Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          rN5WpVFUVFtgPBfAmcf2rF/rBCjlhUvyhE5oACFXqbg=
Subject key identifier:   C1:73:64:0C:22:30:A9:9B:6E:C1:20:37:52:1C:C4:4F:C4:92:8E:7E
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       019F1A8D80FC7652160E4584AF2A7EBB7413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          19E5
Signing time:             Tue 30 Jun 2026 22:01:48 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:48 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:48 +0000
Files and hashes:         1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
                          2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
                          3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: EnRPb6FcIyqv3IJ9iMPYoIhfeT1FYRf5t6GBNL+LfkM=)
                          4: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
                          5: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
                          6: b8tjTENeq315r5dRse-s6UddbZ4.roa (hash: vYlKF7u/Roxlc6oO2bXZKSMDVRQSHDaSLg7O8tzKX0A=)
                          7: eoFDO2ulsGRS-ajfrPT4VsU_g4Y.roa (hash: Pe430ht9hLcFtsJRoIrM8U2txHr7LJd967cU4yf62Qc=)
                          8: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8d:80:fc:76:52:16:0e:45:84:af:2a:7e:bb:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Jun 30 22:01:48 2026 GMT
            Not After : Jul  1 22:01:48 2026 GMT
        Subject: CN=c173640c2230a99b6ec12037521cc44fc4928e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:81:ad:57:8a:76:50:e3:82:ce:37:9d:f2:
                    81:99:06:e0:83:9c:40:18:7a:d6:55:61:cb:6a:ea:
                    b8:16:fa:0a:ea:c6:dd:6a:d7:7c:2f:45:f9:22:5f:
                    23:9d:0d:b0:5a:ef:45:4e:2a:58:31:bd:9d:26:81:
                    f5:fd:8d:1c:0b:8d:53:42:14:d4:c5:0a:09:d0:7f:
                    30:56:dd:22:66:0b:87:88:61:84:ad:01:b9:fd:7d:
                    15:b4:47:f6:3d:02:74:9e:e9:ee:4a:0b:fa:a2:43:
                    83:0b:7b:fc:f5:6d:ba:96:21:d7:0f:45:1f:21:dd:
                    83:0f:58:f8:8a:f3:f3:4a:22:1f:77:e7:4f:15:2d:
                    87:a9:4a:20:ef:b0:57:2f:bc:a1:44:ec:81:ca:49:
                    06:d2:39:f4:61:21:1d:06:01:6c:c9:21:44:59:00:
                    40:68:05:ba:cc:c1:46:9f:c8:ed:ab:a5:ce:75:19:
                    2f:93:8b:2f:26:3f:01:63:3b:1a:d2:8a:f3:6a:5e:
                    96:c8:5d:a6:10:8e:7e:37:5e:c2:63:84:ea:76:ad:
                    91:b8:66:55:d5:b0:1b:65:9f:1f:60:54:8c:65:06:
                    c4:f1:40:01:51:d3:17:9c:0d:48:db:33:8f:bd:de:
                    1d:c0:92:80:2e:f9:39:17:13:28:a7:ba:0f:73:f7:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:64:0C:22:30:A9:9B:6E:C1:20:37:52:1C:C4:4F:C4:92:8E:7E
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:9b:0e:b5:78:61:e4:d2:fc:05:37:af:9c:f7:bf:5f:09:
         99:2b:56:84:ac:28:21:67:37:b9:9f:bc:05:d4:6d:eb:54:63:
         3c:e7:0a:64:8d:aa:c2:67:94:f5:73:80:de:9a:58:79:53:b8:
         d3:c1:d5:10:fe:02:4b:48:5b:61:f3:b0:dc:5d:b6:37:78:e7:
         39:ca:13:c1:d4:e1:2a:13:24:79:0f:a6:12:a7:e1:f8:03:a6:
         dd:df:aa:b5:5d:53:e9:4c:5f:07:56:78:74:86:ca:ff:ae:af:
         d6:ec:62:a0:19:ee:fd:38:11:25:e4:ef:6f:98:ad:d7:2d:3d:
         ff:85:01:d5:ed:d2:c4:47:55:fc:00:58:3d:4f:00:c1:d0:48:
         44:72:7c:83:b7:a2:e3:b8:ef:3f:b1:ad:3a:89:0e:f3:62:08:
         f8:e0:69:d2:68:84:d4:2c:53:dd:ec:16:7a:43:fb:b8:13:a6:
         91:69:db:b2:f4:de:40:ce:d7:92:80:39:9d:d4:96:92:4c:03:
         48:e8:1e:a9:e3:82:22:72:3f:a5:6b:79:dc:0f:f3:9a:c6:36:
         0c:48:5a:4a:80:fb:e2:e8:a5:97:ea:91:e5:c6:fb:49:b2:d1:
         b9:83:79:22:a5:24:98:2a:23:87:54:4d:53:78:9f:b8:e8:a9:
         17:85:32:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ajYD8dlIWDkWEryp+u3QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw
ZDQxZTUwHhcNMjYwNjMwMjIwMTQ4WhcNMjYwNzAxMjIwMTQ4WjAzMTEwLwYDVQQD
EyhjMTczNjQwYzIyMzBhOTliNmVjMTIwMzc1MjFjYzQ0ZmM0OTI4ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+BrVeKdlDjgs43nfKBmQbgg5xA
GHrWVWHLauq4FvoK6sbdatd8L0X5Il8jnQ2wWu9FTipYMb2dJoH1/Y0cC41TQhTU
xQoJ0H8wVt0iZguHiGGErQG5/X0VtEf2PQJ0nunuSgv6okODC3v89W26liHXD0Uf
Id2DD1j4ivPzSiIfd+dPFS2HqUog77BXL7yhROyBykkG0jn0YSEdBgFsySFEWQBA
aAW6zMFGn8jtq6XOdRkvk4svJj8BYzsa0orzal6WyF2mEI5+N17CY4Tqdq2RuGZV
1bAbZZ8fYFSMZQbE8UABUdMXnA1I2zOPvd4dwJKALvk5FxMop7oPc/fXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFzZAwiMKmbbsEgN1IcxE/Eko5+MB8GA1UdIwQY
MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt
M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk
LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbqbDrV4
YeTS/AU3r5z3v18JmStWhKwoIWc3uZ+8BdRt61RjPOcKZI2qwmeU9XOA3ppYeVO4
08HVEP4CS0hbYfOw3F22N3jnOcoTwdThKhMkeQ+mEqfh+AOm3d+qtV1T6UxfB1Z4
dIbK/66v1uxioBnu/TgRJeTvb5it1y09/4UB1e3SxEdV/ABYPU8AwdBIRHJ8g7ei
47jvP7GtOokO82II+OBp0miE1CxT3ewWekP7uBOmkWnbsvTeQM7XkoA5ndSWkkwD
SOgeqeOCInI/pWt53A/zmsY2DEhaSoD74uill+qR5cb7SbLRuYN5IqUkmCojh1RN
U3ifuOipF4UyRQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:41:11 2026 by rpki-client