Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File:                     IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier:          SY68LqpN/vvkRzErsu5KunAhv7/MEk1tUplx+kORxaI=
Subject key identifier:   3D:99:E2:2C:28:73:B9:7D:B4:F4:DE:41:DD:2E:6B:F1:F1:D6:75:25
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer:       /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial:       019D9AAC4A3CD66C403340CE869451B31BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number:          0506
Signing time:             Fri 17 Apr 2026 09:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:15 +0000
Files and hashes:         1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: p/SNeHai689T0uO7rqiBxUotbYTLYPbHY8wDiPIf1X8=)
                          2: nZLcR_yXR-0QVOrPZOSeS_-bslo.roa (hash: B2ppS1gw4DWVMWucnYpphzHEsSRmHapQBZqWEMy4B3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:4a:3c:d6:6c:40:33:40:ce:86:94:51:b3:1b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
        Validity
            Not Before: Apr 17 09:01:15 2026 GMT
            Not After : Apr 18 09:01:15 2026 GMT
        Subject: CN=3d99e22c2873b97db4f4de41dd2e6bf1f1d67525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:5f:28:a4:63:6f:17:c5:68:0e:a7:0a:b2:
                    81:b2:52:fb:e0:f4:37:86:56:39:60:41:3b:2a:52:
                    19:4b:9f:ee:dc:96:a6:31:fc:b9:1e:d0:59:12:00:
                    60:1e:1f:83:7d:70:15:4d:cc:19:7a:72:7e:88:15:
                    82:66:b5:26:4a:98:79:1c:2d:80:a1:ef:ba:cd:8a:
                    65:b5:e7:d1:94:33:78:0b:c0:a7:43:b4:ef:bd:15:
                    67:55:96:de:c4:bd:45:9f:49:d2:65:24:0b:07:27:
                    e5:82:f0:4e:fd:d0:eb:5f:a4:e9:6c:41:17:33:52:
                    5a:c4:17:d4:ce:22:54:8b:4b:44:92:0b:c6:52:f0:
                    87:d7:ec:9b:1a:f2:cf:28:7e:df:b5:6b:cf:25:0d:
                    dd:7d:8a:5a:1e:a2:71:62:06:16:7a:b2:29:07:b1:
                    ac:19:34:01:89:75:df:c5:af:73:fb:c0:2b:81:26:
                    ab:cd:12:e6:d7:8f:dd:87:90:0f:8c:68:33:01:f2:
                    98:c6:d4:65:79:51:77:c1:68:c6:6a:51:ed:aa:58:
                    79:aa:33:c9:25:c6:1f:e1:65:3c:17:f0:b0:e7:af:
                    84:56:f1:01:6d:da:f1:b7:00:30:d3:aa:89:8e:9d:
                    0b:38:2b:6b:54:c0:09:57:c1:74:41:02:18:9c:58:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:E2:2C:28:73:B9:7D:B4:F4:DE:41:DD:2E:6B:F1:F1:D6:75:25
            X509v3 Authority Key Identifier:
                keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:30:59:02:89:d5:68:a6:83:b2:47:9c:1b:08:5b:19:f2:67:
         5c:be:7c:3c:81:a1:01:0f:f8:b3:2b:06:2c:b6:5b:cb:7c:2e:
         3c:38:83:d0:e2:8b:c2:f4:a6:37:4d:27:52:d6:8d:7d:a8:93:
         05:30:65:04:19:0d:65:e2:12:91:6c:fd:e0:be:5e:91:d5:4a:
         a3:f9:69:79:56:3f:63:87:8c:e5:bd:a2:ab:8c:4d:7d:29:05:
         b6:79:c9:5a:99:cd:00:4d:5a:60:d3:ce:61:49:07:23:c8:d5:
         eb:4e:62:a3:38:49:55:42:a6:53:77:68:87:0a:9f:29:06:f6:
         8c:6f:97:e1:79:33:67:36:35:53:f5:6d:21:3c:4d:a8:c3:68:
         11:05:6e:01:f0:bc:3d:f6:2a:18:96:2c:8c:b0:05:a5:bc:16:
         9f:c2:96:44:9c:42:c0:cd:e7:30:1b:50:1c:74:a9:ea:b4:1a:
         ff:ea:8e:a2:12:2b:3b:1b:57:83:09:be:e1:56:8d:fa:9c:ad:
         86:26:71:07:e0:7c:ee:86:83:2b:22:65:1a:d1:fe:1e:b2:26:
         55:ed:0e:a7:56:8a:f1:fc:72:b4:3b:3c:ac:1c:f2:0a:a2:c8:
         e5:74:53:39:66:16:18:0f:9d:90:b5:8f:80:27:63:8b:19:93:
         94:62:42:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arEo81mxAM0DOhpRRsxvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwN2U5MGQ2MmRlMmM3MjdjZDQ1MzlhMmYwNzBjNGU5MWRm
MzJiYjQwHhcNMjYwNDE3MDkwMTE1WhcNMjYwNDE4MDkwMTE1WjAzMTEwLwYDVQQD
EygzZDk5ZTIyYzI4NzNiOTdkYjRmNGRlNDFkZDJlNmJmMWYxZDY3NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LJfKKRjbxfFaA6nCrKBslL74PQ3
hlY5YEE7KlIZS5/u3JamMfy5HtBZEgBgHh+DfXAVTcwZenJ+iBWCZrUmSph5HC2A
oe+6zYpltefRlDN4C8CnQ7TvvRVnVZbexL1Fn0nSZSQLByflgvBO/dDrX6TpbEEX
M1JaxBfUziJUi0tEkgvGUvCH1+ybGvLPKH7ftWvPJQ3dfYpaHqJxYgYWerIpB7Gs
GTQBiXXfxa9z+8ArgSarzRLm14/dh5APjGgzAfKYxtRleVF3wWjGalHtqlh5qjPJ
JcYf4WU8F/Cw56+EVvEBbdrxtwAw06qJjp0LOCtrVMAJV8F0QQIYnFggSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2Z4iwoc7l9tPTeQd0ua/Hx1nUlMB8GA1UdIwQY
MBaAFCB+kNYt4scnzUU5ovBwxOkd8yu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYt
ZmJlNjhmZjYyN2IyLzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYtZmJlNjhmZjYyN2Iy
LzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATBZAonV
aKaDskecGwhbGfJnXL58PIGhAQ/4sysGLLZby3wuPDiD0OKLwvSmN00nUtaNfaiT
BTBlBBkNZeISkWz94L5ekdVKo/lpeVY/Y4eM5b2iq4xNfSkFtnnJWpnNAE1aYNPO
YUkHI8jV605iozhJVUKmU3dohwqfKQb2jG+X4XkzZzY1U/VtITxNqMNoEQVuAfC8
PfYqGJYsjLAFpbwWn8KWRJxCwM3nMBtQHHSp6rQa/+qOohIrOxtXgwm+4VaN+pyt
hiZxB+B87oaDKyJlGtH+HrImVe0Op1aK8fxytDs8rBzyCqLI5XRTOWYWGA+dkLWP
gCdjixmTlGJC3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:49 2026 by rpki-client