Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          I2/8xlKXl5X36fCefDvG/ioHYTbpIIxkXyPaw9XQtOw=
Subject key identifier:   CB:4E:DF:3D:56:4B:DA:88:8B:47:E2:0D:BC:0F:AC:AF:82:82:80:F7
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       019EC22485E7CEF7B94FBD70E765466A3D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          0698
Signing time:             Sat 13 Jun 2026 18:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:33 +0000
Files and hashes:         1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: aB0KXywxvvU9gVRaXG1CdK5wn5AyZlUCvmUnelrjo6k=)
                          2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:85:e7:ce:f7:b9:4f:bd:70:e7:65:46:6a:3d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Jun 13 18:00:33 2026 GMT
            Not After : Jun 14 18:00:33 2026 GMT
        Subject: CN=cb4edf3d564bda888b47e20dbc0facaf828280f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:a6:1e:bb:14:68:c2:36:75:df:cc:fd:be:
                    d0:ad:3b:11:f5:7c:eb:c9:82:ea:3e:d3:56:63:bd:
                    cd:9c:87:0a:45:05:df:6c:15:df:16:93:0d:6d:90:
                    67:56:71:ad:2a:b2:64:88:ec:08:9b:f8:ae:47:d8:
                    96:e5:ce:ba:f2:bc:b9:cc:f9:cf:46:52:3f:c1:c5:
                    2e:4f:06:9f:1e:be:56:23:ec:28:63:2e:5d:90:fe:
                    04:1c:8a:09:30:15:14:c4:fa:fe:ef:de:67:cb:15:
                    a6:fc:55:96:43:d8:b4:7b:a0:9c:68:e7:52:40:0e:
                    27:47:14:16:32:18:cb:4a:d3:16:2f:d3:15:9f:c9:
                    61:5d:e8:e2:a3:7b:23:44:95:93:73:a5:5b:4e:7a:
                    02:b8:17:6e:f5:e8:15:9b:e1:7c:79:e2:f1:0c:84:
                    2f:0d:de:f2:6f:4b:5c:90:71:00:51:28:7f:8a:69:
                    7f:7d:f7:72:a3:1d:53:7f:98:99:8e:7d:af:06:e0:
                    d8:46:f1:e5:f5:0c:dd:36:bf:96:a1:7c:ec:2a:f1:
                    c9:dc:61:8b:2c:5e:46:f4:30:da:1a:b1:af:6b:10:
                    3b:57:65:2e:1b:f3:d3:a0:52:3e:2a:86:0f:73:bc:
                    95:5d:92:e2:9f:eb:62:6a:8c:db:ad:9c:39:c5:b9:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:DF:3D:56:4B:DA:88:8B:47:E2:0D:BC:0F:AC:AF:82:82:80:F7
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:86:a7:50:79:85:93:ec:e7:69:d6:f3:34:95:2b:79:2f:ee:
         5f:fb:12:f3:97:a8:1a:6e:4c:5b:5d:2a:ea:ef:79:6e:b2:d0:
         d9:ea:e9:1c:8b:62:1f:67:e0:0f:a7:7b:20:bd:62:30:10:5c:
         8c:ae:3e:7f:5b:87:78:a6:9f:4d:1b:70:f0:62:9d:6d:2e:1d:
         1d:4d:ee:9a:01:5d:1e:d1:9f:2a:60:fb:07:7a:82:f7:cd:0f:
         5d:ec:78:00:72:99:f1:f1:b6:8e:8e:69:64:45:bd:79:55:30:
         8d:4d:d1:c6:94:0d:91:aa:10:be:0d:97:6c:03:5b:97:6b:3d:
         25:7c:6f:68:40:9f:63:77:cf:7b:44:72:c5:f6:3e:e8:2b:5c:
         ec:3d:75:18:7f:68:2d:02:b5:f7:7e:1d:35:0d:90:06:18:da:
         38:04:43:3e:a1:7d:dc:b4:41:73:9d:5d:e4:3d:c8:d2:df:f5:
         9e:db:cc:8e:42:a1:e4:b5:5f:a9:69:06:4f:e4:78:87:c1:b8:
         e6:9a:ca:63:23:f1:c2:af:2f:1c:8d:a7:57:b3:cb:ac:23:8d:
         7a:18:ae:0f:12:3c:12:c3:8d:91:21:58:93:50:07:41:8d:b8:
         7c:0a:c2:52:bc:67:62:b1:c2:6e:a4:2c:41:56:03:f4:7f:f0:
         22:02:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:05 2026 by rpki-client