Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          MjfwIK5xeFdBL/5DMOC9gWZtfUlrOIkg0vuAC5093HM=
Subject key identifier:   FB:0C:C9:47:1C:CC:B4:39:F8:34:8A:EE:D7:72:57:6F:7B:99:CC:3F
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019F9090BE07B92A6C7C18DDCBABC74A1D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          030C
Signing time:             Thu 23 Jul 2026 20:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:32 +0000
Files and hashes:         1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
                          4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
                          5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
                          6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=)
                          7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
                          8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: WYcK1Y9/rGTgXsS42V9YagbFh98fBvAgxEY41oYd+BE=)
                          9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
                          12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:be:07:b9:2a:6c:7c:18:dd:cb:ab:c7:4a:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Jul 23 20:00:32 2026 GMT
            Not After : Jul 24 20:00:32 2026 GMT
        Subject: CN=fb0cc9471cccb439f8348aeed772576f7b99cc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:4b:11:5e:60:44:31:88:6c:05:fd:ba:ae:
                    bf:e1:f5:b2:34:29:12:26:d4:c6:09:bb:4e:8a:67:
                    92:88:4b:26:15:07:70:0d:dc:9f:c9:6c:64:05:80:
                    e3:c6:af:7e:6d:27:93:70:76:03:a7:eb:92:0a:53:
                    07:82:84:91:13:32:1c:a6:3e:75:65:2a:68:47:9f:
                    5e:8f:d1:08:6d:8a:94:dc:e1:89:15:1a:12:b2:37:
                    57:cf:62:7e:aa:bf:ce:38:01:e2:3a:0b:8a:d1:35:
                    2b:5c:72:55:a5:54:bb:73:4f:d0:c3:f8:53:38:34:
                    e2:28:16:50:b6:6f:e2:32:18:58:29:4c:7e:37:37:
                    4d:47:9b:04:6e:01:cf:1b:5d:e9:92:9b:ff:a2:5e:
                    f8:64:34:3b:1a:20:5c:69:51:0a:91:79:f8:db:7c:
                    ad:d6:f3:ec:7e:d2:c6:7d:b3:3f:27:d1:f8:f0:43:
                    bc:5a:28:9b:5b:e6:30:e0:53:b8:8d:55:34:be:60:
                    05:fb:39:58:3e:88:92:5e:61:26:e7:4d:3d:5e:6d:
                    84:b7:71:a8:80:b1:8f:c4:b2:78:0a:79:8a:6f:80:
                    ad:29:b1:5f:5e:c2:bc:d0:39:d5:f1:d6:32:04:a1:
                    be:d7:58:7c:bb:b4:be:d1:11:1b:bc:e3:af:b8:2b:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:C9:47:1C:CC:B4:39:F8:34:8A:EE:D7:72:57:6F:7B:99:CC:3F
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:79:7e:04:9a:10:fd:f8:60:94:23:99:ec:e3:9c:f4:e8:
         ee:eb:94:96:f7:ad:bd:7a:3c:f8:ee:de:da:d1:17:0b:20:fc:
         ac:91:71:37:68:c0:ae:f9:f4:ce:67:52:ab:98:3e:a0:68:0e:
         35:26:59:04:43:23:cd:8a:66:c9:0f:92:59:d5:c5:a5:10:9a:
         54:4b:ec:77:d1:f9:f4:9a:49:33:b3:3d:eb:d5:c8:36:bc:09:
         fe:87:91:1e:5a:36:af:ed:65:d8:aa:37:00:e2:75:ee:a5:b8:
         08:d7:16:2b:60:e6:71:ca:f1:59:d1:a9:c5:85:b6:29:b7:36:
         55:ce:34:b3:9f:9e:6a:d6:c8:3a:4d:a1:e2:dd:f6:52:d0:c5:
         fa:96:75:e2:f3:78:0f:7e:52:ba:df:25:82:cb:e4:0f:a0:fb:
         b0:dc:67:85:22:f8:37:c9:7c:ac:b2:75:14:20:45:87:67:f6:
         47:d5:b8:a8:d9:c4:6f:c4:ab:0a:12:11:dd:1d:45:48:30:9b:
         6d:51:52:b0:78:13:c4:1d:b5:ff:e2:62:6e:87:fa:78:f6:8b:
         39:00:43:5c:90:bf:39:7f:df:47:3b:5c:65:0e:cc:ae:65:45:
         58:38:04:69:34:6f:84:f1:b0:6d:8e:a8:9e:0d:1d:e8:01:ed:
         eb:19:d4:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkL4HuSpsfBjdy6vHSh0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjYwNzIzMjAwMDMyWhcNMjYwNzI0MjAwMDMyWjAzMTEwLwYDVQQD
EyhmYjBjYzk0NzFjY2NiNDM5ZjgzNDhhZWVkNzcyNTc2ZjdiOTljYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnetLEV5gRDGIbAX9uq6/4fWyNCkS
JtTGCbtOimeSiEsmFQdwDdyfyWxkBYDjxq9+bSeTcHYDp+uSClMHgoSREzIcpj51
ZSpoR59ej9EIbYqU3OGJFRoSsjdXz2J+qr/OOAHiOguK0TUrXHJVpVS7c0/Qw/hT
ODTiKBZQtm/iMhhYKUx+NzdNR5sEbgHPG13pkpv/ol74ZDQ7GiBcaVEKkXn423yt
1vPsftLGfbM/J9H48EO8WiibW+Yw4FO4jVU0vmAF+zlYPoiSXmEm5009Xm2Et3Go
gLGPxLJ4CnmKb4CtKbFfXsK80DnV8dYyBKG+11h8u7S+0REbvOOvuCsCrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsMyUcczLQ5+DSK7tdyV297mcw/MB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO055fgSa
EP34YJQjmezjnPTo7uuUlvetvXo8+O7e2tEXCyD8rJFxN2jArvn0zmdSq5g+oGgO
NSZZBEMjzYpmyQ+SWdXFpRCaVEvsd9H59JpJM7M969XINrwJ/oeRHlo2r+1l2Ko3
AOJ17qW4CNcWK2DmccrxWdGpxYW2Kbc2Vc40s5+eatbIOk2h4t32UtDF+pZ14vN4
D35Sut8lgsvkD6D7sNxnhSL4N8l8rLJ1FCBFh2f2R9W4qNnEb8SrChIR3R1FSDCb
bVFSsHgTxB21/+Jibof6ePaLOQBDXJC/OX/fRztcZQ7MrmVFWDgEaTRvhPGwbY6o
ng0d6AHt6xnU6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:53 2026 by rpki-client