Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File:                     iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier:          9VFBqf0ufMUYU1OsAQNcsvCNkwqmIOVrYP5/9XZiuis=
Subject key identifier:   CA:DE:4F:68:F3:2E:2E:4E:BD:79:1A:3F:DB:4E:15:98:7E:74:10:6F
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer:       /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial:       019E1E6C9935F9EB54E9058A1B192896DF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number:          1704
Signing time:             Tue 12 May 2026 23:01:33 +0000
Manifest this update:     Tue 12 May 2026 23:01:33 +0000
Manifest next update:     Wed 13 May 2026 23:01:33 +0000
Files and hashes:         1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
                          2: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (hash: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM=)
                          3: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
                          4: fzC-AcNh2yOJ_5dGUvrvfw9vsok.roa (hash: tSTIZaYoRGt64j2os/R+JCN+/UAvU/awUqy9sBJwtAc=)
                          5: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: n0CQrRU417mp6yViad7ZgDRE/Q+NCfrvfnFLmF+C3A4=)
                          6: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (hash: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik=)
                          7: xpN5zraKiIDTkd918KKze_PLUR4.roa (hash: NFN27n7LM3oXIoVyd7siXk3IhtAWZMYT7ZhRr4tRlec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:99:35:f9:eb:54:e9:05:8a:1b:19:28:96:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
        Validity
            Not Before: May 12 23:01:33 2026 GMT
            Not After : May 13 23:01:33 2026 GMT
        Subject: CN=cade4f68f32e2e4ebd791a3fdb4e15987e74106f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:80:cd:52:34:88:d1:69:9c:83:e6:a9:e2:
                    8f:e7:1a:08:49:bf:be:42:e8:ce:1e:c4:49:5b:cc:
                    43:7c:26:0b:92:03:5d:5f:ae:ad:22:32:fc:ab:7a:
                    13:c8:a0:a7:fd:ac:16:d8:d7:58:6d:10:e2:1f:7d:
                    35:3c:6c:a4:f7:2e:56:db:c2:8f:68:68:29:39:99:
                    52:5d:4b:f6:bc:aa:c8:c9:4a:af:ea:b5:23:cb:b4:
                    0a:98:e2:84:53:34:21:50:61:7c:52:09:70:b4:a3:
                    88:f5:df:56:99:16:8b:1a:82:b8:b5:10:be:65:a2:
                    6e:2f:72:fd:6a:fa:66:75:82:e4:a9:5b:a0:a8:69:
                    5b:b9:60:14:10:b5:69:d6:e1:41:34:5b:0f:6d:14:
                    7b:5e:4d:8f:85:59:0d:85:1b:f0:40:be:de:1d:d8:
                    4f:69:98:98:c5:7a:66:52:94:20:43:0f:e9:cf:22:
                    fe:0d:34:c2:9b:3a:54:01:d0:89:2b:96:61:7d:5a:
                    60:0d:af:6b:d7:78:93:57:a3:26:e1:83:4d:11:26:
                    f7:9d:12:db:97:d6:6f:51:20:02:a3:0b:8e:81:cb:
                    76:80:95:5a:83:d5:4d:cf:8e:c7:12:e9:f6:9b:cd:
                    d6:62:64:12:3e:c0:1e:5b:06:77:54:f6:99:76:3b:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:4F:68:F3:2E:2E:4E:BD:79:1A:3F:DB:4E:15:98:7E:74:10:6F
            X509v3 Authority Key Identifier:
                keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:57:55:93:af:6c:8d:e3:4c:9e:6f:42:65:40:f4:05:92:15:
         79:ad:21:67:ad:66:77:52:41:95:d8:bd:24:f1:e0:03:29:2e:
         80:b0:fe:98:45:67:fc:04:cb:8a:fc:e7:63:25:88:c2:54:17:
         b0:e9:01:5c:f4:3f:13:94:ab:86:f6:38:bc:83:4f:92:55:32:
         69:2b:7c:44:a7:0b:5d:92:52:6a:68:05:d9:63:d4:d1:f1:57:
         f6:98:cc:81:dd:bf:12:1c:7a:3c:88:de:fa:ae:7b:dc:7b:fb:
         0b:6f:b3:1b:96:90:6a:0b:92:3c:d2:62:cd:06:96:93:30:d5:
         f3:84:2c:29:bb:99:54:16:b4:2e:29:ea:88:d8:f8:2e:c9:30:
         94:31:00:d9:a7:23:8b:aa:c7:4f:81:14:c5:75:e5:e5:df:ea:
         aa:6b:e8:1a:37:19:8d:e2:99:b6:b3:c9:17:72:01:b7:74:05:
         44:08:23:ba:ac:af:de:20:8c:8a:b5:58:c1:6a:8b:53:c7:50:
         8f:c2:39:e6:3a:17:52:8f:1f:c1:28:00:ef:7d:50:01:ce:f7:
         8e:de:5e:45:1f:15:63:8f:31:8d:82:dc:5c:80:b6:f4:27:47:
         cd:58:50:91:06:bd:29:58:a7:a7:d5:bd:39:59:74:0e:89:d6:
         13:3a:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:28 2026 by rpki-client