Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File:                     i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier:          lZLMBvY6MPQVhY/xV0IHmocgv8XCbpdP3tXVHBb+o9U=
Subject key identifier:   26:BC:7C:81:9F:43:99:82:B9:F6:EA:50:E5:B4:AD:59:99:CF:F1:95
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer:       /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial:       019EC1B6EBABF381E4A68A98326168BAFC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number:          0460
Signing time:             Sat 13 Jun 2026 16:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:50 +0000
Files and hashes:         1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
                          2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: bnfYHQ/rKPkjmEUiB+xkMSpmjeXM6EmmxE3Xud+I3t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:eb:ab:f3:81:e4:a6:8a:98:32:61:68:ba:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
        Validity
            Not Before: Jun 13 16:00:50 2026 GMT
            Not After : Jun 14 16:00:50 2026 GMT
        Subject: CN=26bc7c819f439982b9f6ea50e5b4ad5999cff195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:39:e6:b0:43:4b:66:75:fb:8b:6f:90:57:
                    68:f1:a2:d0:71:6c:ec:38:2a:a8:e3:0d:bb:5b:e0:
                    d9:cf:82:7c:fa:77:54:e8:2b:01:30:4c:7f:13:91:
                    3c:99:55:db:26:34:d2:56:ee:72:cd:b4:ce:65:6a:
                    6f:25:d3:34:e7:50:3d:27:35:1a:e3:47:46:24:49:
                    f4:5e:a6:44:65:9e:4c:9d:9f:c1:9e:41:12:e0:4b:
                    61:50:1f:a8:ee:cf:fb:b5:ba:dd:25:b5:16:a1:f9:
                    27:1d:7c:f8:c5:df:15:4a:48:90:77:eb:d5:7c:63:
                    dc:ba:f3:06:d9:4c:b7:fa:4d:9b:f8:45:b9:d4:ff:
                    79:52:5c:5a:c4:5a:4a:4c:9c:e1:aa:83:e0:59:d3:
                    f9:ae:eb:f5:68:03:a1:7a:75:81:74:d5:2e:16:4e:
                    ac:96:ef:44:4f:32:63:ca:b4:93:da:11:2a:c7:63:
                    f1:a5:7c:bc:be:cb:14:6c:78:34:40:29:57:cb:e5:
                    99:30:1a:b7:73:43:3d:c8:2b:26:46:ce:35:f5:f3:
                    5a:f9:a1:33:91:df:bc:b2:25:2d:9e:72:14:9a:f3:
                    e1:bb:6b:51:87:87:f2:ef:fd:a4:66:75:12:97:b0:
                    21:fb:5c:bb:c3:6b:0a:4d:e8:91:a4:e3:0f:d2:07:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:7C:81:9F:43:99:82:B9:F6:EA:50:E5:B4:AD:59:99:CF:F1:95
            X509v3 Authority Key Identifier:
                keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1b:68:92:4d:fc:06:14:db:e3:45:53:4e:ab:e6:14:08:68:
         b8:51:2d:85:f2:55:9f:09:db:a8:9b:71:37:18:70:c0:89:cb:
         87:7a:fd:d5:e1:24:93:41:c2:e0:33:fd:20:fc:3e:02:d3:73:
         a5:e7:6e:31:00:3c:5f:06:bf:e0:eb:ef:68:84:a5:71:3d:9d:
         ec:17:6d:6a:36:c0:1a:62:ff:32:93:e1:39:75:27:d1:a6:66:
         ac:f9:d1:09:e5:ed:4b:47:af:4e:58:da:f0:ea:ab:fd:d8:b3:
         16:97:88:53:2c:68:70:e6:8f:11:b6:b0:26:35:df:59:73:3d:
         28:7e:d5:f3:0e:cf:6a:3c:75:f4:d9:95:5a:f3:e0:fe:e7:aa:
         a7:74:16:a6:0c:20:94:91:89:d9:70:f0:1a:eb:02:78:9f:d9:
         36:1f:11:0c:f2:da:d3:b9:76:ea:16:85:fc:d1:75:38:43:9b:
         e0:9d:4c:7c:dd:7f:60:86:28:cc:e1:33:ea:ff:10:cb:9d:fc:
         27:18:f0:24:33:7c:4f:bd:c1:fd:8e:fb:5a:d1:3c:23:e7:7b:
         3d:eb:a4:f8:e0:5b:d9:1e:99:bc:fd:50:40:74:15:3f:1a:1c:
         87:58:81:30:34:7b:b4:ff:42:d9:87:e8:4c:16:e1:e4:8b:6d:
         5a:ad:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:06 2026 by rpki-client