Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          nyM9GRr1hp5tHTdobfZvfpCRLcsQeFtprjaPm3rkU2k=
Subject key identifier:   E1:A6:B5:52:05:3A:DC:DA:73:C0:6F:76:85:92:50:F3:BE:1F:3D:7D
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       019E205A75B6B41981F0E9F0058AC112BFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          191C
Signing time:             Wed 13 May 2026 08:00:59 +0000
Manifest this update:     Wed 13 May 2026 08:00:59 +0000
Manifest next update:     Thu 14 May 2026 08:00:59 +0000
Files and hashes:         1: 1-lkGZhIuyoLc-xdILurzrx5fcUA.asa (hash: APoM994M8OUix1Q1A5wwIVp1ItNTgJQaQCCwGYmbLkI=)
                          2: Tn7Pc__H_TUg_32ubkt6NJOEaYg.asa (hash: AN7Na+UF8ieY7ZxLnQVVQNOsUynIOsLl+t6+Vp7i4NQ=)
                          3: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
                          4: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: qAfJa/Dg/UXoeRHOqEXmYLUflkjVu8ntb7HwlDi86qU=)
                          5: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
                          6: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:75:b6:b4:19:81:f0:e9:f0:05:8a:c1:12:bf:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: May 13 08:00:59 2026 GMT
            Not After : May 14 08:00:59 2026 GMT
        Subject: CN=e1a6b552053adcda73c06f76859250f3be1f3d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:0b:97:f8:70:cd:58:71:10:cf:b4:29:56:
                    98:fb:32:b1:6d:19:5e:45:16:46:61:b0:df:f2:14:
                    5b:db:a4:7e:12:2f:4c:0a:04:b0:ef:6f:2a:7a:18:
                    12:92:0f:ad:bd:a6:b5:d8:bb:9d:f5:bb:b9:4a:e1:
                    f7:f0:a9:19:b5:26:41:78:17:1f:a2:f5:bc:9f:76:
                    3f:0d:f1:0b:34:77:71:54:fe:43:8f:15:52:9c:80:
                    d9:9d:1a:41:2a:f6:f1:cd:32:da:48:dd:c1:90:65:
                    17:bd:fb:c4:bd:c5:c9:e5:82:53:74:9f:63:7a:87:
                    a0:07:e7:f7:b6:bf:f0:15:9d:6f:ba:2c:ce:2e:62:
                    2d:a3:71:c8:7f:5f:cf:08:22:02:9d:4d:22:d2:ea:
                    a1:19:3c:13:75:cc:53:b8:52:ae:48:ab:ae:3f:b3:
                    1f:91:fc:0b:bd:64:54:ca:d6:06:36:13:6a:cb:f5:
                    3b:99:9d:eb:e5:32:a9:28:53:43:02:71:21:c6:72:
                    c9:5d:25:ba:f7:ed:74:c7:5f:54:2b:df:27:88:e7:
                    6c:0f:ea:f2:31:30:41:3d:04:43:23:b2:e7:b3:45:
                    fb:8e:8f:c6:00:0d:27:7f:41:ef:06:25:42:f1:38:
                    3f:a3:2c:80:d6:cc:71:0d:7d:53:b4:31:44:a5:80:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:B5:52:05:3A:DC:DA:73:C0:6F:76:85:92:50:F3:BE:1F:3D:7D
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:de:59:5e:f8:e8:63:d8:93:ef:04:60:87:6b:02:fa:27:fa:
         82:d6:f7:3f:f0:2d:23:71:de:d0:88:c9:86:c6:33:5d:94:c3:
         1a:30:7b:b8:fc:81:ba:b5:4e:2b:d4:14:2d:e8:ed:38:bb:b9:
         c5:02:20:77:84:3f:29:1f:a3:28:34:47:90:d2:08:ab:3c:f6:
         75:26:f1:f3:bc:fa:53:1e:f3:cd:ce:9a:2f:2c:26:ae:5b:02:
         6b:00:6a:12:dc:b6:78:c0:b3:1c:c3:db:1f:21:9f:56:a7:0f:
         9a:22:cb:52:82:60:07:f6:f4:8e:da:ae:29:56:53:0e:68:31:
         77:7d:29:a2:79:b1:2e:38:5c:e6:30:31:46:2e:e5:82:fe:c0:
         3d:f0:7a:12:45:1b:d9:d0:70:dc:82:74:09:1c:d2:86:00:2a:
         e4:5c:94:19:f3:45:54:b4:7e:19:c2:2a:53:19:d4:9c:c4:c5:
         77:23:50:9e:84:90:4e:51:77:82:df:60:66:6b:fd:9f:9c:ee:
         3b:e1:a9:8d:1f:e7:ce:31:6e:ef:74:8f:20:ba:30:70:c8:6d:
         48:30:09:fd:aa:f4:31:5e:a9:3c:b8:5a:b7:42:69:0d:2b:21:
         e0:8f:a3:ea:4e:44:24:b0:0b:ae:a4:03:8e:fd:5c:68:74:e9:
         85:8f:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:32 2026 by rpki-client