Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          3FZ6hzQ0O8j+2Aw7ubbLs+J+PjEmd8nLjL4N/3w/R/U=
Subject key identifier:   64:E9:98:7B:30:38:D4:FA:52:54:12:EE:BF:37:CD:BE:20:F3:6E:4C
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       019F90FF943ECA5A4D9374689809A22EAFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          107E
Signing time:             Thu 23 Jul 2026 22:01:36 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:36 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:36 +0000
Files and hashes:         1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: wNSRiNwKv9E3J6bQTwrwz5Lunjx7Azf84QT2acMffc0=)
                          2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:94:3e:ca:5a:4d:93:74:68:98:09:a2:2e:af:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Jul 23 22:01:36 2026 GMT
            Not After : Jul 24 22:01:36 2026 GMT
        Subject: CN=64e9987b3038d4fa525412eebf37cdbe20f36e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:53:9f:b4:62:90:1f:d6:8b:02:76:a3:6d:
                    f7:aa:64:ff:8e:c8:a4:4c:39:94:de:c9:e6:b4:2d:
                    bc:98:9a:8d:82:da:b2:b5:fe:d9:69:6f:c5:05:81:
                    07:cb:f4:e1:38:ef:fb:9d:e7:76:92:fc:cd:ed:ad:
                    48:6a:08:b9:de:d2:2b:ac:59:f9:8d:00:af:65:cc:
                    3b:1b:81:a2:68:40:1d:3b:de:10:a9:7c:6e:46:0c:
                    da:ba:53:de:0f:90:43:f4:29:fd:03:b0:8e:0d:20:
                    54:f9:72:08:38:eb:ac:68:85:86:6f:0f:2b:b4:21:
                    17:2c:b6:0a:f8:2c:c2:0a:b6:87:bd:57:1a:65:0a:
                    dd:40:5b:da:6a:4f:d2:09:22:a5:f6:3d:f7:3f:7e:
                    4e:55:d2:96:40:49:4e:89:9a:fe:2a:2c:c3:8b:48:
                    1d:3f:32:32:5a:f7:43:6f:ab:6c:fc:be:3e:a4:53:
                    95:97:c1:57:2b:9b:84:e9:39:bb:03:2d:99:b8:bb:
                    10:49:9a:23:8c:a0:ab:4c:32:08:51:fe:46:68:5e:
                    19:48:d1:99:40:f6:52:2b:7b:a9:22:f1:e4:52:58:
                    73:e5:3a:6e:51:fb:88:ff:03:01:37:ac:be:10:b6:
                    b4:a2:55:ae:71:a6:4e:8e:da:d2:25:1f:28:a3:40:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E9:98:7B:30:38:D4:FA:52:54:12:EE:BF:37:CD:BE:20:F3:6E:4C
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:67:c4:2b:68:c4:26:d7:ff:5c:de:ca:1d:4a:a2:70:80:0d:
         72:80:3b:c2:87:d0:4b:bc:f2:64:ad:e4:07:ba:d8:75:7c:81:
         8b:91:ed:41:fc:ff:6d:ed:d5:b4:39:f1:8c:1e:62:eb:cb:9b:
         e0:2a:78:6a:de:e5:95:ee:94:bb:f8:5b:a2:73:f0:bf:2c:41:
         ba:ca:3b:60:b1:6b:62:e7:d3:cd:79:a2:cd:d1:41:85:b3:d3:
         b4:61:89:ef:dd:10:8f:8a:05:2f:ca:9b:c6:d2:8c:a5:3b:fa:
         07:ba:d1:f3:a6:a5:67:e6:b6:d7:17:5e:a7:8b:d7:79:0c:1e:
         58:6e:48:39:d8:26:1e:44:2b:d4:65:7e:2d:8d:ae:6f:c4:4d:
         09:e2:5c:bd:1b:18:17:8f:ac:fd:20:55:4c:87:66:3e:53:e2:
         69:74:93:5b:ce:81:1a:aa:11:ca:4b:aa:66:ba:ae:e5:5f:17:
         d1:92:48:0b:e5:c1:71:2b:84:78:fd:ed:05:64:7c:d7:ba:92:
         08:e2:2e:7a:b0:5f:fe:cb:40:48:03:ce:e3:81:4a:4d:51:4c:
         cc:40:ae:f5:b0:9d:63:81:39:77:14:dd:14:62:c4:ba:d8:59:
         92:08:13:be:f9:c7:5a:94:96:41:50:53:a2:68:9e:35:ba:11:
         92:86:58:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/5Q+ylpNk3RomAmiLq+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjYwNzIzMjIwMTM2WhcNMjYwNzI0MjIwMTM2WjAzMTEwLwYDVQQD
Eyg2NGU5OTg3YjMwMzhkNGZhNTI1NDEyZWViZjM3Y2RiZTIwZjM2ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75Tn7RikB/WiwJ2o233qmT/jsik
TDmU3snmtC28mJqNgtqytf7ZaW/FBYEHy/ThOO/7ned2kvzN7a1Iagi53tIrrFn5
jQCvZcw7G4GiaEAdO94QqXxuRgzaulPeD5BD9Cn9A7CODSBU+XIIOOusaIWGbw8r
tCEXLLYK+CzCCraHvVcaZQrdQFvaak/SCSKl9j33P35OVdKWQElOiZr+KizDi0gd
PzIyWvdDb6ts/L4+pFOVl8FXK5uE6Tm7Ay2ZuLsQSZojjKCrTDIIUf5GaF4ZSNGZ
QPZSK3upIvHkUlhz5TpuUfuI/wMBN6y+ELa0olWucaZOjtrSJR8oo0CjqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTpmHswONT6UlQS7r83zb4g825MMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWfEK2jE
Jtf/XN7KHUqicIANcoA7wofQS7zyZK3kB7rYdXyBi5HtQfz/be3VtDnxjB5i68ub
4Cp4at7lle6Uu/hbonPwvyxBuso7YLFrYufTzXmizdFBhbPTtGGJ790Qj4oFL8qb
xtKMpTv6B7rR86alZ+a21xdep4vXeQweWG5IOdgmHkQr1GV+LY2ub8RNCeJcvRsY
F4+s/SBVTIdmPlPiaXSTW86BGqoRykuqZrqu5V8X0ZJIC+XBcSuEeP3tBWR817qS
COIuerBf/stASAPO44FKTVFMzECu9bCdY4E5dxTdFGLEuthZkggTvvnHWpSWQVBT
omieNboRkoZYFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:50 2026 by rpki-client