Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File:                     IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier:          O4TIYCzBcOmcg/EFbMoAPO4lhpN0Y5cG/T6hmz4PWf8=
Subject key identifier:   FD:B6:A8:A6:ED:32:F7:0F:7B:D3:45:E2:E5:88:2D:41:1C:A7:5A:ED
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer:       /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial:       019E1F482A233E229DCEB2B0ECFA9A0114C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number:          060D
Signing time:             Wed 13 May 2026 03:01:23 +0000
Manifest this update:     Wed 13 May 2026 03:01:23 +0000
Manifest next update:     Thu 14 May 2026 03:01:23 +0000
Files and hashes:         1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: kxRFLOiNXPUe+NLlfdWlhEE7WlBz6/IxQ9kYmIOK+1Q=)
                          2: wyv5vBa47PAsnMwdHNximNKw3Uk.roa (hash: 7tiep6Gb67cUku8Kl/ICbKHtHb5PWFafeqQ40Zk2Vqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:2a:23:3e:22:9d:ce:b2:b0:ec:fa:9a:01:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
        Validity
            Not Before: May 13 03:01:23 2026 GMT
            Not After : May 14 03:01:23 2026 GMT
        Subject: CN=fdb6a8a6ed32f70f7bd345e2e5882d411ca75aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:d3:20:9d:08:4a:de:09:f6:09:d8:a2:45:
                    46:1c:25:54:04:da:38:36:08:15:85:43:a1:fd:98:
                    28:d9:49:44:67:be:e8:de:34:31:1a:eb:85:cb:c4:
                    0b:dc:4f:5d:7a:5a:a1:71:2b:5a:3e:49:b7:68:3e:
                    2d:d0:6a:2b:f4:16:9c:bd:0c:dd:0c:f1:a9:ab:3b:
                    ac:04:11:b3:07:94:6e:c3:a4:75:02:a5:a2:52:16:
                    49:56:23:d4:c1:d9:38:71:d5:2c:13:23:0e:0c:27:
                    6f:71:14:2e:52:a6:59:58:9d:ec:8e:13:04:21:47:
                    28:32:72:2c:77:bb:4e:9d:9c:2f:1d:4a:78:4d:b7:
                    a4:ec:ea:91:97:e8:7a:02:fe:3d:80:6f:f5:48:d8:
                    2b:98:8a:8a:a6:19:38:bb:57:c9:b6:96:eb:d5:48:
                    1f:db:92:3f:10:30:84:22:c7:6c:1c:0f:0f:67:18:
                    30:fb:18:80:7a:60:4d:4a:2d:6b:d3:9c:08:19:9d:
                    2c:85:38:d2:a7:f6:1f:bd:ba:17:46:3f:7b:2a:52:
                    6e:12:29:00:d9:dc:95:d8:20:5f:1c:1d:ea:ad:5d:
                    c1:41:e3:a8:d3:a0:7f:cf:08:9d:d6:c8:c4:3f:16:
                    2d:2c:28:e5:1c:98:41:e4:f0:ee:a8:11:e0:4b:7e:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:A8:A6:ED:32:F7:0F:7B:D3:45:E2:E5:88:2D:41:1C:A7:5A:ED
            X509v3 Authority Key Identifier:
                keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:57:85:eb:5a:b0:9d:69:88:75:48:56:8a:1f:c0:d6:49:d0:
         e4:61:13:8d:20:32:66:24:6f:10:5e:fe:a8:22:35:83:7f:6a:
         fb:6d:24:a0:f3:82:1a:df:bb:a7:e9:7a:02:0a:de:0b:49:35:
         d3:d6:69:b7:67:93:cf:40:df:37:c4:ec:9b:d1:63:53:30:18:
         da:f9:29:11:ce:04:c5:5d:44:ea:a9:f8:f0:8b:85:f6:3a:eb:
         62:c0:a4:15:39:fd:51:30:88:c0:f4:21:e7:4f:15:83:11:91:
         dd:08:48:1b:4f:e6:ff:04:41:6e:7f:82:d3:2a:47:9f:ef:e0:
         c4:25:cc:72:d6:16:4d:49:be:8c:5b:66:5d:3f:b5:73:77:af:
         7c:b0:69:0b:d3:90:1b:f0:6a:7a:0f:1b:fb:7b:25:20:cc:70:
         05:37:d5:4b:e5:ca:a5:74:a1:74:e0:92:b6:47:e6:bf:b4:a0:
         a9:c6:4c:a2:58:6e:21:f5:6d:8f:d8:75:9b:47:65:ec:cc:c2:
         04:3f:cc:c5:85:95:37:e2:bf:c4:af:45:0a:08:39:23:94:e6:
         02:c4:4c:cc:d7:df:22:60:85:68:27:59:39:8a:4a:0a:10:89:
         6b:3f:b6:c2:d8:3a:38:f3:e9:19:27:c1:f1:3a:31:76:00:d1:
         5f:40:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:00 2026 by rpki-client