Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          syJd0woEH7bztkggEVgvdnFEZuGuPUB1a9xC884NRt8=
Subject key identifier:   6F:7B:83:DD:A4:B3:CB:A8:82:0F:91:C9:8D:50:73:F4:2D:BB:87:51
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019F9090F7E18778A178F695A0BD45A11390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          19D5
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
                          2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
                          3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
                          4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
                          5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: Yh3Hs/2z2oyoeTpwGS+YW47P0as/u72vA4E0tg/ajCk=)
                          7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
                          8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
                          9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
                          10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
                          11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
                          12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
                          13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
                          14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
                          15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
                          16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
                          17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
                          18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
                          19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
                          20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f7:e1:87:78:a1:78:f6:95:a0:bd:45:a1:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=6f7b83dda4b3cba8820f91c98d5073f42dbb8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:1f:98:c2:12:e5:b0:b8:11:e1:c3:88:56:
                    03:0a:ee:83:6e:82:1b:cc:47:cf:d1:b0:1e:47:67:
                    d4:9b:37:bd:14:47:6c:de:cf:82:b5:a0:03:01:27:
                    26:e3:4b:11:a1:7d:b3:bd:ca:00:00:c9:20:59:3c:
                    6e:ec:19:04:86:0d:68:06:d8:dc:c5:5e:e7:33:a6:
                    48:42:b9:b2:31:39:56:d3:14:f1:92:25:be:58:3f:
                    22:20:f5:5d:96:03:23:6f:c2:d2:f1:71:c0:19:e8:
                    58:ee:bd:0a:e0:2f:aa:01:f0:02:1f:de:d5:87:dd:
                    ff:78:7d:8f:6a:30:15:f1:01:67:d7:60:3c:20:9a:
                    1a:78:3d:fa:d1:8a:54:3d:e9:d4:14:85:de:db:60:
                    fd:10:d8:54:b3:6d:6c:c3:61:cb:04:ce:7f:19:b3:
                    09:6c:f0:aa:7c:d2:d1:55:f6:ea:f1:ef:9f:d4:81:
                    cf:94:6c:5c:62:fc:93:2e:4c:ed:99:ea:ce:ab:02:
                    a8:7f:db:07:9a:20:e8:44:f0:b5:1b:7d:a4:1c:76:
                    10:c2:67:2b:b1:8f:8f:0d:bc:5a:43:f3:cd:6e:36:
                    f3:c8:59:62:12:59:be:c6:14:2f:59:93:b6:89:30:
                    fb:43:c6:91:4b:20:48:2b:5e:93:7a:92:fa:1a:bc:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:83:DD:A4:B3:CB:A8:82:0F:91:C9:8D:50:73:F4:2D:BB:87:51
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:bb:a7:5f:6a:03:31:66:5a:0c:cc:83:e7:4c:cc:db:96:
         0e:41:7a:04:b8:2d:55:08:ea:b6:3b:3f:3c:1e:20:36:7e:89:
         ab:47:a0:20:0a:1f:87:b7:48:a9:88:9a:0d:88:8a:73:d9:49:
         59:58:71:e2:d0:61:3b:a9:75:bb:5d:a3:d9:4c:b3:f2:1b:5d:
         94:6d:66:a1:ce:18:4c:1f:f6:43:f1:d1:76:c4:fc:f6:28:f7:
         aa:62:7d:df:73:66:37:96:fd:fa:4d:75:52:e9:99:6a:9c:09:
         aa:c2:1e:08:61:85:78:a9:32:ec:6b:dd:91:59:4a:27:44:7b:
         92:2a:d8:58:0c:be:bd:9f:5b:91:be:c3:7b:43:be:88:bb:a3:
         5c:6a:d4:86:a0:c4:d7:b2:14:70:fc:43:37:f8:95:b4:d7:b3:
         ee:78:fd:0b:70:57:90:6a:00:d4:55:b2:c9:cc:4d:f1:80:35:
         bc:f4:8a:5e:e1:05:6a:c3:fd:d1:c8:e4:62:c1:67:fa:c1:65:
         73:0c:62:6f:a6:3f:b3:20:43:fd:cb:05:0b:c6:97:bd:c3:90:
         e6:0c:ee:a7:89:a7:85:c6:61:29:8f:e6:1c:d8:a0:0c:64:07:
         d8:21:f2:4c:3c:d5:a4:c6:04:e7:07:8e:3d:a7:cb:11:4a:f5:
         17:e4:87:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkPfhh3ihePaVoL1FoROQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjYwNzIzMjAwMDQ3WhcNMjYwNzI0MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZjdiODNkZGE0YjNjYmE4ODIwZjkxYzk4ZDUwNzNmNDJkYmI4NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1gfmMIS5bC4EeHDiFYDCu6DboIb
zEfP0bAeR2fUmze9FEds3s+CtaADAScm40sRoX2zvcoAAMkgWTxu7BkEhg1oBtjc
xV7nM6ZIQrmyMTlW0xTxkiW+WD8iIPVdlgMjb8LS8XHAGehY7r0K4C+qAfACH97V
h93/eH2PajAV8QFn12A8IJoaeD360YpUPenUFIXe22D9ENhUs21sw2HLBM5/GbMJ
bPCqfNLRVfbq8e+f1IHPlGxcYvyTLkztmerOqwKof9sHmiDoRPC1G32kHHYQwmcr
sY+PDbxaQ/PNbjbzyFliElm+xhQvWZO2iTD7Q8aRSyBIK16TepL6Grwl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG97g92ks8uogg+RyY1Qc/Qtu4dRMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHy7p19q
AzFmWgzMg+dMzNuWDkF6BLgtVQjqtjs/PB4gNn6Jq0egIAofh7dIqYiaDYiKc9lJ
WVhx4tBhO6l1u12j2Uyz8htdlG1moc4YTB/2Q/HRdsT89ij3qmJ933NmN5b9+k11
UumZapwJqsIeCGGFeKky7GvdkVlKJ0R7kirYWAy+vZ9bkb7De0O+iLujXGrUhqDE
17IUcPxDN/iVtNez7nj9C3BXkGoA1FWyycxN8YA1vPSKXuEFasP90cjkYsFn+sFl
cwxib6Y/syBD/csFC8aXvcOQ5gzup4mnhcZhKY/mHNigDGQH2CHyTDzVpMYE5weO
PafLEUr1F+SHaA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:45 2026 by rpki-client