Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File:                     II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier:          AcBXxP0FwtTE1Vx/df3PwSko7hyceYBC46Ah5XUWzMo=
Subject key identifier:   BC:54:A1:48:7D:AA:28:AE:87:1A:91:81:43:5C:FA:42:01:46:13:BA
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       019F90C7F134A32AFBBE0318363AF9D673B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number:          1703
Signing time:             Thu 23 Jul 2026 21:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:50 +0000
Files and hashes:         1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
                          2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
                          3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: J/QOsHmOdGAtILfDYezuspKKaVTiMbkigS/ifqDz5u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:f1:34:a3:2a:fb:be:03:18:36:3a:f9:d6:73:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: Jul 23 21:00:50 2026 GMT
            Not After : Jul 24 21:00:50 2026 GMT
        Subject: CN=bc54a1487daa28ae871a9181435cfa42014613ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:8d:25:b1:79:db:c8:f3:db:86:15:ac:35:
                    55:d4:31:82:d3:2a:a6:02:e8:14:ae:a4:b9:27:6b:
                    f3:95:69:01:bc:bf:da:fc:3e:61:62:cc:ac:8e:55:
                    c6:73:7c:71:d3:c7:29:ea:ab:20:1a:09:f2:5d:80:
                    6e:87:75:84:5a:de:d7:3f:23:5b:bf:84:da:18:b1:
                    ce:93:a2:40:d4:7b:0c:25:1a:10:e5:09:b0:dd:07:
                    e0:b1:a6:ba:8f:48:93:c1:a5:36:6a:b1:ac:8c:b1:
                    81:65:6a:f6:8f:9e:cc:c8:b8:d0:37:38:b8:96:9c:
                    e1:f8:91:20:bc:0a:0b:87:80:5c:c4:e3:b2:27:ec:
                    70:65:a1:08:21:91:73:f8:2a:c5:94:08:6c:74:98:
                    94:b7:cc:b6:08:fa:1c:d7:d6:6f:4f:72:d2:d2:92:
                    8c:57:51:d7:50:f6:3d:24:b9:95:08:50:88:7a:9c:
                    de:81:04:1f:88:a5:5f:1b:00:98:45:4d:1e:b0:f8:
                    e1:be:40:0b:80:8b:69:6d:05:b3:c6:4b:20:f1:81:
                    d6:ac:b4:6f:48:22:b6:87:33:14:b8:93:ea:e8:0a:
                    7c:02:41:88:01:56:f8:fc:28:33:aa:d0:5f:4e:cf:
                    db:e0:49:0f:7a:03:bb:3c:46:06:92:f9:a4:b1:6a:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:54:A1:48:7D:AA:28:AE:87:1A:91:81:43:5C:FA:42:01:46:13:BA
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:e1:b9:b3:0a:c5:c4:cd:66:ae:77:5b:bc:f1:9e:55:85:
         8b:4c:92:15:d7:f0:86:89:c9:83:4f:f7:84:c2:03:d0:72:5c:
         68:2d:c1:3d:30:31:ff:9d:cb:a1:a9:d7:6d:45:6e:78:ba:b3:
         b1:be:c9:33:fe:df:04:d9:b7:59:34:26:f6:fe:2c:ee:ba:e0:
         df:26:5f:33:78:b2:ba:4c:b6:32:d7:51:80:dd:ea:85:d8:6f:
         d9:8f:88:a2:37:c8:42:d6:2b:b4:89:76:a6:69:b0:7b:59:4c:
         68:9d:69:b9:5a:6c:1b:5f:bf:b8:b7:7a:2d:c9:5f:80:f7:15:
         7c:fd:48:be:a7:b9:23:5d:10:66:05:5b:1a:bd:78:e6:ad:ae:
         68:c8:d7:1d:8d:b9:dd:07:c0:c3:33:98:9e:9e:2a:81:9b:f4:
         da:67:00:73:8f:5e:72:f1:ec:a2:0f:3e:b2:f1:69:d6:da:6b:
         48:15:6d:83:fc:ed:3b:b9:b9:25:0d:39:9f:8d:ca:01:eb:2e:
         60:cd:bf:b6:5a:88:6c:d2:e5:a8:41:39:cb:a2:87:80:be:5c:
         a1:3e:3f:65:34:61:b7:06:cd:d6:1e:67:a2:c0:b4:0b:04:51:
         ce:e1:3f:ad:7f:bb:0f:d6:24:a8:73:3d:59:d9:aa:5d:91:6f:
         79:2f:9f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx/E0oyr7vgMYNjr51nOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw
ZWQwZjAwHhcNMjYwNzIzMjEwMDUwWhcNMjYwNzI0MjEwMDUwWjAzMTEwLwYDVQQD
EyhiYzU0YTE0ODdkYWEyOGFlODcxYTkxODE0MzVjZmE0MjAxNDYxM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwiNJbF528jz24YVrDVV1DGC0yqm
AugUrqS5J2vzlWkBvL/a/D5hYsysjlXGc3xx08cp6qsgGgnyXYBuh3WEWt7XPyNb
v4TaGLHOk6JA1HsMJRoQ5Qmw3Qfgsaa6j0iTwaU2arGsjLGBZWr2j57MyLjQNzi4
lpzh+JEgvAoLh4BcxOOyJ+xwZaEIIZFz+CrFlAhsdJiUt8y2CPoc19ZvT3LS0pKM
V1HXUPY9JLmVCFCIepzegQQfiKVfGwCYRU0esPjhvkALgItpbQWzxksg8YHWrLRv
SCK2hzMUuJPq6Ap8AkGIAVb4/CgzqtBfTs/b4EkPegO7PEYGkvmksWrANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxUoUh9qiiuhxqRgUNc+kIBRhO6MB8GA1UdIwQY
MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt
ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh
LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbDhubMK
xcTNZq53W7zxnlWFi0ySFdfwhonJg0/3hMID0HJcaC3BPTAx/53LoanXbUVueLqz
sb7JM/7fBNm3WTQm9v4s7rrg3yZfM3iyuky2MtdRgN3qhdhv2Y+IojfIQtYrtIl2
pmmwe1lMaJ1puVpsG1+/uLd6LclfgPcVfP1Ivqe5I10QZgVbGr145q2uaMjXHY25
3QfAwzOYnp4qgZv02mcAc49ecvHsog8+svFp1tprSBVtg/ztO7m5JQ05n43KAesu
YM2/tlqIbNLlqEE5y6KHgL5coT4/ZTRhtwbN1h5nosC0CwRRzuE/rX+7D9YkqHM9
WdmqXZFveS+fZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:07 2026 by rpki-client