Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          5hL2BcnE5V0VEHYOB1y90C1Wjc3BGzwfh9q5YLoui5M=
Subject key identifier:   FC:7B:A7:9E:A4:3D:C9:80:0D:79:5F:86:05:A4:75:0C:34:01:38:B6
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       019E1F7EA0BD9FA90F856B2AE640BE37B29E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 04:00:52 +0000
Manifest this update:     Wed 13 May 2026 04:00:52 +0000
Manifest next update:     Thu 14 May 2026 04:00:52 +0000
Files and hashes:         1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: R58iFLftUKNRGp0+FB5PDQK2jFYSFbEaUr2EUhJr6x0=)
                          3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
                          4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
                          5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
                          6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
                          7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:a0:bd:9f:a9:0f:85:6b:2a:e6:40:be:37:b2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: May 13 04:00:52 2026 GMT
            Not After : May 14 04:00:52 2026 GMT
        Subject: CN=fc7ba79ea43dc9800d795f8605a4750c340138b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:2b:79:ef:0e:73:ca:e3:39:3e:1e:82:50:
                    f6:c7:b4:7c:cc:e1:6f:bc:e9:18:90:28:e5:c3:bd:
                    da:dc:ac:73:e4:b8:59:27:1e:09:ab:66:19:09:2b:
                    99:b1:fe:bb:17:6e:ed:10:b4:39:0f:ea:ca:39:9e:
                    e2:12:8e:8a:55:a4:c3:ef:43:c1:07:17:5c:ba:49:
                    93:62:28:01:1c:f7:5d:00:04:bd:ab:61:95:bc:d5:
                    3a:72:53:9b:f9:78:bb:8c:93:57:5b:f0:94:58:bd:
                    99:31:39:26:19:5b:6b:bf:c4:c3:a2:18:bc:c2:43:
                    47:b7:db:a3:2b:27:d9:e4:fb:31:71:eb:2d:4c:ad:
                    10:10:e2:9d:b7:79:9f:4d:0a:63:08:5e:d8:6b:93:
                    0c:b9:86:e9:ac:84:fa:12:e6:36:94:aa:37:83:e3:
                    00:f4:31:72:16:42:d8:60:06:14:b3:31:8d:d1:a0:
                    b8:21:f1:be:5e:a7:33:a5:46:57:11:c2:cd:24:69:
                    fc:00:94:88:5f:f6:9a:6c:4e:c3:55:11:46:2e:d8:
                    90:0a:ad:5c:d2:aa:91:9d:71:ba:f3:ef:36:09:72:
                    69:80:4b:9d:33:37:e5:8e:d0:69:50:dd:b3:fa:00:
                    29:e4:ff:dc:6a:8a:71:b7:ac:74:f7:ef:5d:b3:df:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:A7:9E:A4:3D:C9:80:0D:79:5F:86:05:A4:75:0C:34:01:38:B6
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:d3:3f:b4:48:89:bd:ce:6d:1f:1b:f9:e2:c2:a9:6b:68:
         7b:cf:1f:c1:55:a3:34:d3:be:2b:b0:0c:ae:96:af:65:60:3a:
         97:9c:60:f1:a3:2b:44:c9:8c:86:9f:f9:6c:d0:5c:a0:9f:04:
         ab:8b:8d:5d:9d:4e:ad:d9:53:da:ec:c0:31:17:49:f5:50:ed:
         b9:da:a0:e7:06:7e:f7:0b:6b:41:39:71:a2:71:3d:b6:ab:45:
         3e:53:84:6d:3f:a5:e4:4c:b6:6d:e5:e9:a2:0b:35:a6:e5:14:
         5d:78:f9:bb:4e:18:ce:1c:f0:25:d8:d2:9e:f8:a0:71:4a:91:
         32:d1:e4:40:f9:44:2d:10:55:1b:c3:6b:12:61:f1:b3:71:8f:
         71:f9:d5:bf:7a:e5:88:7d:05:79:71:9d:8d:ed:af:f2:bf:ee:
         f3:68:88:1c:8d:97:24:bd:e6:68:a8:a6:97:cb:0d:bc:64:c9:
         ca:b2:77:f2:a3:9f:df:64:05:d4:7e:91:b9:ff:df:cd:17:bd:
         87:b3:a2:22:e5:b4:85:7f:86:ee:98:61:1f:7e:e3:89:01:f4:
         b7:21:9a:6e:15:7c:e6:54:8a:f6:78:b2:60:ca:8c:df:03:4c:
         64:9c:a8:34:01:fb:e6:fc:20:e0:09:09:9f:ad:52:70:2c:c4:
         d1:07:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:48 2026 by rpki-client