Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File:                     ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier:          TLzW+yN39sl7u0Af5C1zDIRZzLXVsPPtrmX2bWeNfDY=
Subject key identifier:   46:71:AE:AF:99:7C:8E:32:5E:42:05:C2:EB:44:08:6A:E9:0D:EE:B6
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer:       /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial:       019FA0038EE47F5B31D0B27ED2481C0661B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number:          18C7
Signing time:             Sun 26 Jul 2026 20:00:15 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:15 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:15 +0000
Files and hashes:         1: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: aBuMnlPzhRCxjfSUl8qudmof6vHhytCChkidPpo6hxY=)
                          2: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
                          3: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
                          4: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
                          5: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (hash: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:8e:e4:7f:5b:31:d0:b2:7e:d2:48:1c:06:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
        Validity
            Not Before: Jul 26 20:00:15 2026 GMT
            Not After : Jul 27 20:00:15 2026 GMT
        Subject: CN=4671aeaf997c8e325e4205c2eb44086ae90deeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:5c:53:8a:86:20:1f:cb:88:bb:b4:4a:d7:
                    e1:c9:ff:95:d9:9e:3b:db:0c:28:f4:40:57:4c:d0:
                    c6:1f:dd:ba:c9:e5:5d:fb:56:17:27:34:33:b7:46:
                    cc:19:0c:14:e7:fa:fb:35:69:43:40:8a:ba:62:92:
                    1e:25:88:61:c4:da:68:da:a8:f1:f2:7b:2b:d1:e1:
                    3c:54:aa:ab:c5:a3:56:b1:38:a2:c6:bb:f2:8a:f7:
                    9f:06:6b:f5:0b:09:a1:0e:37:19:8a:70:8f:e9:2e:
                    7d:72:d9:66:a0:06:a9:e9:e3:2b:b0:21:39:32:53:
                    9a:36:98:f8:53:67:f3:07:a9:75:82:2a:01:45:d6:
                    11:ca:f9:2b:f4:b7:a2:04:82:35:52:16:52:0a:5f:
                    8a:a3:5b:ed:b5:e6:e4:90:9d:7e:6a:bc:eb:a8:d0:
                    1c:64:57:69:3d:bb:2a:06:34:af:c5:3e:aa:64:a3:
                    49:df:3e:43:08:9e:2a:25:d4:49:53:99:45:e6:b1:
                    23:df:46:b8:ed:1b:c2:d9:6a:51:ae:f6:a2:f2:f1:
                    0d:3d:f1:9d:08:21:d8:2d:21:56:37:8d:ac:ca:d0:
                    d6:98:e5:6e:00:05:f4:da:e3:79:82:81:8c:4a:6a:
                    62:01:69:53:31:69:eb:62:d3:2d:cf:0c:a1:6b:f7:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:AE:AF:99:7C:8E:32:5E:42:05:C2:EB:44:08:6A:E9:0D:EE:B6
            X509v3 Authority Key Identifier:
                keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:86:31:53:95:23:ba:10:75:60:43:06:73:52:bd:98:fd:19:
         31:3c:c2:15:45:b4:69:33:dd:12:d8:5a:e6:d5:f6:f5:99:70:
         d4:5f:f2:87:ad:1e:e6:4c:96:96:d5:64:c8:73:0b:49:a4:ec:
         26:55:ec:5e:3f:be:f3:31:c6:72:64:81:40:c8:d0:75:c9:ab:
         f5:fe:94:6d:9b:43:ec:18:5d:bb:d3:6f:01:0c:ef:b7:e1:f3:
         69:79:c0:e4:a0:95:22:19:31:fe:3e:0f:f6:3f:36:59:37:ed:
         dc:ca:15:b1:5a:df:4e:21:bc:97:35:f0:ac:a1:b4:65:01:de:
         f0:65:8c:61:d7:5f:40:70:8c:29:e9:45:4f:8c:71:72:05:cc:
         24:e7:f1:98:b5:5d:21:ca:80:67:72:34:8e:b2:32:ab:84:45:
         29:9d:c3:72:0b:7c:7a:4d:96:1e:fd:49:51:ad:13:a4:fc:2a:
         4a:5a:c9:00:0e:dc:e6:57:28:e4:47:9b:58:f6:26:ea:13:4b:
         3f:b1:d1:f6:69:f9:9b:59:8d:e3:d2:fa:c6:a9:f4:48:3f:ba:
         af:e9:42:60:07:47:5b:55:b4:e4:a5:ec:60:01:8e:31:03:fa:
         83:36:9d:ca:70:4e:70:5d:46:74:5b:be:b8:db:4a:8e:e7:65:
         ed:5a:e8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gA47kf1sx0LJ+0kgcBmGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw
M2RjNzUwHhcNMjYwNzI2MjAwMDE1WhcNMjYwNzI3MjAwMDE1WjAzMTEwLwYDVQQD
Eyg0NjcxYWVhZjk5N2M4ZTMyNWU0MjA1YzJlYjQ0MDg2YWU5MGRlZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjllcU4qGIB/LiLu0Stfhyf+V2Z47
2wwo9EBXTNDGH926yeVd+1YXJzQzt0bMGQwU5/r7NWlDQIq6YpIeJYhhxNpo2qjx
8nsr0eE8VKqrxaNWsTiixrvyivefBmv1CwmhDjcZinCP6S59ctlmoAap6eMrsCE5
MlOaNpj4U2fzB6l1gioBRdYRyvkr9LeiBII1UhZSCl+Ko1vttebkkJ1+arzrqNAc
ZFdpPbsqBjSvxT6qZKNJ3z5DCJ4qJdRJU5lF5rEj30a47RvC2WpRrvai8vENPfGd
CCHYLSFWN42sytDWmOVuAAX02uN5goGMSmpiAWlTMWnrYtMtzwyha/cSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZxrq+ZfI4yXkIFwutECGrpDe62MB8GA1UdIwQY
MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt
ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez
LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoYxU5Uj
uhB1YEMGc1K9mP0ZMTzCFUW0aTPdEtha5tX29Zlw1F/yh60e5kyWltVkyHMLSaTs
JlXsXj++8zHGcmSBQMjQdcmr9f6UbZtD7Bhdu9NvAQzvt+HzaXnA5KCVIhkx/j4P
9j82WTft3MoVsVrfTiG8lzXwrKG0ZQHe8GWMYddfQHCMKelFT4xxcgXMJOfxmLVd
IcqAZ3I0jrIyq4RFKZ3Dcgt8ek2WHv1JUa0TpPwqSlrJAA7c5lco5EebWPYm6hNL
P7HR9mn5m1mN49L6xqn0SD+6r+lCYAdHW1W05KXsYAGOMQP6gzadynBOcF1GdFu+
uNtKjudl7Vro2A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:27 2026 by rpki-client