Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File:                     IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier:          Xgz4Ir80HXOWJ5dBcKxApJAj46HOd2mO0l9O19P4q+M=
Subject key identifier:   6C:7D:5F:A8:55:D4:37:6A:FE:56:D4:C3:5E:65:39:91:64:FB:24:46
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer:       /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial:       01A0890BA99F99761948D7949AE1A711ADDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number:          1631
Signing time:             Thu 10 Sep 2026 02:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 02:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 02:00:37 +0000
Files and hashes:         1: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (hash: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE=)
                          2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: xhyxBSOrnto6nkVbJNFwYWumiSXoItkGiISKfJVT8DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0b:a9:9f:99:76:19:48:d7:94:9a:e1:a7:11:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
        Validity
            Not Before: Sep 10 02:00:37 2026 GMT
            Not After : Sep 11 02:00:37 2026 GMT
        Subject: CN=6c7d5fa855d4376afe56d4c35e65399164fb2446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:f0:b3:42:80:47:65:6f:55:8a:28:af:02:
                    72:ea:88:6f:6a:05:89:9f:c4:b3:17:17:33:43:77:
                    b5:78:47:e1:f7:00:23:0b:b8:44:39:97:e2:8c:33:
                    ea:1b:48:36:74:37:c4:1c:49:15:e1:a9:fe:55:e5:
                    03:96:6b:9a:e6:16:17:1b:07:47:b9:11:64:de:f8:
                    fe:48:a3:bb:80:bf:4c:63:b8:74:cc:5e:ca:fc:c8:
                    28:70:ad:67:ef:9e:7a:ae:b9:3c:54:d5:4a:ca:ca:
                    2c:d2:cd:dc:8f:d3:28:95:6d:bc:dc:5e:8e:e6:e3:
                    da:92:8a:2a:a5:27:63:32:92:07:7e:55:04:77:73:
                    4b:a8:b1:50:3f:e3:9a:60:5a:b0:34:1b:a8:6f:4d:
                    4a:7d:3d:08:bd:0e:42:94:42:72:ea:50:db:70:11:
                    4b:4b:9d:56:2d:f4:03:45:3b:e8:ba:49:c4:13:7a:
                    a0:c1:63:76:da:51:ee:f8:35:0d:93:e7:a9:35:86:
                    fc:ba:ab:36:86:5a:76:19:be:7f:3a:8a:79:60:9e:
                    a3:a3:2a:49:93:b4:81:a2:f3:9f:b8:8b:88:13:8c:
                    3b:d3:37:2d:df:e7:4a:bc:d4:b0:aa:34:06:76:fe:
                    2f:9d:ba:ab:e1:0a:20:37:df:64:b5:b7:8c:a6:49:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7D:5F:A8:55:D4:37:6A:FE:56:D4:C3:5E:65:39:91:64:FB:24:46
            X509v3 Authority Key Identifier:
                keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b5:dc:41:9b:22:04:b6:a3:52:e2:63:92:0e:8b:39:e4:75:
         1e:12:75:3e:24:f2:95:2a:af:66:e0:ef:77:27:bb:17:73:6f:
         d5:c2:61:1e:26:95:06:66:15:59:cf:b1:83:75:e4:4f:2c:0b:
         3a:4f:35:40:d8:c4:5a:02:97:ab:ca:bd:de:75:f6:1c:9d:90:
         fa:86:1e:2b:b8:85:4a:8d:69:ff:df:8d:2a:94:b5:33:78:7d:
         ce:50:27:b0:46:fe:93:0d:fc:84:bd:c9:2b:e4:53:fd:51:d6:
         e4:6e:8d:6a:0c:21:ef:ac:df:71:f2:92:47:1e:9d:75:35:17:
         7f:4b:ce:e6:c1:43:44:db:c8:f2:72:d4:94:2e:04:06:c5:36:
         d7:a8:da:ae:90:44:9b:1d:25:f7:95:5c:21:9e:32:d3:e0:bd:
         4c:33:16:a5:86:e8:8d:52:1d:42:9d:d7:73:46:bf:7d:55:12:
         a3:68:d1:f6:04:27:2e:41:2b:a4:df:90:3d:be:74:01:54:36:
         28:37:17:7b:8d:2b:81:e1:a7:8b:e2:fa:45:90:c2:b9:fc:57:
         a0:8a:2a:3d:a1:3c:c3:ed:5e:eb:b5:96:c8:ee:73:cb:f1:6f:
         c8:5d:da:0d:29:eb:ed:11:b5:34:3e:ba:f9:0b:dd:ec:1d:2d:
         96:ef:6f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJC6mfmXYZSNeUmuGnEa3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk
NGU0YjYwHhcNMjYwOTEwMDIwMDM3WhcNMjYwOTExMDIwMDM3WjAzMTEwLwYDVQQD
Eyg2YzdkNWZhODU1ZDQzNzZhZmU1NmQ0YzM1ZTY1Mzk5MTY0ZmIyNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Hws0KAR2VvVYoorwJy6ohvagWJ
n8SzFxczQ3e1eEfh9wAjC7hEOZfijDPqG0g2dDfEHEkV4an+VeUDlmua5hYXGwdH
uRFk3vj+SKO7gL9MY7h0zF7K/MgocK1n7556rrk8VNVKysos0s3cj9MolW283F6O
5uPakooqpSdjMpIHflUEd3NLqLFQP+OaYFqwNBuob01KfT0IvQ5ClEJy6lDbcBFL
S51WLfQDRTvouknEE3qgwWN22lHu+DUNk+epNYb8uqs2hlp2Gb5/Oop5YJ6joypJ
k7SBovOfuIuIE4w70zct3+dKvNSwqjQGdv4vnbqr4QogN99ktbeMpklGSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGx9X6hV1Ddq/lbUw15lOZFk+yRGMB8GA1UdIwQY
MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt
NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky
LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7XcQZsi
BLajUuJjkg6LOeR1HhJ1PiTylSqvZuDvdye7F3Nv1cJhHiaVBmYVWc+xg3XkTywL
Ok81QNjEWgKXq8q93nX2HJ2Q+oYeK7iFSo1p/9+NKpS1M3h9zlAnsEb+kw38hL3J
K+RT/VHW5G6Nagwh76zfcfKSRx6ddTUXf0vO5sFDRNvI8nLUlC4EBsU216jarpBE
mx0l95VcIZ4y0+C9TDMWpYbojVIdQp3Xc0a/fVUSo2jR9gQnLkErpN+QPb50AVQ2
KDcXe40rgeGni+L6RZDCufxXoIoqPaE8w+1e67WWyO5zy/FvyF3aDSnr7RG1ND66
+Qvd7B0tlu9vHw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:10 2026 by rpki-client