Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          JfrwXRhKk+19QG0EL4Gk1wvOCIrnAQqqBKL7SSs1DSo=
Subject key identifier:   4D:F8:CA:C4:03:1B:FD:83:23:F7:3C:7A:E8:1A:5B:E3:2D:38:FE:4C
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       019EC292D2236EAF19D5CE6CCA30A34DC2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          1970
Signing time:             Sat 13 Jun 2026 20:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 20:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 20:01:02 +0000
Files and hashes:         1: 1-lkGZhIuyoLc-xdILurzrx5fcUA.asa (hash: APoM994M8OUix1Q1A5wwIVp1ItNTgJQaQCCwGYmbLkI=)
                          2: Tn7Pc__H_TUg_32ubkt6NJOEaYg.asa (hash: AN7Na+UF8ieY7ZxLnQVVQNOsUynIOsLl+t6+Vp7i4NQ=)
                          3: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
                          4: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: Mb/CcSMp6ywnqDGnuA1DOdNKHj+XTmFmCb6WcBorv3Q=)
                          5: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
                          6: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:d2:23:6e:af:19:d5:ce:6c:ca:30:a3:4d:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: Jun 13 20:01:02 2026 GMT
            Not After : Jun 14 20:01:02 2026 GMT
        Subject: CN=4df8cac4031bfd8323f73c7ae81a5be32d38fe4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:a8:a9:0e:b4:a6:5e:23:7b:12:eb:64:a5:
                    3b:47:4f:4f:c0:dd:16:ae:8f:d2:30:b9:57:c8:66:
                    69:38:bd:85:bd:4f:6d:1c:16:2b:3f:05:f8:f8:12:
                    29:32:14:f5:38:1b:d3:d1:d2:7c:8b:be:13:32:5a:
                    db:e3:29:45:a5:61:92:3b:9d:bd:8b:a8:b2:4f:c6:
                    15:9f:35:73:1f:df:40:3a:1a:64:2f:6e:e3:bb:67:
                    26:5c:27:cc:68:da:36:e2:4e:dc:5d:9a:85:48:56:
                    95:18:a8:f0:c7:e1:90:c2:0d:8f:bb:dc:18:cb:a2:
                    78:96:60:fc:69:f6:1b:de:0b:54:8d:2d:46:d6:26:
                    f8:fa:85:ea:5c:8a:07:a0:e4:30:d1:5f:36:83:bc:
                    e1:70:bb:0b:57:95:ee:f8:4e:6d:da:95:75:a8:0c:
                    35:64:13:f1:f1:4f:b5:eb:80:08:2e:93:5f:4f:ec:
                    ec:21:a7:ba:5e:c8:fd:31:13:f3:30:2a:6f:68:6b:
                    83:08:aa:1b:70:35:c4:a3:51:72:ae:83:8a:e8:66:
                    e9:5b:03:de:ee:99:ed:4d:82:71:6c:0d:80:8d:6e:
                    48:72:ec:3d:51:4c:05:22:3e:2f:87:de:8a:ac:34:
                    22:a9:6c:2c:c2:db:9f:fd:50:5e:a7:1c:bd:55:47:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F8:CA:C4:03:1B:FD:83:23:F7:3C:7A:E8:1A:5B:E3:2D:38:FE:4C
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:cf:e4:44:f5:83:59:5e:a8:4b:74:a9:4a:5e:a4:6f:1a:
         8d:bb:60:a0:bf:4f:e1:ae:30:7b:a1:fc:12:28:78:21:54:01:
         a0:bb:4a:63:95:21:83:e5:50:d7:53:e1:45:19:47:80:9f:97:
         71:37:d0:e7:ab:8b:cb:84:82:42:31:52:58:6d:3a:7e:1e:e3:
         22:6a:b0:ac:b5:7a:d1:31:9a:fb:37:41:9a:75:23:72:55:08:
         68:93:57:7e:82:63:8e:e7:b1:f2:5c:0f:5e:12:da:6a:7b:5b:
         c0:f1:1a:60:f0:18:2f:7b:51:f2:77:46:b2:d0:b6:6e:cc:4c:
         03:eb:27:08:31:ea:12:35:17:ae:8f:01:be:14:e8:5e:f6:8e:
         b5:5b:e3:00:5a:a9:e5:37:0a:d1:cd:cb:6c:b5:e4:3e:f7:7d:
         d2:27:ff:cf:0e:e2:fe:46:9d:db:e8:9a:76:4f:30:d3:36:04:
         7c:3d:99:3c:e9:60:e1:d7:2a:0b:08:bc:66:14:0d:4f:96:1f:
         0a:5f:dc:49:8a:0d:bb:01:9d:1b:3e:6f:c0:21:18:78:eb:4c:
         92:d3:f1:22:f7:58:5b:e2:ca:b1:13:af:38:47:31:01:20:ee:
         f8:63:9e:70:b0:89:d1:b1:11:06:13:01:ad:92:7e:48:6d:d0:
         d0:95:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:36:11 2026 by rpki-client