Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File:                     IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier:          GGDad7YBVgXtokdoE7no3E33GA/qxZCzCbD1ipAsCgE=
Subject key identifier:   B3:4A:13:D0:99:51:F8:B7:4B:87:19:9F:F4:B4:E1:80:87:9F:AF:72
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer:       /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial:       019EC11270FC3DC6E1EF388F4F7923F026FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number:          1539
Signing time:             Sat 13 Jun 2026 13:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:11 +0000
Files and hashes:         1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: xY1gtmsAVzG33E5Eg+v+yZwnQFqjlsgb1TKHlmpjZvA=)
                          2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:70:fc:3d:c6:e1:ef:38:8f:4f:79:23:f0:26:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
        Validity
            Not Before: Jun 13 13:01:11 2026 GMT
            Not After : Jun 14 13:01:11 2026 GMT
        Subject: CN=b34a13d09951f8b74b87199ff4b4e180879faf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:05:48:9f:c5:29:8c:3f:38:ed:ee:06:fe:
                    99:dd:04:d3:bf:9e:15:ac:d6:40:cf:e6:43:8b:77:
                    9d:96:4a:57:d4:8a:95:28:96:32:0f:a6:e7:17:87:
                    18:c2:33:92:a0:3b:1b:9b:46:31:e1:37:a8:ee:99:
                    1a:99:f1:99:32:22:12:23:ce:37:35:17:70:d4:1e:
                    f7:33:61:52:5e:88:fe:6a:9d:e6:b0:c2:5d:ee:7f:
                    a9:7d:2a:6c:a4:d9:7a:d3:8e:48:ca:4a:70:60:90:
                    23:b6:b2:af:de:f4:55:c0:de:92:aa:c6:ab:a5:49:
                    9e:02:e7:d3:81:be:3b:7c:c3:e6:f6:b6:16:06:33:
                    6c:f9:4b:20:c3:59:6c:62:28:3b:a1:c4:cf:e3:de:
                    a0:15:74:47:0a:90:9f:8b:38:a2:5e:bb:bc:d4:30:
                    02:87:d2:ec:9b:1d:c3:f0:c0:bf:d6:ac:96:22:8f:
                    b9:b9:17:f5:80:11:0f:9c:8d:c5:ef:8e:2e:b3:31:
                    6b:76:e0:bc:89:e8:04:20:dc:1f:eb:78:61:ba:2a:
                    8c:a3:7a:d2:ec:e6:a5:31:82:07:6b:5a:b4:76:e4:
                    e0:72:ef:ca:54:c6:0d:34:52:48:f7:d9:58:61:9a:
                    ad:81:8c:99:23:45:26:d2:29:24:56:b9:1f:a0:47:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:13:D0:99:51:F8:B7:4B:87:19:9F:F4:B4:E1:80:87:9F:AF:72
            X509v3 Authority Key Identifier:
                keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:21:c4:36:c7:e8:cf:51:10:9a:81:53:9c:de:41:85:a9:80:
         87:ca:1e:28:d6:5b:e9:1c:6a:f5:19:95:0c:20:c0:61:68:97:
         f4:b6:4a:d7:3e:9f:a3:51:3f:1f:87:fb:33:f5:22:e2:18:c1:
         b9:46:dc:b3:05:ed:a3:38:fd:2d:1c:fa:df:b4:93:38:c7:a5:
         03:7d:1c:c5:1a:7a:8b:a8:8a:1d:24:b9:3b:53:09:6d:c7:dc:
         b1:de:eb:9e:3b:53:5a:f8:31:41:c1:8b:39:a1:27:a9:b7:c7:
         50:37:13:99:e7:ff:62:fb:2c:99:c0:a4:7e:5e:ab:10:06:3f:
         a2:b0:67:22:f1:c7:ce:f6:77:79:d8:80:b6:df:2e:3b:ee:d0:
         66:36:50:40:21:dd:e9:e9:10:49:64:2c:de:a3:97:b5:6a:5e:
         aa:68:0d:6a:29:0e:5a:8c:64:6b:ae:76:ac:58:8b:1f:69:e7:
         a8:b7:ee:f6:d8:6a:9e:3f:b3:47:cd:b5:93:cf:97:0e:37:7e:
         96:6e:aa:b0:d2:fc:d7:87:7a:9c:e8:ea:b1:dc:e8:06:c8:52:
         af:b7:05:ea:3f:65:c3:3a:d6:97:8b:0b:66:da:2d:0c:c0:9a:
         0a:fb:ba:0e:83:c3:f2:5c:3f:74:aa:69:7c:05:28:3d:86:51:
         c6:a2:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:45 2026 by rpki-client