Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File:                     Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier:          gi3KJLA0+ihsCBP+kmHBM/1nVYS1bd3KppCFpC62JNA=
Subject key identifier:   51:24:46:50:7F:51:D1:C8:62:EE:BB:78:F8:64:46:29:9F:B0:0E:93
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       019EC1B7641646629E714780E978DAEDBB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 16:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:21 +0000
Files and hashes:         1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
                          2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
                          3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: 9Lx7FyrvSPiadnrQsZiv7N/9XoPnyRQ2vRRfin31olc=)
                          4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:64:16:46:62:9e:71:47:80:e9:78:da:ed:bb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Jun 13 16:01:21 2026 GMT
            Not After : Jun 14 16:01:21 2026 GMT
        Subject: CN=512446507f51d1c862eebb78f86446299fb00e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:34:de:97:d5:19:a6:77:aa:e5:e8:cf:d0:
                    48:73:73:1d:e0:b6:26:eb:0c:4f:a2:07:f5:d1:fc:
                    19:94:3a:c9:fc:d7:fa:ad:ae:b0:7e:2a:21:fb:e3:
                    42:bc:d9:1c:67:05:93:3d:0b:cf:a5:a9:10:87:5f:
                    40:ce:60:91:3a:fa:0d:07:5c:c8:7c:d7:52:93:0c:
                    bf:6c:8d:27:c5:32:ce:36:80:43:99:4b:95:89:df:
                    6a:51:d2:2b:5f:e1:63:4b:e3:8c:e9:d8:29:a5:71:
                    b4:4f:34:22:70:66:75:f4:8f:e1:12:c3:ca:f5:43:
                    c0:2d:79:8f:ba:e6:32:5a:d0:e1:10:27:5d:cf:ff:
                    cf:39:80:26:e6:19:ba:7d:72:8c:b1:58:33:f3:26:
                    e1:a1:21:11:f1:12:0a:35:79:be:31:8e:aa:e8:0e:
                    1f:1e:c2:9c:84:04:94:9a:69:b4:1c:64:d7:58:35:
                    1d:b2:d5:5d:b8:0f:9f:a8:12:a6:9d:73:6f:ab:cf:
                    9b:57:cf:ee:26:07:74:ee:11:0f:01:c8:92:70:10:
                    89:d3:fb:9c:42:3e:fa:c2:5e:19:fa:3c:1c:ef:cb:
                    90:db:b5:df:34:1d:a6:1b:90:89:2c:26:5c:05:88:
                    27:36:dd:4a:13:d3:ad:03:5c:fa:f4:c7:a5:44:f0:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:46:50:7F:51:D1:C8:62:EE:BB:78:F8:64:46:29:9F:B0:0E:93
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:31:b9:9a:2e:0c:91:4e:80:62:3f:f7:b4:3b:ce:52:35:
         20:24:59:ad:87:62:4b:d3:6d:c9:42:18:3c:c0:46:8e:d4:9b:
         03:bd:39:26:26:41:c8:68:53:b4:54:34:40:e8:91:e6:a8:67:
         6c:5e:c2:0c:b4:92:91:a8:9d:c9:28:37:ca:75:3f:d2:df:8a:
         57:4b:04:be:e8:af:93:73:27:ff:7e:28:d2:3b:11:a5:b3:c5:
         8f:d5:2c:0c:a6:4d:2c:a3:4c:ad:85:25:d4:61:14:82:ad:a5:
         66:5e:06:d3:d4:e5:91:ed:5f:78:ba:8d:5f:87:a8:7a:6a:57:
         e6:11:9b:8d:35:14:9d:01:88:5d:dc:b1:75:e4:39:a7:89:cb:
         63:a9:61:7f:21:68:94:df:6c:70:75:9d:2e:cc:ac:16:c5:35:
         b2:d0:f0:01:4d:84:1a:3b:61:b2:04:2b:32:66:52:be:1b:38:
         b5:f9:c1:42:97:d6:f7:f2:94:ae:92:27:91:68:9f:82:2f:51:
         d2:a9:ff:b8:20:f9:69:e8:17:bb:32:0c:84:f3:7d:0d:35:61:
         67:9b:ec:e0:1d:72:60:86:82:ee:18:59:f6:7b:35:81:79:07:
         40:f5:65:8e:ae:8b:ca:53:36:29:19:d2:b3:08:a8:bb:8b:02:
         fc:2c:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:17 2026 by rpki-client