Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File:                     IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier:          HeJ2lw5uwt0UrRph0jCJn8GzpS99LJ3TX7heRWCVTIA=
Subject key identifier:   08:D6:A5:0A:8A:C7:DF:82:4C:32:3B:6D:EE:5F:C2:3E:56:7F:25:F6
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer:       /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial:       01A04273AB485527A2DDB642150DF433017B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number:          0666
Signing time:             Thu 27 Aug 2026 09:01:11 +0000
Manifest this update:     Thu 27 Aug 2026 09:01:11 +0000
Manifest next update:     Fri 28 Aug 2026 09:01:11 +0000
Files and hashes:         1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: qZLhOuSTjAysEN8m4KcBXeao0sMbdKAg2szwouzIrWg=)
                          2: nZLcR_yXR-0QVOrPZOSeS_-bslo.roa (hash: B2ppS1gw4DWVMWucnYpphzHEsSRmHapQBZqWEMy4B3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:42:73:ab:48:55:27:a2:dd:b6:42:15:0d:f4:33:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
        Validity
            Not Before: Aug 27 09:01:11 2026 GMT
            Not After : Aug 28 09:01:11 2026 GMT
        Subject: CN=08d6a50a8ac7df824c323b6dee5fc23e567f25f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:54:3f:f8:c2:f1:32:7f:90:91:d6:2a:79:
                    d8:d5:c4:a9:5d:c8:8d:95:71:49:d5:09:9a:6f:d8:
                    f0:1d:73:8c:9b:76:b5:00:74:cb:b5:bf:71:7b:c8:
                    b9:e0:61:4a:58:ac:c4:61:da:35:db:fd:a8:62:86:
                    d2:21:ae:db:9a:6f:94:50:46:f1:50:40:c2:ae:50:
                    a1:a2:82:b8:ac:1b:42:41:3d:9a:c2:11:8e:77:1e:
                    eb:1a:d1:5c:54:94:7f:9b:3b:1a:45:94:c1:fc:8c:
                    67:ea:3d:c1:90:2f:86:03:39:0c:ec:9b:6d:7d:de:
                    89:ed:15:28:72:46:35:80:1f:c8:ea:05:ca:7b:90:
                    30:4c:f2:f0:cc:83:db:75:c2:2b:ed:f4:69:0f:be:
                    60:95:2b:14:9d:d7:54:28:9a:1d:3f:73:7f:73:6c:
                    a2:b2:ee:b4:fe:40:32:d7:b8:39:01:f9:3b:dc:6e:
                    e9:04:e6:5c:06:2b:f3:dc:e8:f7:ae:26:3d:02:a4:
                    bc:a3:6e:98:8d:24:75:be:f9:f4:f8:9f:86:b5:c2:
                    95:03:b9:74:b7:27:b7:f0:31:39:e9:80:ee:a7:0d:
                    8e:00:11:75:81:4d:fe:41:8a:b7:de:42:51:f3:36:
                    d4:4d:7d:f8:bf:8f:21:54:03:99:a4:fb:c4:c7:01:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:A5:0A:8A:C7:DF:82:4C:32:3B:6D:EE:5F:C2:3E:56:7F:25:F6
            X509v3 Authority Key Identifier:
                keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:a5:dd:37:6a:2f:dc:98:9f:78:99:35:ea:77:72:92:5b:
         3c:98:c8:34:c9:1d:05:24:ff:18:cd:38:1b:4d:06:0e:d6:ef:
         2a:fc:3e:e8:37:ee:03:6f:3d:a6:f9:b7:26:85:8a:16:8b:71:
         9c:89:e8:d1:e5:db:e4:cf:2e:56:a7:c4:4e:ea:eb:0d:d0:22:
         6a:09:66:e7:6f:5a:59:dc:8c:f0:36:e4:26:b4:1e:21:e0:30:
         ee:e8:1d:ce:b6:02:da:e2:b5:9d:27:c2:fe:52:ae:2b:c3:6f:
         74:60:43:fd:e8:18:1e:f6:97:49:b8:9c:c6:bc:70:06:32:98:
         63:96:67:2e:b6:05:65:e2:1f:42:2a:09:3a:c3:47:88:1e:f1:
         4f:62:51:b5:1a:da:78:ca:75:52:57:9d:45:a9:23:d2:9f:36:
         4e:ef:09:b0:6b:61:5e:a7:1d:e0:10:52:bf:ee:d7:87:fb:25:
         fb:21:af:eb:3a:1e:1d:5e:29:56:a0:8a:04:dc:b0:36:5f:e1:
         2a:fd:66:79:ba:f5:50:e6:27:f3:ab:f5:b8:59:93:2d:85:f4:
         87:87:66:33:cb:61:ce:97:8f:9d:14:cc:e5:97:b1:f5:01:04:
         63:4c:c6:02:e0:27:e0:75:c1:95:a0:ea:6a:1e:8d:8e:2e:0b:
         bf:d6:bd:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBCc6tIVSei3bZCFQ30MwF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwN2U5MGQ2MmRlMmM3MjdjZDQ1MzlhMmYwNzBjNGU5MWRm
MzJiYjQwHhcNMjYwODI3MDkwMTExWhcNMjYwODI4MDkwMTExWjAzMTEwLwYDVQQD
EygwOGQ2YTUwYThhYzdkZjgyNGMzMjNiNmRlZTVmYzIzZTU2N2YyNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnxUP/jC8TJ/kJHWKnnY1cSpXciN
lXFJ1Qmab9jwHXOMm3a1AHTLtb9xe8i54GFKWKzEYdo12/2oYobSIa7bmm+UUEbx
UEDCrlChooK4rBtCQT2awhGOdx7rGtFcVJR/mzsaRZTB/Ixn6j3BkC+GAzkM7Jtt
fd6J7RUockY1gB/I6gXKe5AwTPLwzIPbdcIr7fRpD75glSsUnddUKJodP3N/c2yi
su60/kAy17g5Afk73G7pBOZcBivz3Oj3riY9AqS8o26YjSR1vvn0+J+GtcKVA7l0
tye38DE56YDupw2OABF1gU3+QYq33kJR8zbUTX34v48hVAOZpPvExwGuGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjWpQqKx9+CTDI7be5fwj5WfyX2MB8GA1UdIwQY
MBaAFCB+kNYt4scnzUU5ovBwxOkd8yu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYt
ZmJlNjhmZjYyN2IyLzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYtZmJlNjhmZjYyN2Iy
LzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqql3Tdq
L9yYn3iZNep3cpJbPJjINMkdBST/GM04G00GDtbvKvw+6DfuA289pvm3JoWKFotx
nIno0eXb5M8uVqfETurrDdAiaglm529aWdyM8DbkJrQeIeAw7ugdzrYC2uK1nSfC
/lKuK8NvdGBD/egYHvaXSbicxrxwBjKYY5ZnLrYFZeIfQioJOsNHiB7xT2JRtRra
eMp1UledRakj0p82Tu8JsGthXqcd4BBSv+7Xh/sl+yGv6zoeHV4pVqCKBNywNl/h
Kv1mebr1UOYn86v1uFmTLYX0h4dmM8thzpePnRTM5Zex9QEEY0zGAuAn4HXBlaDq
ah6Nji4Lv9a9OQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:10:38 2026 by rpki-client