Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File:                     I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier:          vg5PrZqOtsUz/+eiwmmKsjWhdWLAgInWlFsJOud9ZTo=
Subject key identifier:   CA:26:B8:30:77:D3:1E:2A:2E:2C:38:6B:5B:56:DE:C1:51:32:C9:28
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer:       /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial:       019ED506D795ED14DED97ECAFEE6C149F7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 10:00:55 +0000
Manifest this update:     Wed 17 Jun 2026 10:00:55 +0000
Manifest next update:     Thu 18 Jun 2026 10:00:55 +0000
Files and hashes:         1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
                          2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: 3HLHf5Ml6H/ArTeZ6n3Z+xyc8t63Br7GcZD2izrOfqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:06:d7:95:ed:14:de:d9:7e:ca:fe:e6:c1:49:f7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
        Validity
            Not Before: Jun 17 10:00:55 2026 GMT
            Not After : Jun 18 10:00:55 2026 GMT
        Subject: CN=ca26b83077d31e2a2e2c386b5b56dec15132c928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:3e:51:4a:21:10:24:e4:ff:eb:66:0b:1e:
                    7c:e2:1c:fa:26:28:3d:f1:ba:b8:ff:05:e4:ee:24:
                    97:28:75:a1:30:7c:75:ec:0a:d4:49:22:8b:e3:32:
                    77:c4:29:d4:24:41:ed:8c:79:36:a3:ff:9f:53:25:
                    43:d2:62:57:56:68:8e:8b:84:09:07:c5:1c:37:fe:
                    15:6f:35:94:71:20:6d:83:16:87:f0:26:93:e0:e1:
                    c7:37:af:61:77:12:8a:d8:9b:39:b0:24:56:c0:51:
                    be:5a:a5:78:df:f3:64:d3:c0:2c:2d:8f:ea:66:16:
                    b1:83:ca:ef:c1:cb:36:6e:6b:9d:df:7c:f4:a5:58:
                    00:d1:1b:ea:16:b1:ce:6e:8e:5e:b0:ab:88:05:2d:
                    3d:0f:d4:1e:90:1c:c7:51:e8:c9:d0:72:36:2f:3e:
                    71:17:68:3e:19:2a:a1:ec:d3:8e:33:e3:0b:08:df:
                    a6:77:0b:24:45:8f:ed:89:2d:e0:6e:cd:d3:c7:33:
                    7e:bc:d6:e5:e2:86:c5:c7:fa:5e:4e:81:e0:f3:43:
                    e2:35:84:6e:86:0e:b2:ba:c1:87:fc:51:7b:c4:48:
                    0c:7f:1a:13:27:de:69:3a:57:e4:89:bc:b8:a0:ff:
                    b2:95:3b:bc:8c:8d:23:3e:60:06:19:e7:2f:e3:77:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:26:B8:30:77:D3:1E:2A:2E:2C:38:6B:5B:56:DE:C1:51:32:C9:28
            X509v3 Authority Key Identifier:
                keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:56:e1:55:c7:6c:64:68:8f:7e:d9:7a:26:0d:91:6f:d0:
         da:b0:d7:f1:31:f6:47:c6:50:af:73:e9:40:5a:5b:b2:3f:10:
         f3:69:42:33:e7:13:41:0a:4a:13:da:9a:ea:81:04:8a:60:d3:
         90:de:be:fc:2d:e8:d4:48:58:70:ba:ba:5f:dc:fe:35:bf:5e:
         f4:f3:c6:a9:8c:9f:31:9e:cf:0c:35:8d:08:69:b1:5e:20:8e:
         d4:ef:63:57:9e:8c:48:58:71:e6:a0:51:20:49:bc:a7:20:e7:
         81:53:26:c6:9d:d0:9d:b8:ff:ae:10:c8:28:db:e5:97:fc:bd:
         11:e8:27:19:27:ae:b0:f5:c5:49:4b:60:24:8e:53:99:83:6b:
         70:3e:eb:5c:24:fa:09:b0:dd:0e:3b:f9:e7:f1:63:fc:16:75:
         56:0e:82:f6:b3:d0:3f:b9:d0:55:37:d4:c7:5e:18:a9:ec:c3:
         8d:b3:4f:c6:ce:cd:2c:cb:bc:a3:13:f3:90:16:18:cb:bb:19:
         0b:92:66:e3:ed:2f:5f:be:f2:6e:0e:2d:1c:ef:ec:44:38:b2:
         fc:a6:80:03:ef:1b:79:89:cb:3c:80:28:ff:85:c7:a8:2c:8b:
         fa:bc:85:e4:20:99:61:36:e9:37:0f:c9:ea:4e:6b:c5:55:d1:
         04:03:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:33 2026 by rpki-client