Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          ne9wwD3VQV07+yFNpeiYBUM2+auiuWU9dBHosBTJu7U=
Subject key identifier:   DC:0D:65:67:85:7C:F6:E9:2A:FF:36:0B:5C:84:DC:D9:7E:3A:5C:08
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       019FA1F2020E9CD8EF8309331452CFEF44D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          104D
Signing time:             Mon 27 Jul 2026 05:00:19 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:19 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:19 +0000
Files and hashes:         1: 12oJAQaykF24uiDu8PfEQfF5lC8.asa (hash: Spk8ISKQ3e9V1cZuheGuwP/8MVP77gUbjkWE1om4jWg=)
                          2: BgstHAgngBviD_F80ovwftneFbk.roa (hash: LvdqknknurzyurdSdn/1YfYznErdxTUKQh2TkRGRbFM=)
                          3: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: TUrWfxuOm4TOgtmYovTY4Lg0RVnEV7MM9ccvm1KBznE=)
                          4: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:02:0e:9c:d8:ef:83:09:33:14:52:cf:ef:44:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: Jul 27 05:00:19 2026 GMT
            Not After : Jul 28 05:00:19 2026 GMT
        Subject: CN=dc0d6567857cf6e92aff360b5c84dcd97e3a5c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:29:55:7a:30:f4:ee:75:73:e9:f2:e4:0b:
                    fc:fc:5d:79:d1:01:13:0a:c4:8e:8c:5e:42:a6:19:
                    4b:f3:f4:ae:58:c7:d0:70:73:f7:48:ce:25:be:dc:
                    af:50:16:bc:36:58:39:42:5e:2e:bf:bb:e1:d0:a8:
                    ff:c6:45:11:cd:98:36:d6:40:8d:33:68:1f:ef:21:
                    f6:1e:4d:77:86:9f:c5:71:e0:86:c9:35:7d:65:67:
                    3d:14:a1:81:c3:cb:1f:91:d5:8d:47:e8:74:44:3b:
                    ab:83:2f:00:c9:1a:62:49:1f:42:68:d4:25:72:02:
                    0d:2e:94:16:4c:d8:65:8c:b1:17:73:5f:14:ae:9c:
                    d8:44:68:05:7d:02:c8:8e:fb:42:02:c9:e0:2f:52:
                    85:f1:f1:25:73:2a:23:e0:bb:16:3e:60:5c:af:c3:
                    ee:05:96:7b:ec:64:0b:16:56:e9:13:30:3a:f6:ee:
                    7e:05:3c:fc:be:c7:11:2b:f8:44:20:fa:69:be:3c:
                    cc:b8:8f:2e:f0:bd:d7:16:69:65:ad:11:ee:fb:09:
                    71:45:cd:f4:a2:86:df:c0:9c:65:54:2b:7d:13:cd:
                    01:8a:08:5e:82:3b:d3:c3:dd:d4:c8:16:87:74:d2:
                    34:66:52:1f:37:ab:e4:31:6e:26:73:70:2c:e2:74:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0D:65:67:85:7C:F6:E9:2A:FF:36:0B:5C:84:DC:D9:7E:3A:5C:08
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:a4:e5:d6:f0:27:4c:a5:56:73:89:1a:ae:23:bd:fb:5f:
         53:64:54:37:4f:a4:8b:34:77:0e:11:85:a2:b8:8f:f5:a0:ea:
         3a:dd:db:d3:68:1b:dc:a9:a4:82:ca:e4:45:49:76:6f:c4:91:
         da:ee:ce:46:2b:1e:78:39:8d:6a:f7:0f:4f:fd:67:dd:c8:a0:
         9a:a0:f1:f8:9a:4f:69:4c:bb:44:e9:95:7b:fd:39:c7:94:cb:
         fd:ab:d6:0a:ea:42:27:05:f2:87:20:ac:6c:65:25:e5:be:f6:
         dc:63:cb:ca:73:e6:95:19:99:57:20:20:48:b8:f1:2f:16:45:
         d8:2d:e4:d6:0c:8c:c7:2d:fa:e1:19:44:df:2b:80:eb:9d:bd:
         12:fa:70:13:00:09:13:87:b1:ae:46:9b:cb:5a:ac:9b:0e:48:
         81:64:90:cb:b7:7a:aa:c2:8f:dc:56:3a:33:99:8a:3b:aa:d3:
         e8:75:f4:6f:91:39:04:4a:3a:e4:42:a5:ab:ce:b1:ef:61:6c:
         60:50:41:fd:32:4a:9e:d4:c3:68:17:90:6a:e8:1a:ab:a3:43:
         fb:6f:1c:fa:bc:89:39:8c:ea:2b:d5:66:86:54:37:20:a7:8e:
         11:35:c2:2e:f1:d4:75:88:8f:71:11:1a:dc:9e:48:d4:f4:70:
         98:7f:86:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8gIOnNjvgwkzFFLP70TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwNzI3MDUwMDE5WhcNMjYwNzI4MDUwMDE5WjAzMTEwLwYDVQQD
EyhkYzBkNjU2Nzg1N2NmNmU5MmFmZjM2MGI1Yzg0ZGNkOTdlM2E1YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3cpVXow9O51c+ny5Av8/F150QET
CsSOjF5CphlL8/SuWMfQcHP3SM4lvtyvUBa8Nlg5Ql4uv7vh0Kj/xkURzZg21kCN
M2gf7yH2Hk13hp/FceCGyTV9ZWc9FKGBw8sfkdWNR+h0RDurgy8AyRpiSR9CaNQl
cgINLpQWTNhljLEXc18UrpzYRGgFfQLIjvtCAsngL1KF8fElcyoj4LsWPmBcr8Pu
BZZ77GQLFlbpEzA69u5+BTz8vscRK/hEIPppvjzMuI8u8L3XFmllrRHu+wlxRc30
oobfwJxlVCt9E80BighegjvTw93UyBaHdNI0ZlIfN6vkMW4mc3As4nRiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwNZWeFfPbpKv82C1yE3Nl+OlwIMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcKk5dbw
J0ylVnOJGq4jvftfU2RUN0+kizR3DhGForiP9aDqOt3b02gb3KmkgsrkRUl2b8SR
2u7ORiseeDmNavcPT/1n3cigmqDx+JpPaUy7ROmVe/05x5TL/avWCupCJwXyhyCs
bGUl5b723GPLynPmlRmZVyAgSLjxLxZF2C3k1gyMxy364RlE3yuA6529EvpwEwAJ
E4exrkaby1qsmw5IgWSQy7d6qsKP3FY6M5mKO6rT6HX0b5E5BEo65EKlq86x72Fs
YFBB/TJKntTDaBeQaugaq6ND+28c+ryJOYzqK9VmhlQ3IKeOETXCLvHUdYiPcREa
3J5I1PRwmH+GGw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:00 2026 by rpki-client