Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          8VJyXQ0+k24RcZ8O6N4eCwlTqwCsVK+tLwvObmCRw5c=
Subject key identifier:   E8:53:63:86:A2:08:77:8E:95:FB:CF:EB:39:15:B8:E5:57:48:55:72
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019E1EA2C5A5F2BFD001C9E984DE1B693D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          024B
Signing time:             Wed 13 May 2026 00:00:44 +0000
Manifest this update:     Wed 13 May 2026 00:00:44 +0000
Manifest next update:     Thu 14 May 2026 00:00:44 +0000
Files and hashes:         1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
                          4: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
                          5: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: +elUgtNM8S4XPwqWGG952fFBKVIfJDEoDIVkkZxwr4M=)
                          6: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          7: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          8: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
                          9: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:c5:a5:f2:bf:d0:01:c9:e9:84:de:1b:69:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: May 13 00:00:44 2026 GMT
            Not After : May 14 00:00:44 2026 GMT
        Subject: CN=e8536386a208778e95fbcfeb3915b8e557485572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:4c:23:ac:ea:5c:fa:f8:7a:cd:fd:e2:eb:
                    54:64:a8:3f:01:da:d1:33:b5:5f:a4:f9:a6:05:d5:
                    31:0d:d5:8b:30:32:f4:cc:19:22:81:52:2a:e6:1e:
                    8c:46:3a:c2:e8:22:d0:33:fb:06:4e:fa:58:c9:69:
                    a9:1c:f5:61:f8:87:90:37:a7:13:16:0c:d1:0c:5e:
                    2b:1f:c8:22:36:85:a4:74:16:7f:ea:97:90:d4:41:
                    85:37:cc:09:2a:ae:dc:1c:5b:c8:26:56:c4:43:e3:
                    ae:2c:6e:3f:dc:ca:37:3d:2a:13:26:0a:88:5a:28:
                    25:38:82:38:ec:74:37:de:12:b7:72:63:d6:5f:3c:
                    dd:64:9a:c9:d1:86:0e:1d:ef:e9:32:86:52:f2:dd:
                    08:e5:cd:3c:b2:e1:6e:75:81:c6:a8:56:b7:af:fd:
                    a3:70:a6:ef:a9:cd:6e:4f:b3:3a:c2:aa:76:d0:af:
                    31:46:04:84:31:a1:17:61:c2:3d:52:1b:e7:9f:8d:
                    7d:23:2b:7f:ff:03:24:f1:84:a5:5d:66:ec:3f:c9:
                    b6:df:d0:a8:43:1f:b2:51:90:e7:46:7b:c9:a1:4c:
                    16:cc:9e:ee:0b:f7:57:0d:a2:ca:26:43:6c:65:b1:
                    44:fd:62:f6:3e:d2:6c:c1:e7:d0:4b:c5:4b:f6:a4:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:63:86:A2:08:77:8E:95:FB:CF:EB:39:15:B8:E5:57:48:55:72
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:62:e1:94:46:76:8e:6b:cd:6a:25:16:c2:81:c3:ba:39:13:
         14:ed:8a:09:8f:64:d7:3f:6a:68:b3:a8:84:0e:56:fc:8e:55:
         10:2f:4b:3b:70:21:06:53:69:dc:30:9a:24:c7:44:2e:5e:24:
         db:70:2c:0b:99:0a:8c:5b:11:f1:33:12:75:39:28:a5:8b:e5:
         68:bb:76:9e:13:c6:e3:2c:39:4e:ba:ed:e9:e0:c3:89:b3:ca:
         0e:2b:99:d8:e0:b1:c5:33:ab:75:9f:e1:f9:bb:9d:ee:98:2d:
         3b:a9:aa:3e:ac:37:2f:a1:40:39:e2:c5:81:71:9a:ee:1c:6d:
         ed:3b:91:24:30:37:62:85:26:41:1a:c0:31:61:fd:4f:8d:85:
         e7:98:c4:fa:f1:72:d4:76:4c:77:bd:ee:54:c7:30:9e:db:c5:
         1c:6f:a5:0a:3b:51:9b:65:39:ce:e6:e3:c7:c2:f2:44:bf:a9:
         a2:09:d4:a3:c1:1e:c3:96:a2:ac:46:e2:7d:32:88:9f:b7:70:
         7d:59:c9:f0:c1:5e:90:f3:d9:e8:43:68:0d:06:9c:47:1f:cf:
         58:02:fb:01:19:1f:49:1d:ef:14:6b:27:b7:59:8b:9a:7b:08:
         40:b0:27:da:2c:eb:37:df:66:e2:8a:57:00:50:b4:4a:06:09:
         3d:ae:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:22 2026 by rpki-client