Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File:                     ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier:          PMnqkj8E1aZirkcb8VLh/16xwL69gZwnbT4Ocgh67z8=
Subject key identifier:   22:76:12:75:D2:0D:96:CE:12:C6:8D:FA:25:68:E1:15:75:4F:71:A1
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer:       /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial:       019EC0A3E21DAD3D86F733193B2E2084B249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number:          141A
Signing time:             Sat 13 Jun 2026 11:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:26 +0000
Files and hashes:         1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: gVTq+ZYMM0QfgiiWGD9zTb++fWZVSKtYfZXtGc3G5tU=)
                          2: nORtpphhmsOdW7M0kt-E7VXz5ZA.asa (hash: Gsvbu7vQ19XgfAYTDIH5aqw8y/k3IoDNxdMCCsjv9/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:e2:1d:ad:3d:86:f7:33:19:3b:2e:20:84:b2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
        Validity
            Not Before: Jun 13 11:00:26 2026 GMT
            Not After : Jun 14 11:00:26 2026 GMT
        Subject: CN=22761275d20d96ce12c68dfa2568e115754f71a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:83:40:70:f8:79:1e:b0:40:5e:d9:5b:1b:
                    69:29:37:cf:fa:93:d8:44:73:92:64:25:f1:16:e7:
                    17:ee:f2:c3:c9:d5:f1:02:3e:b7:98:f8:40:47:8d:
                    5e:91:69:ce:69:d6:44:5f:bd:90:cd:27:f4:40:fd:
                    65:07:d1:23:db:70:a2:f5:0e:ad:3e:e1:7f:9a:2c:
                    cb:33:ec:4a:f3:bd:22:a5:72:45:10:c9:8f:93:87:
                    d5:63:b6:9c:ff:ec:1d:2a:c6:40:3b:46:c7:46:3f:
                    62:2a:93:0a:63:4f:aa:32:7e:3b:40:4a:5e:e1:f1:
                    3a:f0:b5:ef:1b:09:81:38:4e:88:b4:6b:a5:b2:49:
                    8e:60:a2:e5:ce:1b:f7:bc:9c:9e:b6:70:5e:97:9e:
                    1b:85:7b:10:38:a3:48:d9:b6:57:a7:68:11:bc:6c:
                    2e:82:ce:c1:25:9e:e7:03:0e:f0:01:f6:13:de:26:
                    f0:86:d6:bc:cc:79:61:b0:66:d9:5c:6a:7e:de:14:
                    65:56:31:b8:8e:b9:3a:88:77:41:92:e2:66:dc:e2:
                    5e:58:71:72:d2:bf:08:9b:a5:50:3b:0e:9e:12:a1:
                    00:2e:89:3e:11:c7:32:98:97:3e:69:35:87:0b:a4:
                    32:9d:f9:e9:da:37:26:17:7d:29:c7:ad:ea:db:88:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:12:75:D2:0D:96:CE:12:C6:8D:FA:25:68:E1:15:75:4F:71:A1
            X509v3 Authority Key Identifier:
                keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:72:75:c7:6c:74:54:8c:ab:e3:e2:2c:39:d4:06:4d:5b:73:
         6a:09:3d:ba:1d:fe:23:ce:b5:9f:2d:b2:cf:8d:c9:15:97:97:
         0b:ff:6b:a1:19:88:d4:0a:73:bd:da:fa:b8:68:28:ad:06:c6:
         d4:0f:07:d5:67:b0:e0:c6:83:be:3b:c5:ae:6f:ba:88:9d:1e:
         26:25:f4:b6:d2:17:b0:1e:22:2f:26:dc:a9:ec:95:2a:b7:23:
         14:8f:ff:0b:ea:22:69:c2:03:8f:50:da:46:a4:fb:ba:d0:c6:
         8d:fd:7b:ac:8d:5f:88:97:50:98:5c:c7:58:6f:1f:b3:94:c7:
         43:00:fb:c4:0b:7c:ab:2e:c4:77:b3:ab:1f:24:3e:94:fc:db:
         3c:4d:34:3f:f2:7b:74:64:c9:8d:5f:e8:43:9a:98:63:42:63:
         76:a4:70:e5:2f:7a:5d:09:63:5d:81:3c:7f:25:a4:53:46:be:
         f2:9e:af:1d:38:90:8d:d6:d5:b5:34:ba:10:e2:55:fd:e8:e2:
         eb:c7:94:bf:e7:78:57:48:30:9f:ae:86:ae:6b:eb:34:a6:6b:
         d0:04:2c:93:19:85:78:90:53:a0:fe:c6:7d:6e:f9:aa:2a:26:
         a7:cb:c6:97:9b:51:3c:34:bc:63:2c:ce:8d:a3:c2:fc:84:f2:
         1b:71:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:46:06 2026 by rpki-client