Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File:                     Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier:          6Guu4IUvlPsAFJyQogj0RSXf6UOPM8c2PACNa7TrL8Q=
Subject key identifier:   5A:8A:C5:F8:16:06:CE:91:A6:5B:34:8D:FE:DC:B1:8B:71:DC:42:D7
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer:       /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial:       01A0016F686FDAF9043668FE8DC600CC7210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:13 +0000
Files and hashes:         1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
                          2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
                          3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: 94Q47Ll/Z9AsUvZnJ9HbWhA11vdKcmH1PmfqPgTG15I=)
                          4: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
                          5: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
                          6: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
                          7: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
                          8: jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa (hash: cGm7WweVD+uApG+/ivyi4OOmekGxuRqlS+jllKuOX7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:68:6f:da:f9:04:36:68:fe:8d:c6:00:cc:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ffc723d157934043134ceed03424a942859d83
        Validity
            Not Before: Aug 14 18:01:13 2026 GMT
            Not After : Aug 15 18:01:13 2026 GMT
        Subject: CN=5a8ac5f81606ce91a65b348dfedcb18b71dc42d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:18:2f:dd:54:81:da:07:33:59:de:87:db:
                    62:6d:8e:f0:c6:49:12:af:06:21:29:51:2d:6c:cf:
                    04:46:ee:1d:d6:2c:4b:11:fb:c4:cf:28:57:69:f6:
                    89:9d:92:d1:94:57:5c:80:7b:e0:4f:48:91:14:8a:
                    b4:5f:48:a2:3b:9b:9a:f3:87:23:5a:98:19:5f:44:
                    5b:44:d0:59:cf:82:79:e1:c3:9e:c9:19:5b:c2:7a:
                    6c:6b:e7:a2:d9:c3:b3:9e:b3:70:61:d1:20:45:29:
                    3c:be:03:cb:75:03:6a:14:de:2f:cd:93:d9:7b:7e:
                    fc:12:ce:bc:23:06:df:db:d0:47:55:f2:91:d8:53:
                    ef:97:6c:31:dd:4c:4f:9f:f1:10:c9:0b:00:7c:dc:
                    1d:c1:b0:66:48:04:15:ab:0e:8c:df:00:a3:c8:28:
                    51:91:48:f6:47:44:be:c0:f8:5d:1d:f1:18:a8:23:
                    e5:ae:b1:44:af:99:58:94:93:e6:78:15:7e:d3:e2:
                    48:0c:ee:76:af:01:59:01:47:3a:c6:9c:84:c5:1d:
                    c0:dc:0c:17:0f:27:70:7f:5f:d6:75:b6:d6:e8:27:
                    a6:4c:7d:e8:dd:68:19:8e:59:5d:b0:89:81:0e:f7:
                    c7:73:07:42:1d:6c:17:a3:6d:9f:35:7f:ce:4c:d5:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:C5:F8:16:06:CE:91:A6:5B:34:8D:FE:DC:B1:8B:71:DC:42:D7
            X509v3 Authority Key Identifier:
                keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:37:05:4b:e8:d2:0a:11:2f:d3:49:c3:15:93:f3:95:e7:bb:
         57:de:b4:cc:6e:2d:19:85:e5:9b:ad:e3:6a:16:95:7e:38:7d:
         ef:d5:2f:93:72:9f:2c:06:1d:1d:db:b3:95:d0:61:31:ce:0f:
         54:84:68:c1:f0:2f:e9:d5:fb:a9:ea:e8:07:1b:14:01:58:34:
         3d:ea:b2:f8:4f:33:85:c4:3d:a8:ef:5e:27:3a:a5:b4:8e:4e:
         b9:97:54:12:a3:c7:65:3d:86:bb:9f:93:30:83:e6:37:52:a9:
         ef:f8:31:97:32:aa:80:d2:39:90:cd:25:12:37:7d:88:08:66:
         09:a0:a6:66:c9:e0:00:81:70:6e:a0:80:5b:b6:15:2e:54:db:
         64:21:60:a1:2b:ff:6e:41:68:14:7b:7a:2c:cb:17:c6:d9:5c:
         01:31:ce:99:82:00:85:f7:e9:f0:b1:3a:bd:1f:ed:a4:27:a0:
         7c:b6:68:f4:2a:06:eb:f6:9b:90:d1:64:49:4c:b5:9c:9e:cb:
         57:50:b3:67:e1:7a:ba:8d:4e:44:15:77:09:c4:65:76:78:19:
         20:aa:ab:92:d4:cb:97:3e:e7:4c:28:62:99:3e:04:c3:c5:cd:
         2b:0d:68:42:87:8e:64:25:de:1e:e7:c0:e0:cf:e5:14:d0:76:
         81:ff:a3:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb2hv2vkENmj+jcYAzHIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmZjNzIzZDE1NzkzNDA0MzEzNGNlZWQwMzQyNGE5NDI4
NTlkODMwHhcNMjYwODE0MTgwMTEzWhcNMjYwODE1MTgwMTEzWjAzMTEwLwYDVQQD
Eyg1YThhYzVmODE2MDZjZTkxYTY1YjM0OGRmZWRjYjE4YjcxZGM0MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvroYL91UgdoHM1neh9tibY7wxkkS
rwYhKVEtbM8ERu4d1ixLEfvEzyhXafaJnZLRlFdcgHvgT0iRFIq0X0iiO5ua84cj
WpgZX0RbRNBZz4J54cOeyRlbwnpsa+ei2cOznrNwYdEgRSk8vgPLdQNqFN4vzZPZ
e378Es68Iwbf29BHVfKR2FPvl2wx3UxPn/EQyQsAfNwdwbBmSAQVqw6M3wCjyChR
kUj2R0S+wPhdHfEYqCPlrrFEr5lYlJPmeBV+0+JIDO52rwFZAUc6xpyExR3A3AwX
Dydwf1/WdbbW6CemTH3o3WgZjlldsImBDvfHcwdCHWwXo22fNX/OTNUu+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqKxfgWBs6Rpls0jf7csYtx3ELXMB8GA1UdIwQY
MBaAFCL/xyPRV5NAQxNM7tA0JKlChZ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzcFS+jS
ChEv00nDFZPzlee7V960zG4tGYXlm63jahaVfjh979Uvk3KfLAYdHduzldBhMc4P
VIRowfAv6dX7qeroBxsUAVg0Peqy+E8zhcQ9qO9eJzqltI5OuZdUEqPHZT2Gu5+T
MIPmN1Kp7/gxlzKqgNI5kM0lEjd9iAhmCaCmZsngAIFwbqCAW7YVLlTbZCFgoSv/
bkFoFHt6LMsXxtlcATHOmYIAhffp8LE6vR/tpCegfLZo9CoG6/abkNFkSUy1nJ7L
V1CzZ+F6uo1ORBV3CcRldngZIKqrktTLlz7nTChimT4Ew8XNKw1oQoeOZCXeHufA
4M/lFNB2gf+j5w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:19 2026 by rpki-client