Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          6+IzfbQ4VQGZW0lvMOr7gFb1yE71TPE3J9dHdHOqjdM=
Subject key identifier:   E2:84:BA:02:53:AE:C6:17:AC:90:90:64:11:A4:E7:97:16:B3:56:EE
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019EC1EDEDF89AD0AA8B42112713DA4D4946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          196A
Signing time:             Sat 13 Jun 2026 17:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:55 +0000
Files and hashes:         1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
                          2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
                          3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
                          4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
                          5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: xlVrYnYpnN4zvDTJIVXs7XjWCI1eleMZuvZPmiGOqes=)
                          7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
                          8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
                          9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
                          10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
                          11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
                          12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
                          13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
                          14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
                          15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
                          16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
                          17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
                          18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
                          19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
                          20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:ed:f8:9a:d0:aa:8b:42:11:27:13:da:4d:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jun 13 17:00:55 2026 GMT
            Not After : Jun 14 17:00:55 2026 GMT
        Subject: CN=e284ba0253aec617ac90906411a4e79716b356ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:29:42:ec:03:e5:d4:69:37:91:94:60:b5:
                    ae:c8:fc:cc:b2:49:40:b8:3c:34:6e:45:24:38:0e:
                    8d:35:57:8e:36:fd:d4:bd:fb:12:56:24:d9:9c:e5:
                    90:40:d7:4c:31:34:ea:c7:e0:01:7a:8e:d1:40:44:
                    ce:4e:33:e1:88:a7:bd:e9:ae:10:cd:67:a4:39:1b:
                    3e:b5:6d:90:b8:eb:79:27:2d:f3:2b:9b:02:68:69:
                    1f:25:cf:2f:41:2a:3f:fb:b2:13:60:59:22:72:01:
                    bd:91:33:2e:71:5f:2f:ca:62:86:27:61:72:d5:97:
                    a6:5b:7b:ec:2e:76:79:f4:69:67:c8:6d:88:1d:a2:
                    fb:93:17:31:c3:65:99:5f:62:d6:e2:24:fe:20:ed:
                    0c:d2:c8:d5:c7:e0:82:e4:a4:e2:65:62:1b:33:d8:
                    97:45:ce:ce:67:11:2f:6b:d9:8d:92:64:43:c5:f4:
                    d6:15:d0:1c:5e:8b:79:05:a7:ca:16:96:b7:15:0a:
                    bb:29:ef:ff:cb:5d:7f:c0:2b:00:23:0c:f2:a2:0e:
                    8a:77:91:3a:bf:25:ce:be:92:3f:5b:ad:d2:93:83:
                    dc:e1:8b:ca:67:98:fa:91:d1:b8:44:bf:c2:a5:fd:
                    d8:eb:ab:47:99:12:7d:cd:6c:f6:c1:c8:34:51:2b:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:BA:02:53:AE:C6:17:AC:90:90:64:11:A4:E7:97:16:B3:56:EE
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:40:80:62:0a:0f:88:3b:04:be:07:99:5b:3e:a1:0f:18:a0:
         ca:62:be:75:0c:4c:b8:28:7b:6b:89:4d:17:93:e9:56:0d:4c:
         a4:fe:cd:cf:a9:93:72:4b:91:e4:56:7d:4a:cf:3f:a5:95:39:
         44:55:b6:de:32:af:c2:ab:50:50:49:47:de:61:e5:d6:42:39:
         e7:a8:ab:8d:02:61:76:92:d6:c7:6c:e4:75:86:6b:64:2a:4d:
         59:da:9b:89:08:a2:b2:c8:c3:9f:42:9d:73:b9:a9:bd:7d:20:
         73:24:f8:fb:9b:30:33:9e:50:69:a1:d1:ec:d8:2b:1d:8f:53:
         0c:51:bd:c1:0c:c7:83:5b:c8:7d:e5:49:d6:97:57:22:8c:29:
         27:b9:6a:14:a9:e7:15:df:c6:93:b9:7f:68:27:b4:4d:0d:03:
         d5:1f:ce:f8:ee:06:1f:42:2c:16:90:0d:fa:dc:a5:e5:b1:af:
         f4:f8:9a:7a:21:fc:35:2f:fe:e5:c9:9b:ab:e8:3b:a9:bd:94:
         9f:e0:ec:c1:85:e9:af:35:c2:62:f1:19:37:c7:2c:b0:fc:48:
         28:3e:9a:9c:4b:fa:ca:74:b8:e8:16:8a:6d:f3:9a:d2:30:25:
         b4:b1:52:5f:e3:a8:ce:4c:37:b7:56:18:8f:a1:82:f7:e1:d2:
         10:bb:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:58 2026 by rpki-client