Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File:                     IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier:          Z9vTMbNbYkprbLOIkK2ApEqQwLUvu/f5dRMeu9OT8ww=
Subject key identifier:   F5:4C:59:62:9F:DC:CB:27:04:AD:AA:0D:C8:E2:9B:6A:76:73:7A:77
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       01A0E36332E6D17D5EB14DEFAF38A2DC4C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number:          15E7
Signing time:             Sun 27 Sep 2026 15:02:04 +0000
Manifest this update:     Sun 27 Sep 2026 15:02:04 +0000
Manifest next update:     Mon 28 Sep 2026 15:02:04 +0000
Files and hashes:         1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=)
                          2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=)
                          3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=)
                          4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=)
                          5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=)
                          6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: k6OPRboDd+GMsTJhIgHxRaRAXEznl6tvCIoyKzwlTFE=)
                          7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=)
                          8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=)
                          9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=)
                          10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=)
                          11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=)
                          12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=)
                          13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=)
                          14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=)
                          15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=)
                          16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=)
                          17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:63:32:e6:d1:7d:5e:b1:4d:ef:af:38:a2:dc:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Sep 27 15:02:04 2026 GMT
            Not After : Sep 28 15:02:04 2026 GMT
        Subject: CN=f54c59629fdccb2704adaa0dc8e29b6a76737a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:41:3b:af:fb:7f:f6:91:1e:40:55:7b:33:
                    0e:71:d2:f2:b5:5d:11:81:65:4d:cd:36:8a:80:f2:
                    1b:60:3e:97:d0:f0:8c:d7:ef:17:e6:29:c7:85:7a:
                    13:da:f8:26:fb:6f:8d:42:df:a8:be:73:99:7c:15:
                    5f:b4:11:4b:ea:6b:66:d3:6c:99:23:16:8b:0c:9c:
                    87:12:c0:ad:e8:11:f7:57:37:a4:72:a9:62:5c:69:
                    9a:ff:56:a4:ef:04:52:ed:73:be:10:7a:c5:85:a1:
                    f2:4b:41:ab:98:e4:6f:e9:98:9f:7c:5b:80:7f:89:
                    52:89:0a:db:ba:54:be:60:f3:0c:07:11:99:4b:fb:
                    9e:e6:b5:87:10:c7:dc:f0:1d:9a:ee:45:f2:e1:bf:
                    aa:87:34:bc:f9:35:25:a7:95:70:ca:49:0c:1a:0d:
                    c0:c8:47:a8:8c:48:a8:07:41:fe:cb:7d:77:ba:05:
                    11:d2:28:f6:84:e6:d0:de:b9:2f:95:7f:b5:18:09:
                    95:e0:80:28:e3:4e:e5:72:d9:03:02:b6:02:02:c0:
                    f0:65:d9:11:91:69:22:1c:2b:0b:ee:31:19:63:34:
                    85:e4:e5:1e:d1:6d:8a:76:1e:2e:46:cc:99:1b:18:
                    ef:9a:c8:9d:98:86:25:b4:1e:ab:04:2b:aa:55:28:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:59:62:9F:DC:CB:27:04:AD:AA:0D:C8:E2:9B:6A:76:73:7A:77
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:02:1d:f9:eb:8e:86:24:0d:f4:8f:8a:c5:54:50:c0:a6:
         8e:5f:f8:c4:3b:51:5e:6b:0e:da:0e:70:c1:89:ca:e1:b5:87:
         a9:a6:1e:33:ed:1b:d5:1c:ce:34:c1:94:b7:59:0a:01:67:cd:
         a3:29:69:d8:2b:97:35:61:8d:63:21:9d:c9:25:f4:cf:d2:2f:
         c0:89:0c:96:b6:49:a1:a7:87:a5:c3:35:cb:6e:68:df:86:6d:
         5f:86:28:1b:d2:62:bf:42:43:6e:97:29:51:87:c5:ab:16:9f:
         c3:26:e1:00:1d:0d:ab:0e:bc:79:00:e5:da:0a:4f:73:a5:38:
         79:3b:6e:31:1a:77:e4:9e:0a:92:0f:1d:e9:3a:e9:22:d6:39:
         48:ae:22:1d:46:25:47:fb:80:6a:90:3d:72:09:29:bd:f4:8d:
         5f:93:bc:a1:a0:c1:67:2f:a5:90:3f:bd:c0:f1:71:50:7a:2b:
         43:e8:27:ee:20:79:9d:fe:cd:98:b2:9a:5e:6f:1e:bc:ee:0a:
         fb:ed:ce:27:05:17:24:0a:c8:dc:3a:9a:1f:cb:2a:2a:61:5c:
         57:bf:ee:50:58:f0:8e:fc:40:ab:a1:4b:00:4d:aa:4e:c6:a3:
         82:14:06:85:2b:34:01:71:24:e7:aa:5d:a6:37:07:35:8a:de:
         55:34:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:30:42 2026 by rpki-client