Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File:                     iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier:          KB8TLlaFbiiW9m8/v7ryNo4d9szHXhHx3+1Bz/w0zcI=
Subject key identifier:   25:5C:1E:80:F5:87:5A:72:65:62:54:42:F5:51:53:A9:65:04:5F:DA
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer:       /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial:       019EC3A5BD3FADBBECD8CC1D104745173E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number:          044D
Signing time:             Sun 14 Jun 2026 01:01:19 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:19 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:19 +0000
Files and hashes:         1: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (hash: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw=)
                          2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: dLEqqKAAqeFDkZ2DSc6nJ5LK3gZVMR3T/B818Z5RmMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:bd:3f:ad:bb:ec:d8:cc:1d:10:47:45:17:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
        Validity
            Not Before: Jun 14 01:01:19 2026 GMT
            Not After : Jun 15 01:01:19 2026 GMT
        Subject: CN=255c1e80f5875a7265625442f55153a965045fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:11:9b:4e:d7:04:ae:3a:1e:4a:97:2f:96:
                    d2:ee:5f:ec:4b:54:80:bc:e4:03:b7:e7:07:04:08:
                    78:9c:8c:ba:ab:c8:26:cc:af:19:b3:cf:53:9e:1e:
                    99:13:0b:9c:78:7e:55:5f:f1:6a:8b:7b:d6:cb:13:
                    b6:9c:0a:58:c2:25:4a:5e:bf:0a:bb:93:7d:66:7d:
                    9f:9e:6c:50:dd:87:1f:51:83:02:18:50:a7:04:86:
                    bf:ee:d4:d8:bf:bf:64:a4:da:98:f6:7b:9b:94:fc:
                    7e:45:7f:69:c2:b9:42:27:47:56:3e:4c:52:3e:19:
                    40:c0:d7:b5:67:61:24:60:39:5b:b4:02:9f:a7:21:
                    95:d0:75:a8:dc:ef:71:43:b1:20:ab:84:f4:da:30:
                    a9:47:d6:f6:25:92:f0:53:61:e0:97:74:e0:88:af:
                    0a:14:12:b4:fd:62:38:cf:9e:12:1e:65:81:aa:48:
                    01:ea:90:45:b2:d7:40:bb:88:b3:70:42:73:6f:8f:
                    8b:d4:96:47:5c:44:d9:84:5e:37:bb:79:87:fd:15:
                    7d:67:15:7f:c8:f6:31:c0:9e:51:48:b1:f9:0f:84:
                    3a:d8:08:0c:5e:29:42:6b:24:9a:27:6c:0c:94:eb:
                    f0:15:97:a0:3a:0e:5f:7e:e1:2c:86:0e:75:0f:50:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:1E:80:F5:87:5A:72:65:62:54:42:F5:51:53:A9:65:04:5F:DA
            X509v3 Authority Key Identifier:
                keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:14:95:10:d9:d2:f1:49:c6:65:fa:c0:48:ef:d9:33:7f:
         b7:91:a5:83:16:c9:0d:49:60:11:99:5c:4a:b7:67:e1:be:f8:
         85:f2:4b:96:07:0a:44:51:ac:73:20:e5:d1:0d:cd:08:58:7c:
         95:c0:8a:1d:2c:09:81:d9:58:35:6a:c4:75:ff:b3:8d:26:d0:
         53:a3:47:97:21:1a:ce:dd:a3:85:ad:8d:2d:b6:ad:cc:60:82:
         b6:be:e4:aa:ad:1f:38:a5:44:7a:a9:16:a9:34:47:e0:61:f9:
         61:a8:0f:94:5f:20:cb:17:1f:db:50:eb:e3:1f:6a:a2:0a:07:
         d7:13:48:db:b1:7f:69:aa:37:22:fa:3f:b5:9a:9d:67:1b:fa:
         66:ea:23:32:70:cf:c8:01:9a:95:db:c4:5f:ea:fb:08:d2:b9:
         8c:10:e1:1b:ca:64:6c:e1:6f:e5:35:9c:5f:fd:db:30:62:32:
         db:cf:a4:a4:b9:3c:f5:9e:0e:09:3b:f3:cb:d6:c2:71:1d:13:
         93:b1:8e:6c:c8:e4:11:6b:9d:ff:75:11:e5:40:b3:7b:8c:91:
         13:d8:3e:6e:6e:e6:22:fc:8e:cd:69:83:35:0c:d5:a6:82:1c:
         de:5f:44:0e:16:fa:42:d9:ff:14:80:f8:32:c9:bb:53:03:f5:
         f4:da:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:40 2026 by rpki-client