Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          pskV+DH+mish7sexaffw3B/12ZXDxstITzvIteFqj0g=
Subject key identifier:   DB:90:AA:AE:46:83:00:F5:95:1E:55:40:8E:9C:A5:CB:A2:6C:26:8B
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       019EC0A4052AF147E95709ACC6932A3D0AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 11:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:35 +0000
Files and hashes:         1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
                          2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: /DLiL2n5a2H7usRwT5GwxUqk6zHCmZyO4Y+jKNwSYMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:05:2a:f1:47:e9:57:09:ac:c6:93:2a:3d:0a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: Jun 13 11:00:35 2026 GMT
            Not After : Jun 14 11:00:35 2026 GMT
        Subject: CN=db90aaae468300f5951e55408e9ca5cba26c268b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:77:7b:9a:01:ac:63:9b:52:78:68:20:46:
                    1c:5c:41:0c:88:89:16:91:57:87:cd:0b:e1:bb:3c:
                    48:a7:e3:2a:0f:74:27:3b:cb:70:af:8b:52:56:92:
                    4a:b8:6c:00:ab:bf:6d:cc:94:0f:b9:45:03:53:af:
                    85:15:4e:5a:75:18:31:20:90:76:9f:b3:94:4c:c2:
                    5a:a1:46:76:d0:13:ff:69:0c:8f:5d:13:55:1e:08:
                    7d:e4:60:c9:83:8e:d9:55:b6:f1:eb:e3:3c:7e:cf:
                    c7:68:44:04:b2:c4:10:24:8b:43:6d:32:98:dd:6f:
                    70:a0:4f:8d:e6:42:97:37:40:82:af:3c:d0:70:62:
                    fd:4a:95:8f:9e:8e:50:7f:a4:75:b3:ae:1f:72:c0:
                    4b:4e:9c:55:4e:ed:45:06:73:8a:73:cd:93:71:f3:
                    65:f2:4e:80:29:27:fc:62:23:bb:ac:d1:42:78:67:
                    4f:5e:70:4d:8b:0c:01:1d:6d:e9:33:c2:9a:ac:a0:
                    75:d6:5c:c4:39:89:07:0d:1d:51:a5:09:e6:14:82:
                    fd:5c:be:38:20:4b:9d:01:91:d9:cd:43:86:5f:d8:
                    0a:fc:09:8d:4d:f7:08:91:71:61:9b:42:a0:09:87:
                    3b:3b:c1:c2:e4:e3:d3:9c:86:0b:76:11:1f:2e:82:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:90:AA:AE:46:83:00:F5:95:1E:55:40:8E:9C:A5:CB:A2:6C:26:8B
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:46:87:fa:00:39:ca:7c:57:e1:79:8b:5b:e8:f5:a9:94:2b:
         49:9f:62:71:ad:91:29:d2:b4:f9:7b:61:65:75:d5:ba:1d:eb:
         21:be:19:d1:a1:ce:78:46:bc:b2:ba:f1:49:dd:8e:ec:f3:22:
         2e:24:36:07:8a:fc:3e:5e:21:de:e4:8f:5c:f2:d9:c8:42:d0:
         81:72:1d:f9:4d:cc:98:31:8a:a3:ac:5a:48:ef:81:2d:72:78:
         27:5a:54:fa:d6:10:30:06:f0:1c:77:86:1e:fa:38:30:bb:2f:
         5e:b8:db:9b:5d:b5:9f:6f:2f:35:28:e9:90:64:ac:57:ce:bb:
         ca:b3:33:70:66:bd:4f:a0:bd:7d:35:f3:09:3e:4b:8e:8b:68:
         4e:3f:2f:0a:8f:c7:9d:f5:c9:66:a7:0a:f0:4d:28:3f:7f:24:
         aa:6b:6f:11:23:fa:36:7c:0d:e7:38:59:03:1b:83:c8:31:1e:
         b9:f6:63:c1:31:43:6a:50:ca:f1:57:67:54:d4:03:5c:59:46:
         ac:c6:2c:6c:94:90:d1:e0:06:5e:1b:f0:74:52:a8:fc:79:0e:
         e2:26:a8:03:10:31:c7:e4:8d:68:ab:f5:76:bb:20:5b:74:db:
         2a:31:d3:bd:80:19:4b:9c:a9:2c:31:f8:7d:94:0d:da:88:0f:
         ab:c9:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:31 2026 by rpki-client