Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File:                     IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier:          UC9mkV3RXp7XudBx4KpVdhKkB0/C9K8v3KEOH/QU75Q=
Subject key identifier:   BC:73:2A:11:1C:20:2F:56:F2:43:5B:9B:65:BF:1B:85:31:ED:7E:81
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer:       /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial:       019FACE388BF4139BCE27094F8B01E9AF660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number:          081F
Signing time:             Wed 29 Jul 2026 08:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:20 +0000
Files and hashes:         1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
                          2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: FggQqDzs/fOKelPtfpTb/p56y8cwuk9NUlWZRXGUfv4=)
                          3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:88:bf:41:39:bc:e2:70:94:f8:b0:1e:9a:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
        Validity
            Not Before: Jul 29 08:00:20 2026 GMT
            Not After : Jul 30 08:00:20 2026 GMT
        Subject: CN=bc732a111c202f56f2435b9b65bf1b8531ed7e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:5f:d4:63:1f:48:63:28:4d:f9:b8:69:ca:
                    a2:8a:c3:e5:68:ac:f0:2b:ae:cf:92:f2:00:9b:44:
                    3a:6c:a0:e4:a7:e2:96:ae:b4:b3:29:80:c7:53:01:
                    ce:dc:ef:18:03:a7:45:f4:6d:1f:24:0c:92:98:97:
                    8d:61:7b:d8:c0:2c:2c:bc:f7:b1:50:68:ba:6b:74:
                    30:bb:13:6e:12:b8:0d:4f:bf:1b:9a:3f:77:d5:7c:
                    14:68:68:eb:8b:bd:32:60:62:c6:66:c1:78:d0:53:
                    33:b5:0a:c4:ee:fe:6f:2b:32:6f:fe:95:24:c9:da:
                    67:16:db:21:d8:fd:aa:97:38:4d:6c:ff:40:0c:86:
                    8c:f4:ff:94:7f:03:98:9f:05:0c:b3:41:e8:06:3f:
                    a1:d9:d0:cf:dd:19:f0:6c:0d:05:28:08:28:6a:c3:
                    85:cf:79:6c:2a:7b:1e:be:1e:b0:b5:0a:1b:f6:87:
                    f8:88:b2:95:78:90:bf:9c:39:35:ce:9f:e6:27:60:
                    f5:03:78:c6:81:34:68:00:c8:eb:68:72:70:5c:89:
                    45:67:b2:1b:0d:2f:91:67:b7:e6:de:b7:cd:79:74:
                    ac:98:33:19:a2:78:fc:b9:76:77:ce:7d:f1:5a:9e:
                    c7:ff:d6:fb:23:03:e6:fd:8a:6c:be:9d:9f:2c:b3:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:73:2A:11:1C:20:2F:56:F2:43:5B:9B:65:BF:1B:85:31:ED:7E:81
            X509v3 Authority Key Identifier:
                keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:6b:06:20:9a:ab:bf:18:bd:e0:4e:d1:89:7e:ed:6b:82:
         59:85:e2:83:9e:e6:da:a2:d1:18:de:77:5d:c5:d0:bf:23:72:
         f0:0d:e0:ee:62:dc:0a:56:43:6f:a6:df:fa:95:b5:2e:32:3f:
         8d:52:0a:c8:04:cc:7a:b6:78:fd:47:93:eb:8a:01:4f:65:fa:
         89:a3:4a:bd:c9:d4:b9:8c:57:5c:ae:4a:b9:19:c4:ec:34:aa:
         f0:28:86:6d:1d:1f:e7:fe:b3:fb:fa:5b:9d:08:dc:d6:b8:b5:
         ce:3c:85:24:cc:50:44:86:20:46:65:3a:57:b8:ed:be:6d:6d:
         98:e0:13:ab:89:88:1f:e5:06:c1:96:87:0c:40:56:c2:83:ce:
         f3:f3:2e:9d:01:53:7f:b2:4d:d1:d7:ee:f0:0b:5f:43:42:a5:
         e1:58:64:05:41:f2:a7:ae:8e:c4:50:7e:52:b6:b9:08:50:1f:
         f9:ef:4b:57:36:bf:fa:48:1f:7b:ef:8c:bd:9e:40:e3:25:a5:
         93:eb:ce:c0:d2:c5:40:b0:ba:a9:05:62:1c:92:ca:51:38:77:
         23:4f:5d:88:42:85:08:cc:a7:2e:f0:b8:c8:1c:d8:8d:5e:d3:
         db:17:a5:36:81:32:23:6e:4d:9d:80:b9:b7:fb:c6:b2:38:0e:
         55:5d:e2:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s44i/QTm84nCU+LAemvZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm
NGZhODkwHhcNMjYwNzI5MDgwMDIwWhcNMjYwNzMwMDgwMDIwWjAzMTEwLwYDVQQD
EyhiYzczMmExMTFjMjAyZjU2ZjI0MzViOWI2NWJmMWI4NTMxZWQ3ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Bf1GMfSGMoTfm4acqiisPlaKzw
K67PkvIAm0Q6bKDkp+KWrrSzKYDHUwHO3O8YA6dF9G0fJAySmJeNYXvYwCwsvPex
UGi6a3QwuxNuErgNT78bmj931XwUaGjri70yYGLGZsF40FMztQrE7v5vKzJv/pUk
ydpnFtsh2P2qlzhNbP9ADIaM9P+UfwOYnwUMs0HoBj+h2dDP3RnwbA0FKAgoasOF
z3lsKnsevh6wtQob9of4iLKVeJC/nDk1zp/mJ2D1A3jGgTRoAMjraHJwXIlFZ7Ib
DS+RZ7fm3rfNeXSsmDMZonj8uXZ3zn3xWp7H/9b7IwPm/Ypsvp2fLLOjEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxzKhEcIC9W8kNbm2W/G4Ux7X6BMB8GA1UdIwQY
MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt
MWQ4MmFiMTVjNDE1LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1
LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZ1rBiCa
q78YveBO0Yl+7WuCWYXig57m2qLRGN53XcXQvyNy8A3g7mLcClZDb6bf+pW1LjI/
jVIKyATMerZ4/UeT64oBT2X6iaNKvcnUuYxXXK5KuRnE7DSq8CiGbR0f5/6z+/pb
nQjc1ri1zjyFJMxQRIYgRmU6V7jtvm1tmOATq4mIH+UGwZaHDEBWwoPO8/MunQFT
f7JN0dfu8AtfQ0Kl4VhkBUHyp66OxFB+Ura5CFAf+e9LVza/+kgfe++MvZ5A4yWl
k+vOwNLFQLC6qQViHJLKUTh3I09diEKFCMynLvC4yBzYjV7T2xelNoEyI25NnYC5
t/vGsjgOVV3icw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:43 2026 by rpki-client