Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          bgGbNCR7uHi1Y3AY/NAEa1aTYeQKUgUm3yGHm0+NwFU=
Subject key identifier:   9C:12:2B:C5:19:BB:7E:51:1E:0B:24:03:E9:73:7C:21:FE:13:FE:6A
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019FD0B9FE32BD1723EB74E2EE855CCFCE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          04FD
Signing time:             Wed 05 Aug 2026 07:01:17 +0000
Manifest this update:     Wed 05 Aug 2026 07:01:17 +0000
Manifest next update:     Thu 06 Aug 2026 07:01:17 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: aRnS/60i4jjQdIfVADKte+TCK8zphNSGPw5sIO+4NRI=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa (hash: 8g1lQ5gsbw6TqXkgRbd0BplxOk5M2zN7QFi/L4xQDp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d0:b9:fe:32:bd:17:23:eb:74:e2:ee:85:5c:cf:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Aug  5 07:01:17 2026 GMT
            Not After : Aug  6 07:01:17 2026 GMT
        Subject: CN=9c122bc519bb7e511e0b2403e9737c21fe13fe6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:13:20:06:ca:5c:76:e7:d2:ee:f1:4e:be:
                    bf:56:bb:65:2d:58:8c:8c:12:84:1e:b2:c8:82:93:
                    6f:b3:8d:e0:f4:ed:12:7a:b4:d9:3e:b3:6a:82:67:
                    44:2e:e6:60:0f:06:ff:f0:6f:f4:8e:87:6c:60:2a:
                    e6:4a:ce:77:9c:40:ea:e3:37:03:02:1d:62:ef:00:
                    d7:f7:2b:fe:33:03:19:b7:d1:de:aa:8b:13:bf:9e:
                    f8:c4:d2:c6:a6:53:01:0c:1c:b0:5a:73:83:a1:91:
                    85:fc:25:f1:32:b3:23:9a:a3:05:a0:28:6f:3b:16:
                    fa:56:d8:5f:8f:3e:39:85:e7:f5:a2:d1:b1:fa:3e:
                    d0:b8:66:e9:02:0b:f0:6e:57:e8:a6:41:36:ba:b7:
                    03:b8:a2:10:08:d7:09:0b:1c:f7:fe:2f:11:c0:34:
                    14:ab:4d:ef:98:7d:e5:7d:49:ac:64:07:fa:ba:23:
                    bb:38:26:55:54:45:46:1c:09:65:1a:d4:0d:21:7a:
                    90:52:b3:68:a5:2a:05:8b:c4:8f:a1:3d:2d:a7:f4:
                    73:5f:5f:fd:95:b7:ad:8f:a5:aa:44:ba:aa:36:54:
                    c5:0a:21:a9:40:07:79:c7:37:9e:f9:c3:e3:c3:87:
                    fd:7f:27:30:fe:fd:60:25:64:95:9a:e6:f8:92:c2:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:2B:C5:19:BB:7E:51:1E:0B:24:03:E9:73:7C:21:FE:13:FE:6A
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:1f:f7:a4:9c:ad:db:11:bd:d4:74:ff:9a:e7:49:40:13:
         b3:6e:3f:77:92:52:36:15:e8:a6:aa:63:60:68:d8:2d:4b:0d:
         96:f3:05:d2:07:7b:93:7f:39:97:ec:67:22:db:14:ca:df:19:
         76:a9:31:dd:8b:9d:ff:ae:bf:34:8b:dc:fb:bc:28:99:3d:be:
         2d:b0:a3:9d:24:5a:0a:47:39:e6:77:1f:d0:b1:dc:98:cc:e8:
         e6:db:93:64:72:20:45:1b:17:3d:04:73:68:2e:03:3f:3e:b1:
         d9:47:d2:f3:21:d7:63:7d:95:a4:1f:5a:c2:d7:e9:2e:9a:8f:
         5c:83:a7:f9:94:fa:b3:42:5f:a2:1c:44:bc:1e:d5:aa:a2:9c:
         6a:c8:43:f1:12:9a:d2:3a:21:61:22:5c:75:92:35:87:ec:a0:
         ea:0f:98:ba:40:09:6f:13:c8:f6:be:39:c5:17:35:b9:78:58:
         a9:fb:66:52:e5:a8:2a:d8:f0:3e:2d:8b:9b:84:b5:3d:6e:bf:
         46:9b:62:a1:9d:00:48:48:8f:67:a4:9c:ac:57:23:20:5a:84:
         bc:2a:ca:3e:29:99:66:97:21:7e:f6:53:6c:62:96:32:fc:66:
         21:e2:4f:2b:cd:5e:e2:39:7d:24:38:31:7b:f3:e8:54:82:1f:
         a0:05:13:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Quf4yvRcj63Ti7oVcz84LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy
MjdjMjQwHhcNMjYwODA1MDcwMTE3WhcNMjYwODA2MDcwMTE3WjAzMTEwLwYDVQQD
Eyg5YzEyMmJjNTE5YmI3ZTUxMWUwYjI0MDNlOTczN2MyMWZlMTNmZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqATIAbKXHbn0u7xTr6/VrtlLViM
jBKEHrLIgpNvs43g9O0SerTZPrNqgmdELuZgDwb/8G/0jodsYCrmSs53nEDq4zcD
Ah1i7wDX9yv+MwMZt9HeqosTv574xNLGplMBDBywWnODoZGF/CXxMrMjmqMFoChv
Oxb6Vthfjz45hef1otGx+j7QuGbpAgvwblfopkE2urcDuKIQCNcJCxz3/i8RwDQU
q03vmH3lfUmsZAf6uiO7OCZVVEVGHAllGtQNIXqQUrNopSoFi8SPoT0tp/RzX1/9
lbetj6WqRLqqNlTFCiGpQAd5xzee+cPjw4f9fycw/v1gJWSVmub4ksLolQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwSK8UZu35RHgskA+lzfCH+E/5qMB8GA1UdIwQY
MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt
OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2
LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAMf96Sc
rdsRvdR0/5rnSUATs24/d5JSNhXopqpjYGjYLUsNlvMF0gd7k385l+xnItsUyt8Z
dqkx3Yud/66/NIvc+7womT2+LbCjnSRaCkc55ncf0LHcmMzo5tuTZHIgRRsXPQRz
aC4DPz6x2UfS8yHXY32VpB9awtfpLpqPXIOn+ZT6s0JfohxEvB7VqqKcashD8RKa
0johYSJcdZI1h+yg6g+YukAJbxPI9r45xRc1uXhYqftmUuWoKtjwPi2Lm4S1PW6/
RptioZ0ASEiPZ6ScrFcjIFqEvCrKPimZZpchfvZTbGKWMvxmIeJPK81e4jl9JDgx
e/PoVIIfoAUTpA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 14:22:18 2026 by rpki-client