Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File:                     IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier:          Lo3B5lHgazjT5JeqTYcMuLN4xwalg/UtW1LSS36Hi2k=
Subject key identifier:   9D:F1:B8:8E:07:22:83:6C:1E:2F:FC:26:56:C5:D9:E3:4A:E5:DD:AE
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer:       /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial:       01A010E221D61FE881E0F697F7DABF0C8802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number:          1991
Signing time:             Mon 17 Aug 2026 18:00:50 +0000
Manifest this update:     Mon 17 Aug 2026 18:00:50 +0000
Manifest next update:     Tue 18 Aug 2026 18:00:50 +0000
Files and hashes:         1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: 5r/RQoCjLwsmqkVNtnSYD/fI9sFj0srl31vp/2QHgAg=)
                          2: huWAMVD5OszFJjEyZMJGyZnVtD8.roa (hash: GrjeMdAe8buThfTaZfxv43GTKukIwEfBZ4IJ+OfmdQY=)
                          3: tHyYlmCt8b_w6qmDnfmJNsi4fgg.roa (hash: kaLv44KKvA/h97d8YwPeGLLWQK0x8whGbJscB5eOBiw=)
                          4: vHIrFpXjJbBEQLCFk5449-qqOs0.roa (hash: fu+mos6wV/3DS80C/FDLDSbQMT9S0fJqCvMfKTRbzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:10:e2:21:d6:1f:e8:81:e0:f6:97:f7:da:bf:0c:88:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
        Validity
            Not Before: Aug 17 18:00:50 2026 GMT
            Not After : Aug 18 18:00:50 2026 GMT
        Subject: CN=9df1b88e0722836c1e2ffc2656c5d9e34ae5ddae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:de:ec:37:a6:c7:e3:d2:3e:5e:b1:e1:cf:
                    5e:d2:82:5a:e6:3b:e5:c4:27:80:0d:31:42:30:6b:
                    a8:cd:d7:52:6a:8d:13:8c:e8:14:96:5c:35:70:32:
                    33:c2:10:76:54:bb:08:56:83:6a:9c:c1:04:a6:8d:
                    71:cb:67:ae:79:40:00:5c:36:9a:46:ec:d1:af:ff:
                    12:79:b8:3d:fa:56:06:83:b0:90:2a:3d:f1:8e:d4:
                    c2:1a:11:e7:9f:8a:d1:6e:53:f3:b7:50:4c:e1:83:
                    7f:55:f4:f5:1a:34:26:3c:0e:5d:ba:01:7b:28:a1:
                    9b:8c:aa:ae:88:ef:66:2b:92:8b:89:ec:fa:b2:c5:
                    ed:e4:bb:20:5f:24:e5:9a:81:5e:41:f9:48:28:67:
                    cd:af:8a:03:74:4c:d4:22:01:d4:b8:49:99:f6:60:
                    54:48:0d:9f:eb:21:06:1a:98:44:6f:f7:3f:bb:21:
                    cf:90:2a:be:56:8d:13:31:c3:52:a4:37:62:ed:4d:
                    1c:92:5e:8f:0a:7e:0f:6e:1e:ac:dc:b8:e0:dc:4c:
                    70:af:51:4c:68:53:e9:a4:d7:ea:f5:09:76:4a:c7:
                    4d:2d:bf:72:ef:a0:fb:7e:e8:81:e7:c2:7a:91:f8:
                    b1:c0:71:64:94:97:66:3a:62:a5:88:a3:b6:94:b8:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F1:B8:8E:07:22:83:6C:1E:2F:FC:26:56:C5:D9:E3:4A:E5:DD:AE
            X509v3 Authority Key Identifier:
                keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:63:3a:92:98:b9:43:c2:6a:cc:d1:c7:b3:01:1d:16:ab:
         d4:8c:9f:b2:3f:ef:48:3a:04:2f:ce:5d:aa:5d:20:53:ce:77:
         42:cc:89:43:5b:a7:45:a6:e0:37:0d:f8:2c:9b:8a:9f:e8:67:
         7f:74:33:55:21:34:56:6c:8c:8d:0c:39:a6:f8:50:5f:fe:7d:
         db:06:07:f6:41:5a:9d:b3:82:4c:8e:df:7f:e6:3f:7e:fd:17:
         8c:6b:85:67:95:e6:07:22:9d:61:91:56:f9:16:33:91:8c:82:
         bb:a0:41:a5:12:89:2f:51:67:f1:cf:07:bb:d4:3d:13:39:bd:
         12:2c:6d:20:7d:de:05:ea:20:ed:01:85:c4:5e:77:3a:53:8a:
         f6:95:98:7e:e8:21:67:db:69:3d:af:00:58:27:b3:7d:8c:54:
         49:6b:37:c7:e9:5e:8c:55:76:1f:99:83:88:6e:2f:48:18:ad:
         6c:5a:8a:95:9f:f1:8c:5f:2e:87:47:06:bd:a4:ee:e8:fe:7c:
         59:57:da:38:2d:b9:40:a2:79:b0:ba:57:27:16:23:e8:2c:83:
         fa:12:98:a3:11:20:d5:2c:61:51:94:76:c2:05:85:89:5f:54:
         c1:f7:74:64:fe:7e:86:80:37:af:9b:aa:31:53:c5:bb:52:f7:
         2b:8e:49:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAQ4iHWH+iB4PaX99q/DIgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm
Y2ZhMmUwHhcNMjYwODE3MTgwMDUwWhcNMjYwODE4MTgwMDUwWjAzMTEwLwYDVQQD
Eyg5ZGYxYjg4ZTA3MjI4MzZjMWUyZmZjMjY1NmM1ZDllMzRhZTVkZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Xe7Demx+PSPl6x4c9e0oJa5jvl
xCeADTFCMGuozddSao0TjOgUllw1cDIzwhB2VLsIVoNqnMEEpo1xy2eueUAAXDaa
RuzRr/8Sebg9+lYGg7CQKj3xjtTCGhHnn4rRblPzt1BM4YN/VfT1GjQmPA5dugF7
KKGbjKquiO9mK5KLiez6ssXt5LsgXyTlmoFeQflIKGfNr4oDdEzUIgHUuEmZ9mBU
SA2f6yEGGphEb/c/uyHPkCq+Vo0TMcNSpDdi7U0ckl6PCn4Pbh6s3Ljg3Exwr1FM
aFPppNfq9Ql2SsdNLb9y76D7fuiB58J6kfixwHFklJdmOmKliKO2lLg77QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3xuI4HIoNsHi/8JlbF2eNK5d2uMB8GA1UdIwQY
MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt
NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj
LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuRjOpKY
uUPCaszRx7MBHRar1Iyfsj/vSDoEL85dql0gU853QsyJQ1unRabgNw34LJuKn+hn
f3QzVSE0VmyMjQw5pvhQX/592wYH9kFanbOCTI7ff+Y/fv0XjGuFZ5XmByKdYZFW
+RYzkYyCu6BBpRKJL1Fn8c8Hu9Q9Ezm9EixtIH3eBeog7QGFxF53OlOK9pWYfugh
Z9tpPa8AWCezfYxUSWs3x+lejFV2H5mDiG4vSBitbFqKlZ/xjF8uh0cGvaTu6P58
WVfaOC25QKJ5sLpXJxYj6CyD+hKYoxEg1SxhUZR2wgWFiV9Uwfd0ZP5+hoA3r5uq
MVPFu1L3K45JaA==
-----END CERTIFICATE-----
Generated at Mon Aug 17 21:15:35 2026 by rpki-client