Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          tnPdIvQuTCK5WQB32BFQOtpeDMN4MLbM72C0+dvo+uY=
Subject key identifier:   BD:DA:48:5D:86:25:CF:E0:60:63:D8:2F:DA:79:72:55:18:5C:7E:B9
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019EC1801361D84F4794CF71774766206F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1985
Signing time:             Sat 13 Jun 2026 15:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:56 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: kt5PTSckAg53ySJn/UsyRvS5r8MNZy1gO1h6WPGHAIM=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=)
                          18: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          19: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          20: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          21: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          22: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          23: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=)
                          29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          30: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          31: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:13:61:d8:4f:47:94:cf:71:77:47:66:20:6f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Jun 13 15:00:56 2026 GMT
            Not After : Jun 14 15:00:56 2026 GMT
        Subject: CN=bdda485d8625cfe06063d82fda797255185c7eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:70:90:11:83:87:5f:bd:7a:38:10:b7:ca:
                    fd:f6:f7:e4:78:f7:f2:3a:87:60:51:bc:ce:a6:dd:
                    bf:c7:fe:f1:89:a5:c8:26:5a:57:df:af:96:63:c4:
                    ab:29:e4:13:bd:0e:cd:29:9f:b0:58:97:e9:d6:ad:
                    40:2b:4d:47:50:c0:47:fc:0a:d0:6c:4c:2d:49:77:
                    2d:a2:68:22:23:e8:ef:de:ab:ed:a4:ea:0a:78:37:
                    0a:2f:d4:65:d1:22:74:32:d4:e1:b6:c3:fa:83:af:
                    6a:11:1c:8e:93:02:44:a3:7d:c1:66:f6:49:b4:20:
                    f3:62:3b:1e:3b:08:f2:5f:77:79:38:d8:55:9e:95:
                    7f:42:a8:76:27:c0:3a:1e:d2:9b:6a:30:db:29:23:
                    52:a9:be:24:a9:2d:2b:67:c4:6e:86:b1:35:43:26:
                    35:98:40:ff:51:07:62:9a:6d:8c:94:a0:f2:aa:d9:
                    84:6e:f8:df:dc:3f:38:e3:23:12:70:84:1a:3d:6d:
                    9a:cf:40:1a:c7:e6:63:32:48:d1:89:63:b4:ce:4c:
                    7a:cf:f6:70:37:28:09:6c:7a:7b:b6:6d:cc:df:d8:
                    e2:15:da:3a:ca:93:1d:69:af:6d:ec:66:9e:9c:f9:
                    7c:11:3d:de:13:d4:f3:6e:ab:6c:fc:d3:05:5e:66:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:48:5D:86:25:CF:E0:60:63:D8:2F:DA:79:72:55:18:5C:7E:B9
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:50:4e:4a:b2:44:15:41:83:ba:47:0c:44:8f:63:22:6a:80:
         35:dc:90:78:ae:c3:b9:cc:9a:81:33:9e:df:e2:69:da:a3:59:
         54:54:36:8a:67:f2:de:58:a6:bd:b8:97:20:04:21:fc:46:aa:
         ab:1d:24:4e:d5:b4:be:09:1f:3e:90:e4:6a:b7:b8:f6:5a:cf:
         aa:a8:4c:16:d7:9b:5c:c1:3f:f4:91:b6:f8:f2:6b:d5:52:81:
         9d:2f:af:c0:b7:1a:0d:6e:5b:72:b1:42:0b:b4:8f:f4:3a:48:
         58:74:3e:33:76:e1:c2:f1:04:21:05:5a:6a:61:4d:c1:c5:e7:
         28:7c:d5:27:26:6c:a2:9f:94:49:46:d3:c5:c9:d5:bd:5a:67:
         03:f2:6d:00:17:f2:b0:df:c4:25:b9:ec:c2:c2:c9:da:a2:3c:
         d4:a2:c3:e5:0b:aa:d3:51:06:c8:c1:1f:59:fb:b5:d0:db:0d:
         e1:66:a4:80:89:f7:87:d7:96:37:29:4d:86:86:13:77:dc:c3:
         b8:f5:fd:6d:49:d5:9b:a3:f0:f1:df:de:2d:74:0c:80:9c:5a:
         0a:f5:0e:3a:45:6f:31:04:4a:cb:4a:85:91:91:f4:26:5e:57:
         81:54:3e:85:a6:d2:37:cd:3e:c2:da:00:79:81:34:af:e0:72:
         f4:7a:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:04 2026 by rpki-client