Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          RypbJqJ8LfuYeblzkFltxhTfujcLsPOGJ3ZP25XXSE4=
Subject key identifier:   8A:8A:AF:BB:61:AF:A6:A9:41:01:71:F4:13:1F:B1:E2:33:6B:31:6A
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019F91A3B8B28810A7A75A3C4C389842F76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          04DC
Signing time:             Fri 24 Jul 2026 01:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:53 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: V0qpTe5biy7xsOQKSB5Gukv8+2d5pa2vDnOHG2zieRo=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:b8:b2:88:10:a7:a7:5a:3c:4c:38:98:42:f7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Jul 24 01:00:53 2026 GMT
            Not After : Jul 25 01:00:53 2026 GMT
        Subject: CN=8a8aafbb61afa6a9410171f4131fb1e2336b316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:55:2a:4f:67:23:9d:94:a9:d7:f0:a6:ee:
                    f4:a2:e4:3f:5d:e3:1d:08:0a:5b:5c:fd:93:6d:aa:
                    2e:52:52:65:9b:53:17:7b:95:5d:f5:f7:39:71:e8:
                    87:67:0b:75:0a:f3:7e:8f:53:ed:25:d2:00:aa:0f:
                    d0:7f:32:07:3f:7d:97:62:97:f7:7c:f1:7f:04:f9:
                    6c:52:3a:68:1d:8b:82:fe:a3:b2:0b:a9:e8:2c:8e:
                    ec:61:fd:53:55:e0:6b:68:1a:93:4a:e2:30:70:23:
                    65:7f:de:89:8b:ae:b8:60:b5:0b:4b:7a:1e:7f:20:
                    8a:67:7b:1a:d0:08:37:82:14:f7:47:c2:23:ef:bf:
                    2a:a5:15:ea:64:fa:3c:44:94:b8:86:2d:38:b2:3b:
                    62:c0:47:1b:7d:73:5e:71:9e:46:ee:30:6f:8a:ff:
                    c3:05:79:5b:a8:7e:c3:b4:2c:a2:e3:05:17:e4:4c:
                    8e:3c:20:d3:11:2f:6f:97:86:9a:d7:a6:78:bf:96:
                    9a:c4:f4:58:82:51:50:55:b9:e6:c1:bd:39:99:1e:
                    69:5b:fc:0a:a4:1e:c1:0e:7f:4c:0a:2e:b8:d9:2b:
                    dd:41:63:16:32:01:b2:bf:4c:24:2c:7d:1a:d2:f0:
                    84:e8:32:62:1e:ca:11:e0:a1:a0:a2:b2:38:3b:4d:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:AF:BB:61:AF:A6:A9:41:01:71:F4:13:1F:B1:E2:33:6B:31:6A
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:11:ee:f6:ac:c0:7e:15:4d:83:bd:03:12:e0:6d:a2:56:
         9f:50:16:62:0b:6d:9f:8c:a2:ef:74:66:cd:43:42:de:30:ec:
         8d:d9:fb:b1:7f:3f:0a:4b:69:9e:90:54:94:c6:d8:c0:fe:f8:
         1d:0b:66:48:85:1d:91:ef:f5:36:11:be:0d:9c:87:41:c3:8c:
         67:23:dc:cd:73:14:2e:d5:d3:6c:48:2d:40:4f:4e:39:ce:83:
         f0:60:f1:6a:cf:b3:ba:8c:9a:4f:f4:99:ee:23:c2:b3:46:3f:
         25:1c:74:37:62:54:ba:63:97:92:a4:99:3e:ac:f0:95:89:82:
         0a:14:83:52:32:d3:26:b7:f4:da:d1:4c:18:b3:f6:f0:7b:5c:
         18:70:fd:81:94:4b:62:1b:92:14:ab:71:1e:b6:9e:04:c6:36:
         d6:80:70:60:0a:bb:da:ca:21:af:8d:ef:ea:55:df:98:fa:aa:
         28:d1:78:05:5a:9e:a0:91:72:dc:d0:97:91:de:4d:65:b1:6b:
         4b:7b:ef:24:e9:36:44:89:8f:df:44:e2:38:c6:26:5e:d2:55:
         ad:16:6d:46:cd:bf:28:da:35:05:92:87:28:a0:27:4a:cc:70:
         0d:11:ef:58:cd:89:88:ac:8e:b5:c3:7c:28:a6:bf:ed:54:30:
         e2:41:16:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro7iyiBCnp1o8TDiYQvdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy
MjdjMjQwHhcNMjYwNzI0MDEwMDUzWhcNMjYwNzI1MDEwMDUzWjAzMTEwLwYDVQQD
Eyg4YThhYWZiYjYxYWZhNmE5NDEwMTcxZjQxMzFmYjFlMjMzNmIzMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZVKk9nI52Uqdfwpu70ouQ/XeMd
CApbXP2TbaouUlJlm1MXe5Vd9fc5ceiHZwt1CvN+j1PtJdIAqg/QfzIHP32XYpf3
fPF/BPlsUjpoHYuC/qOyC6noLI7sYf1TVeBraBqTSuIwcCNlf96Ji664YLULS3oe
fyCKZ3sa0Ag3ghT3R8Ij778qpRXqZPo8RJS4hi04sjtiwEcbfXNecZ5G7jBviv/D
BXlbqH7DtCyi4wUX5EyOPCDTES9vl4aa16Z4v5aaxPRYglFQVbnmwb05mR5pW/wK
pB7BDn9MCi642SvdQWMWMgGyv0wkLH0a0vCE6DJiHsoR4KGgorI4O0035wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqKr7thr6apQQFx9BMfseIzazFqMB8GA1UdIwQY
MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt
OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2
LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrkR7vas
wH4VTYO9AxLgbaJWn1AWYgttn4yi73RmzUNC3jDsjdn7sX8/CktpnpBUlMbYwP74
HQtmSIUdke/1NhG+DZyHQcOMZyPczXMULtXTbEgtQE9OOc6D8GDxas+zuoyaT/SZ
7iPCs0Y/JRx0N2JUumOXkqSZPqzwlYmCChSDUjLTJrf02tFMGLP28HtcGHD9gZRL
YhuSFKtxHraeBMY21oBwYAq72sohr43v6lXfmPqqKNF4BVqeoJFy3NCXkd5NZbFr
S3vvJOk2RImP30TiOMYmXtJVrRZtRs2/KNo1BZKHKKAnSsxwDRHvWM2JiKyOtcN8
KKa/7VQw4kEWgA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:32 2026 by rpki-client