Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          Eskz+LqoHGJ2Iqvu37S2JZpZU0YpmyTW5mH4v3yoc2Q=
Subject key identifier:   26:05:0C:5F:8C:48:37:CE:64:C5:00:C8:BA:D9:87:BE:2B:7C:C8:E3
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       019E2023A8521976A8D087879C1CA1436CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0D15
Signing time:             Wed 13 May 2026 07:01:08 +0000
Manifest this update:     Wed 13 May 2026 07:01:08 +0000
Manifest next update:     Thu 14 May 2026 07:01:08 +0000
Files and hashes:         1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
                          2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: jneHv1GLZ2rgtFhB8fudkUaI/qoCjTiA3q9JbOYmOfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:a8:52:19:76:a8:d0:87:87:9c:1c:a1:43:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: May 13 07:01:08 2026 GMT
            Not After : May 14 07:01:08 2026 GMT
        Subject: CN=26050c5f8c4837ce64c500c8bad987be2b7cc8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:ba:67:9c:80:71:bd:fe:f0:20:8b:4f:73:
                    40:27:89:00:b1:68:88:8e:9c:a2:4e:65:b6:da:fb:
                    0d:86:bd:32:83:0f:ea:9e:67:a6:86:fa:b8:c4:4a:
                    66:06:72:53:8f:ab:ca:98:ca:9d:8f:60:e1:a1:2c:
                    8f:d7:f6:ff:f3:74:ce:00:da:c4:ff:04:0d:32:75:
                    46:0d:fc:eb:cf:1c:b9:f6:ec:c3:ab:0d:4b:7d:a9:
                    31:6e:c7:16:45:53:02:a5:7a:d9:1b:c3:24:0c:50:
                    d9:6d:71:1d:3d:4a:72:7c:b1:11:a9:dc:49:fe:42:
                    33:f3:90:95:f7:08:ec:14:8c:f0:24:84:39:d1:d9:
                    e7:04:9e:e6:a0:d5:a0:0c:b3:5c:10:8a:ab:83:f3:
                    fc:3b:47:18:8b:2f:14:83:a0:35:e5:65:b5:9c:b1:
                    01:a6:e8:f2:79:36:5b:f9:a7:17:c7:54:76:c2:76:
                    91:be:f7:cc:3c:a1:ca:e3:82:a7:33:68:3b:84:74:
                    fa:e6:44:29:74:44:c5:90:7b:85:ae:87:10:9c:7e:
                    8f:ac:5e:52:67:c0:75:f3:74:5a:17:55:68:b9:de:
                    88:2a:b8:aa:8a:da:ab:ee:e5:c8:e9:42:ec:6e:b2:
                    9b:ca:ce:4d:5e:6f:0b:c2:a2:ab:41:bf:16:56:13:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:0C:5F:8C:48:37:CE:64:C5:00:C8:BA:D9:87:BE:2B:7C:C8:E3
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:30:54:f4:8c:1b:4b:8f:2e:d9:36:11:60:c2:ed:6f:49:4a:
         62:73:12:0f:f1:f3:ce:01:c0:9e:27:c8:42:0e:e8:74:b2:69:
         ca:af:e7:3d:b5:e0:2d:1a:7e:05:7a:d6:c8:ba:1e:57:b6:0c:
         6c:ac:cb:d8:1a:f5:d0:18:01:53:06:c3:66:2b:dc:21:37:44:
         50:6e:b4:ea:88:da:71:e9:ca:48:ea:20:1c:6e:60:dd:34:52:
         86:65:bc:88:15:5f:98:36:7c:7f:a8:c9:2c:2b:3b:5e:72:ca:
         63:38:f4:91:78:ca:9c:4f:ca:5c:18:10:45:70:a1:7e:2d:47:
         cc:9c:bc:bb:d2:7e:2f:dd:88:56:73:3b:12:95:91:3e:ab:da:
         fb:09:71:95:d1:44:1d:88:56:0f:c1:ea:b8:0a:fd:48:56:ff:
         1d:4f:62:2c:0c:42:23:d5:f1:e4:62:b9:c6:f2:6a:f6:91:2b:
         57:f2:e1:d2:24:3e:1d:9f:09:60:b4:38:ec:13:e5:08:b6:71:
         c1:6c:05:5f:53:f7:ab:d5:07:66:2c:63:34:73:71:c6:f1:a5:
         ad:38:4c:c5:d9:db:56:15:8d:23:ce:12:7c:e1:22:0a:9d:d2:
         d5:00:f3:67:eb:e4:ce:58:62:a3:0f:4b:2b:24:9c:91:7a:9d:
         7b:8f:79:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI6hSGXao0IeHnByhQ2zGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjYwNTEzMDcwMTA4WhcNMjYwNTE0MDcwMTA4WjAzMTEwLwYDVQQD
EygyNjA1MGM1ZjhjNDgzN2NlNjRjNTAwYzhiYWQ5ODdiZTJiN2NjOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4y6Z5yAcb3+8CCLT3NAJ4kAsWiI
jpyiTmW22vsNhr0ygw/qnmemhvq4xEpmBnJTj6vKmMqdj2DhoSyP1/b/83TOANrE
/wQNMnVGDfzrzxy59uzDqw1LfakxbscWRVMCpXrZG8MkDFDZbXEdPUpyfLERqdxJ
/kIz85CV9wjsFIzwJIQ50dnnBJ7moNWgDLNcEIqrg/P8O0cYiy8Ug6A15WW1nLEB
pujyeTZb+acXx1R2wnaRvvfMPKHK44KnM2g7hHT65kQpdETFkHuFrocQnH6PrF5S
Z8B183RaF1Voud6IKriqitqr7uXI6ULsbrKbys5NXm8LwqKrQb8WVhP0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYFDF+MSDfOZMUAyLrZh74rfMjjMB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTBU9Iwb
S48u2TYRYMLtb0lKYnMSD/HzzgHAnifIQg7odLJpyq/nPbXgLRp+BXrWyLoeV7YM
bKzL2Br10BgBUwbDZivcITdEUG606ojacenKSOogHG5g3TRShmW8iBVfmDZ8f6jJ
LCs7XnLKYzj0kXjKnE/KXBgQRXChfi1HzJy8u9J+L92IVnM7EpWRPqva+wlxldFE
HYhWD8HquAr9SFb/HU9iLAxCI9Xx5GK5xvJq9pErV/Lh0iQ+HZ8JYLQ47BPlCLZx
wWwFX1P3q9UHZixjNHNxxvGlrThMxdnbVhWNI84SfOEiCp3S1QDzZ+vkzlhiow9L
KySckXqde495hQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:13 2026 by rpki-client