Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          5XicgYgXhcCH1HgmsiaN7mw+O2TonR+LZ4YbX7cVNe4=
Subject key identifier:   FF:C9:6C:C6:56:44:2B:79:27:E6:8F:BE:A7:B7:73:AF:2D:1C:C9:5B
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       019E1CEB59142B940D4DFA384837F5A157DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          1934
Signing time:             Tue 12 May 2026 16:00:46 +0000
Manifest this update:     Tue 12 May 2026 16:00:46 +0000
Manifest next update:     Wed 13 May 2026 16:00:46 +0000
Files and hashes:         1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=)
                          2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=)
                          3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=)
                          4: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=)
                          5: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=)
                          6: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=)
                          7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: hvCvUoY4gxD3XV8+y3NnL65qNpJCWNv5BkOopp+rXKQ=)
                          8: IRfB3tESkmVjLc1Cib2G-VGIhLk.roa (hash: enLveUG1UyfNO0VTMWU5d8FMOrzTgnZOyQcblvKgYSc=)
                          9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=)
                          10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=)
                          11: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=)
                          12: hvCy6itlcbw0LZpoMyhJNOt9Jls.roa (hash: TpGAs/u5rXzQyRCzeXlTRIgwiiJyCQidA7eo1ei3vgY=)
                          13: qo7C66bX7nZgf8bu0aV4Y1bWXgg.roa (hash: NUZhkr2nCngDCv92miXKv65EN2+fNIqBrJSkpKYvV70=)
                          14: y2acnhD1Qle98ny8SvQjdRwfXUY.roa (hash: cxToiNZ+ktSM6/cxvq+vDOW9En/IhYo/LkdV4bJ3yr4=)
                          15: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=)
                          16: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:59:14:2b:94:0d:4d:fa:38:48:37:f5:a1:57:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: May 12 16:00:46 2026 GMT
            Not After : May 13 16:00:46 2026 GMT
        Subject: CN=ffc96cc656442b7927e68fbea7b773af2d1cc95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:c8:2e:32:ef:99:6d:d0:dd:5d:d7:54:c7:
                    0a:43:67:c0:91:29:bc:25:36:c0:ec:a1:a3:3d:9f:
                    6f:38:db:11:42:cd:47:d1:4a:a0:50:5e:dc:78:a9:
                    ff:a1:74:b3:c8:9f:4a:53:5d:1a:c7:08:01:17:12:
                    74:aa:76:ec:e8:96:49:86:7e:2b:66:e3:e3:66:3b:
                    7e:73:ba:47:83:66:79:1b:5a:c0:07:b5:1b:7f:21:
                    13:5d:61:c4:4f:85:06:86:98:ef:3a:c2:bb:8f:d7:
                    3b:04:1f:01:db:a9:87:0c:0a:01:60:18:07:5e:85:
                    66:dd:ca:80:c6:b7:c8:f0:12:20:1f:49:f4:6e:2e:
                    93:8d:25:93:cf:07:a2:6b:25:98:9c:91:b0:04:2f:
                    7c:d6:54:0d:35:42:3a:3f:74:39:63:20:fb:e5:d5:
                    95:d6:e1:d4:f9:78:ab:39:94:c9:23:60:f0:a4:1c:
                    c0:82:9f:85:20:94:07:88:e0:7d:46:a5:3b:00:a9:
                    f6:35:95:49:8f:46:8e:ec:c5:98:ac:f6:fe:97:18:
                    73:58:23:9c:70:5c:17:00:57:3d:ce:e3:12:ec:84:
                    74:4e:da:d1:1d:65:e4:43:3e:d5:a3:9a:4b:29:a7:
                    1b:e5:78:99:3d:e6:d2:33:44:8c:86:e7:bf:44:e7:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:6C:C6:56:44:2B:79:27:E6:8F:BE:A7:B7:73:AF:2D:1C:C9:5B
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:50:e4:95:a2:14:0a:37:fa:23:9b:e1:bd:fe:28:72:e0:8b:
         3d:ca:2b:07:a1:61:02:84:bb:18:40:04:2f:98:44:c3:98:25:
         01:0c:9f:e2:c8:0a:bc:a0:d4:b2:a7:67:9d:35:1b:9a:65:e4:
         6f:28:65:c9:15:1d:ab:e5:86:bd:cf:03:20:f7:27:e5:37:94:
         ed:9f:84:58:8d:6d:6c:59:6a:73:34:f0:ed:be:9e:5d:21:64:
         b0:48:68:64:61:7a:cd:f2:df:e6:c4:7a:27:42:91:a4:9b:b2:
         e9:af:b4:02:43:d5:e6:a8:99:ed:f3:fb:62:95:10:45:b4:29:
         9c:12:93:ec:eb:a1:a6:d5:17:03:68:1c:9e:52:3e:d8:f1:c8:
         d9:68:f6:42:29:dd:25:0c:8a:11:aa:c7:52:01:cc:4a:67:7e:
         15:8d:a3:ca:7c:1d:d7:cc:be:18:e1:20:08:7f:05:81:7d:54:
         83:09:8b:97:9d:45:01:1d:4c:b9:40:23:42:9f:96:06:2e:49:
         7b:6d:5e:eb:c9:29:06:e4:3c:d3:d4:0f:17:69:f4:88:35:cc:
         86:be:c5:19:30:8e:25:c9:1c:b6:99:03:db:4b:d0:c5:5c:a8:
         b0:cd:ca:a8:a6:6f:0b:df:bd:ec:28:f2:3d:37:44:8d:2e:5c:
         ba:9f:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:36 2026 by rpki-client