Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          Nz0osyvC9nhSXRNzbAMHmt7RJMo3uc1ZhRcwmV+fBWs=
Subject key identifier:   23:E0:1B:E9:C3:C7:5B:18:CA:E5:2B:A5:19:90:B0:E6:8B:64:64:CD
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019E1DC78EE244D94FA1620C8AA911A6EA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1930
Signing time:             Tue 12 May 2026 20:01:17 +0000
Manifest this update:     Tue 12 May 2026 20:01:17 +0000
Manifest next update:     Wed 13 May 2026 20:01:17 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: IaCrMQ9J0RMWfx227P0fP5dbPzKLBijbu9GN0DZ77Wk=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=)
                          18: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          19: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          20: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          21: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          22: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          23: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          24: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=)
                          25: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          26: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          27: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          28: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          30: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          31: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:8e:e2:44:d9:4f:a1:62:0c:8a:a9:11:a6:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: May 12 20:01:17 2026 GMT
            Not After : May 13 20:01:17 2026 GMT
        Subject: CN=23e01be9c3c75b18cae52ba51990b0e68b6464cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:96:b0:e0:08:dd:bc:22:f1:2d:ba:4a:88:
                    8d:87:25:c4:c9:be:b3:0e:99:92:8b:99:e9:67:72:
                    cd:75:b3:57:63:09:13:e0:4d:5f:16:41:b4:a6:3c:
                    2d:62:d8:1d:49:f5:fa:b8:db:eb:2b:c3:6c:01:0f:
                    2b:34:bb:86:37:4f:19:8e:c4:bf:f8:42:2e:9d:d6:
                    2b:60:b7:bc:98:11:8e:76:97:2b:ae:e5:15:60:97:
                    41:50:7c:63:ab:95:63:80:84:ba:65:df:46:3b:5f:
                    06:36:64:d0:d3:52:b5:44:86:fe:60:e7:c6:50:a3:
                    9b:03:14:71:f3:57:16:56:34:b1:f2:d9:21:88:11:
                    e8:0d:d6:25:5d:8b:2c:f7:0c:33:17:a8:91:73:92:
                    81:0b:93:ed:05:5a:a9:3b:25:e3:5e:d6:c0:e7:e9:
                    cb:93:e3:5b:ff:25:7b:e3:a0:c7:21:ae:01:bc:39:
                    6e:b4:52:d6:68:9a:4a:63:53:3e:86:4b:04:25:2a:
                    2a:9f:1e:8c:03:35:1b:8c:1b:31:f7:fd:28:4b:eb:
                    19:b6:44:18:b4:32:ae:61:f6:11:0f:04:12:d7:45:
                    00:50:9b:75:a6:85:35:ca:d7:53:15:4f:e1:46:01:
                    96:8f:e8:0a:cf:08:94:98:ad:f0:60:05:6a:a9:83:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E0:1B:E9:C3:C7:5B:18:CA:E5:2B:A5:19:90:B0:E6:8B:64:64:CD
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:0d:24:94:2c:cd:06:14:8e:b5:1a:a4:38:b2:bd:2d:d8:
         8a:1b:9c:d8:90:23:c7:90:89:18:a0:f5:03:8b:92:9c:df:db:
         e2:9d:c0:78:a1:9e:53:f3:16:04:3f:ac:f8:47:85:d6:16:77:
         97:15:f8:34:7b:08:1a:5f:2d:d2:7f:0e:ac:e8:d1:7f:64:30:
         b7:19:41:b6:c1:0c:1b:d6:ec:fb:65:ca:fb:4c:64:d5:ed:1d:
         86:16:30:d8:d5:ad:d6:4f:41:2a:9b:e7:54:63:74:d7:72:f6:
         ef:f5:40:b2:62:03:74:9c:e5:3d:02:1e:4b:37:2c:d3:12:de:
         cd:cf:85:2d:95:89:a1:62:09:64:87:0f:df:1c:cc:2e:82:f0:
         b0:d6:b9:d5:0f:16:c6:56:6d:3e:a2:d1:d7:19:91:86:fb:e0:
         26:20:ed:a1:25:9f:80:d0:29:88:ae:65:c8:a5:8d:67:3a:2a:
         22:48:52:d1:b1:d0:0e:0e:4f:e8:a0:83:d5:eb:e5:49:f2:d2:
         c1:37:68:c5:de:91:2f:af:9c:b9:03:3e:f4:7f:3b:d3:27:7e:
         5e:b3:af:4d:a4:41:34:d0:a7:73:cc:d2:ad:bc:d6:a2:af:a4:
         90:2c:d4:c9:62:45:c0:a1:5e:a1:45:13:04:f0:68:72:23:5f:
         60:82:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:55 2026 by rpki-client