Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File:                     Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier:          Z/ZY/eDtDBDF8odraaXH3xNbvSLkkVd+R2bDSNXQ7Aw=
Subject key identifier:   98:8C:56:FA:12:9D:76:23:BB:7D:6B:45:2F:2A:C5:A3:4D:3F:06:18
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       019F9059B5EE7A4099485FB5629B30711277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 19:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:25 +0000
Files and hashes:         1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
                          2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
                          3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: H2Un2/7s+BXryJC/J/7z6B8WeWyLHt6g17V/sysjTC4=)
                          4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:b5:ee:7a:40:99:48:5f:b5:62:9b:30:71:12:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Jul 23 19:00:25 2026 GMT
            Not After : Jul 24 19:00:25 2026 GMT
        Subject: CN=988c56fa129d7623bb7d6b452f2ac5a34d3f0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:59:fb:24:07:37:a7:66:03:23:0e:7d:86:
                    66:4d:3d:ea:ea:0a:0c:1c:94:3d:a5:f7:72:83:81:
                    59:0c:77:92:e2:86:a0:63:83:ce:2e:2c:72:06:20:
                    21:88:74:e1:cc:5e:18:7d:79:20:48:3f:48:29:71:
                    7b:b0:a4:15:dd:53:84:57:c1:9d:2f:6b:56:75:c0:
                    df:a9:45:b8:5f:fe:40:54:75:5c:58:77:a9:12:d0:
                    6f:8a:63:eb:8a:76:bc:60:9c:a7:99:0d:6d:88:c4:
                    76:31:52:0e:03:a7:1c:c9:e9:fe:c4:d6:06:b0:fc:
                    6f:e4:1a:5f:cc:c8:cc:64:11:9d:ec:38:d3:ad:8c:
                    00:46:ea:fa:01:c8:69:15:52:db:92:5d:fb:73:aa:
                    c3:b9:fa:02:d8:78:54:60:6a:f7:a9:25:11:4a:d6:
                    8e:07:5b:b1:2b:d2:b1:d6:f8:81:2b:48:d1:26:82:
                    eb:52:e3:34:03:a4:1a:55:ed:40:6f:c9:bc:94:6c:
                    f0:dd:60:ff:77:75:2d:cd:20:ab:17:1b:86:68:90:
                    11:66:ab:60:f5:80:a8:18:3d:02:8e:e5:ca:07:fc:
                    0e:cc:c6:6a:54:ab:03:f2:98:d7:9b:3f:82:64:1f:
                    b8:13:3c:a7:5c:77:e8:8e:56:62:81:4a:6e:23:d3:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:56:FA:12:9D:76:23:BB:7D:6B:45:2F:2A:C5:A3:4D:3F:06:18
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e1:64:2f:cf:c1:9f:c0:96:fb:28:75:dc:a7:ae:74:c8:3c:
         62:c2:4d:77:af:bf:1e:06:da:27:ff:ac:4f:de:0d:9c:e1:8f:
         00:f5:4d:a6:7c:ef:85:57:d0:df:68:8c:78:33:f0:24:c7:20:
         09:9c:d7:4f:13:64:8a:b4:ed:2c:08:8d:4e:02:61:c3:9d:fb:
         64:a5:30:1c:1f:d8:a9:e6:88:11:31:ec:ec:be:b6:da:0f:e6:
         c2:58:1f:b7:9c:9f:85:cd:b1:90:5f:f4:b6:bc:f3:02:b2:a1:
         46:b3:49:34:b2:c3:53:9c:6f:8a:c7:70:50:2c:8a:6b:b0:41:
         f6:e4:e0:a7:84:93:08:fe:69:d6:7e:34:8b:77:ac:66:6a:18:
         cd:63:90:53:e9:12:6d:d0:71:ad:51:4d:12:39:9a:26:cc:e8:
         ee:c0:ff:9d:27:8c:00:24:c2:d3:52:d7:b5:75:54:84:1f:94:
         bf:31:02:6c:6a:57:1f:bf:f0:af:c1:7f:1a:aa:bd:a6:80:70:
         d7:f8:18:8a:54:23:a1:7f:52:87:4c:58:32:0e:c9:ec:15:73:
         3b:f8:6d:9f:87:42:51:fa:b3:4a:f7:ed:bd:99:b1:f7:f7:60:
         ed:cd:92:5c:24:7f:e2:ee:2b:82:76:31:50:cf:0c:38:c1:0d:
         ea:2d:19:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWbXuekCZSF+1YpswcRJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjYwNzIzMTkwMDI1WhcNMjYwNzI0MTkwMDI1WjAzMTEwLwYDVQQD
Eyg5ODhjNTZmYTEyOWQ3NjIzYmI3ZDZiNDUyZjJhYzVhMzRkM2YwNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJZ+yQHN6dmAyMOfYZmTT3q6goM
HJQ9pfdyg4FZDHeS4oagY4POLixyBiAhiHThzF4YfXkgSD9IKXF7sKQV3VOEV8Gd
L2tWdcDfqUW4X/5AVHVcWHepEtBvimPrina8YJynmQ1tiMR2MVIOA6ccyen+xNYG
sPxv5BpfzMjMZBGd7DjTrYwARur6AchpFVLbkl37c6rDufoC2HhUYGr3qSURStaO
B1uxK9Kx1viBK0jRJoLrUuM0A6QaVe1Ab8m8lGzw3WD/d3UtzSCrFxuGaJARZqtg
9YCoGD0CjuXKB/wOzMZqVKsD8pjXmz+CZB+4EzynXHfojlZigUpuI9PhDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiMVvoSnXYju31rRS8qxaNNPwYYMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOFkL8/B
n8CW+yh13KeudMg8YsJNd6+/HgbaJ/+sT94NnOGPAPVNpnzvhVfQ32iMeDPwJMcg
CZzXTxNkirTtLAiNTgJhw537ZKUwHB/YqeaIETHs7L622g/mwlgft5yfhc2xkF/0
trzzArKhRrNJNLLDU5xvisdwUCyKa7BB9uTgp4STCP5p1n40i3esZmoYzWOQU+kS
bdBxrVFNEjmaJszo7sD/nSeMACTC01LXtXVUhB+UvzECbGpXH7/wr8F/Gqq9poBw
1/gYilQjoX9Sh0xYMg7J7BVzO/htn4dCUfqzSvftvZmx9/dg7c2SXCR/4u4rgnYx
UM8MOMEN6i0ZAg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:28 2026 by rpki-client