYxToIVgtoPIj0Wb2HVuifG4z0
Oacpkiys+FssLVgwvFHeNXQ6wj0glZnGUz1aSkjhdHyP5EtuMBtNBDhVXV83N3x+
R8zBzhY9Dl5qRewRBsoZZdDumBGVFkq+QF9sv88SnBPBHo9gKAy0OoUVME0VSv6z
lIGh5CHs18xAKbjNh3RtZUDowhJxjlm44GFt3QiS+bOddmRQTrUdag/BBw8N8hPU
D2nJMwXKhzypqKU/AkIDmX896vZqdsbQlAU+uzym8wKMfDtXfVLw1JJCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUQoU0D1luNgR8pnWkLHWJnwHQ4MB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxQURxYK
Zsfx3aw+FB/xyAEcoAGP7awye6Ya/8YjnX3P3tp6IgFuzzwOh6XPFzL/n9fKGhgd
bsoEWs9b0Tr7z7tRArrtZT3gsC7FODN1lQwsSfdYZLYuft4Ztd9Xtt7DyIuZ5WMk
5pdu0etamyrhZsSaQntcoASAm7n3Pu3eI7CREn2/lVI2SHL6mlcZ4CygJBCabXr+
x+GWQ+NVT41uzrACLYD7xVie8S4lmKp+BZQ9OGTtOJ+p5ohzeUoLhly9+xq2/G4D
GAjKQJg/i4WM3aGUOqvwwvSnk4kJA+mdQykl9Ervt5sWPk0v/vaMpDjU9Fywoamx
ZNhQZDoSP3t4DQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:57:48 2026 by rpki-client