Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          kZnSgtBICqh4cVWi0/wv/ZTSIwQfhtMFobArppzOiQY=
Subject key identifier:   F1:1F:F4:2F:75:86:E2:3B:B3:14:2A:4E:57:D9:AC:39:AA:E8:FA:85
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019E1E6C1279A68D22E23909A6B6A11DA06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          064A
Signing time:             Tue 12 May 2026 23:00:59 +0000
Manifest this update:     Tue 12 May 2026 23:00:59 +0000
Manifest next update:     Wed 13 May 2026 23:00:59 +0000
Files and hashes:         1: 4GRqDQUSb-zxr8Uio1ztz9ttwpQ.roa (hash: ATHhAZBwTjYGOPvU16akA/fsoKv3w9kmqPeuvaUthH0=)
                          2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: qU2X7LWS3g7fYsbmTdUXZR2ObRVMWx432v9BBy/YzO8=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:12:79:a6:8d:22:e2:39:09:a6:b6:a1:1d:a0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: May 12 23:00:59 2026 GMT
            Not After : May 13 23:00:59 2026 GMT
        Subject: CN=f11ff42f7586e23bb3142a4e57d9ac39aae8fa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:a1:d7:be:98:cb:75:d1:c2:54:5e:77:fc:
                    aa:ab:e6:8c:24:a6:c7:06:f5:1b:95:ad:09:29:50:
                    a7:f3:85:97:84:6a:66:b5:37:0b:51:a1:d9:87:ad:
                    9e:6b:71:8f:b2:2b:9e:bb:8c:38:0e:06:05:e1:c3:
                    a5:2d:d2:04:9a:3a:77:63:b4:3c:9c:ce:cd:0d:bd:
                    26:43:8c:70:81:51:7a:3d:a4:15:0c:69:8b:c4:33:
                    3f:1c:36:3b:37:de:d3:a1:1d:91:49:70:33:c1:15:
                    47:53:d8:a5:74:18:c1:e8:18:8c:9c:5b:14:82:bf:
                    ab:a2:a0:43:52:f4:48:33:f2:a1:13:57:6b:0c:75:
                    0c:9a:8a:60:73:22:cd:34:f0:5c:aa:75:0a:9a:ae:
                    04:c9:99:be:48:42:bb:8a:59:f5:db:f2:7e:a6:ad:
                    81:1c:9f:a5:65:35:62:ae:bd:d2:da:65:fc:33:8b:
                    bf:d7:00:dc:8f:9e:7f:06:91:c0:47:86:a1:22:20:
                    1e:cb:6b:d9:94:79:c0:41:d1:c1:a7:1a:3d:46:57:
                    33:e4:e6:03:d6:c9:a5:44:65:1a:51:5e:a2:72:1a:
                    a5:a0:d4:d8:98:4c:6f:8e:bc:ae:e5:a4:c0:96:4e:
                    60:de:9b:de:d8:74:a5:50:91:3b:ea:33:21:ec:c0:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1F:F4:2F:75:86:E2:3B:B3:14:2A:4E:57:D9:AC:39:AA:E8:FA:85
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:7a:49:ba:87:6d:59:d1:16:d7:e1:8f:08:be:fc:7b:b0:
         b0:5b:b4:6b:74:e7:8b:1a:7f:39:a9:14:79:91:59:08:10:91:
         5e:33:5f:30:df:d6:b8:66:16:86:21:d7:08:41:2d:6c:78:bf:
         3b:b3:a6:dc:cb:a5:35:50:39:ed:95:b1:ef:98:d1:58:b1:b6:
         06:c3:b5:4d:ac:69:ae:de:c9:3e:8a:ae:6d:ad:33:01:b5:d8:
         a4:6d:dc:fa:db:fb:50:4d:bb:8f:29:72:8e:d7:df:80:6e:ce:
         76:d4:19:d3:1a:37:2a:01:82:86:32:13:83:9b:4f:79:31:9a:
         28:ff:79:c2:94:d6:91:05:f9:ea:fc:05:2f:d0:3c:97:da:e2:
         ce:6b:13:fe:b8:d7:71:76:3b:43:be:86:b2:2c:a8:38:e2:5c:
         f5:11:21:c6:66:54:8e:9d:37:25:fe:3f:65:ef:71:78:9d:e1:
         c3:b8:7b:6e:f8:8c:11:82:4f:73:91:b1:8b:56:0c:b1:50:75:
         90:96:b7:31:ad:ca:12:cc:c9:b9:cf:21:06:4e:9e:cd:e9:a2:
         bb:c0:03:94:c9:9e:73:0f:d9:34:3c:b2:cb:e8:ab:82:e4:0e:
         35:1b:c2:85:c6:76:f5:1f:b5:44:9b:3a:3f:9d:ac:cf:8a:c5:
         74:ca:e3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebBJ5po0i4jkJprahHaBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4
ZTQ1MGEwHhcNMjYwNTEyMjMwMDU5WhcNMjYwNTEzMjMwMDU5WjAzMTEwLwYDVQQD
EyhmMTFmZjQyZjc1ODZlMjNiYjMxNDJhNGU1N2Q5YWMzOWFhZThmYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMCh176Yy3XRwlRed/yqq+aMJKbH
BvUbla0JKVCn84WXhGpmtTcLUaHZh62ea3GPsiueu4w4DgYF4cOlLdIEmjp3Y7Q8
nM7NDb0mQ4xwgVF6PaQVDGmLxDM/HDY7N97ToR2RSXAzwRVHU9ildBjB6BiMnFsU
gr+roqBDUvRIM/KhE1drDHUMmopgcyLNNPBcqnUKmq4EyZm+SEK7iln12/J+pq2B
HJ+lZTVirr3S2mX8M4u/1wDcj55/BpHAR4ahIiAey2vZlHnAQdHBpxo9Rlcz5OYD
1smlRGUaUV6ichqloNTYmExvjryu5aTAlk5g3pve2HSlUJE76jMh7MAsxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEf9C91huI7sxQqTlfZrDmq6PqFMB8GA1UdIwQY
MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt
NTM3YjFiNDlkZmU3LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3
LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojl6SbqH
bVnRFtfhjwi+/HuwsFu0a3Tnixp/OakUeZFZCBCRXjNfMN/WuGYWhiHXCEEtbHi/
O7Om3MulNVA57ZWx75jRWLG2BsO1Taxprt7JPoquba0zAbXYpG3c+tv7UE27jyly
jtffgG7OdtQZ0xo3KgGChjITg5tPeTGaKP95wpTWkQX56vwFL9A8l9rizmsT/rjX
cXY7Q76GsiyoOOJc9REhxmZUjp03Jf4/Ze9xeJ3hw7h7bviMEYJPc5Gxi1YMsVB1
kJa3Ma3KEszJuc8hBk6ezemiu8ADlMmecw/ZNDyyy+irguQONRvChcZ29R+1RJs6
P52sz4rFdMrjhQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:34:04 2026 by rpki-client