Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          NZhTKk5Y/YVuQQlu5I9PIsjfxoWRhAGssClfKNcj5x0=
Subject key identifier:   3B:6A:75:E5:B5:20:35:E8:1E:1D:5E:97:0A:76:3F:A3:68:6F:94:81
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019EBF23AA55A8B580F14A7E97EE237970C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          046F
Signing time:             Sat 13 Jun 2026 04:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:46 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: iJmQ5lIKc5tGUT4jmkE/+DH1l3jOM1r0D4RoIbWGw5k=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:aa:55:a8:b5:80:f1:4a:7e:97:ee:23:79:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Jun 13 04:00:46 2026 GMT
            Not After : Jun 14 04:00:46 2026 GMT
        Subject: CN=3b6a75e5b52035e81e1d5e970a763fa3686f9481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:c7:cd:9c:5f:0d:46:f7:d7:92:d4:39:20:
                    e7:76:33:89:02:7f:04:75:22:fb:0b:85:39:14:eb:
                    78:e1:42:48:29:e3:62:fa:8a:30:f8:08:1c:95:7f:
                    63:bd:e0:8b:21:17:c3:e4:54:5f:1a:35:58:1a:6c:
                    25:d5:ee:3d:3b:42:dd:a9:99:dd:c1:f5:8c:1b:3e:
                    6a:3f:38:6e:73:a1:55:35:4a:c1:72:be:d5:39:9b:
                    b3:de:60:8b:fe:4f:4f:5a:e5:40:68:79:aa:e1:d4:
                    32:d1:1f:50:87:75:50:ae:20:7b:d0:46:3d:23:b0:
                    54:52:49:44:a7:3e:34:ee:58:26:50:05:fe:36:e0:
                    05:2d:a0:05:b2:20:57:25:00:6c:34:16:2e:a4:fd:
                    e2:b3:33:9d:f6:12:36:dc:4d:20:b6:68:58:1a:e1:
                    56:5a:af:2a:84:2e:40:63:73:06:06:74:56:af:76:
                    6d:72:25:07:17:b2:50:4f:f1:2d:2d:12:ae:aa:66:
                    d7:42:d9:d0:cb:02:c7:16:4f:96:65:25:71:6d:fc:
                    ad:be:ba:32:22:e0:a4:f5:3d:60:dc:34:b2:ac:9b:
                    a0:87:76:76:41:ec:a8:bb:3a:dc:1d:16:d1:3f:45:
                    d7:8a:d9:4a:72:ee:47:52:ad:88:70:98:f0:53:74:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:75:E5:B5:20:35:E8:1E:1D:5E:97:0A:76:3F:A3:68:6F:94:81
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:a9:b8:74:8a:b9:f4:6c:9b:44:49:8c:0d:8f:5b:6c:6c:
         e5:2c:91:fc:c2:7c:4f:7e:0e:f6:24:27:5c:41:3a:83:1d:47:
         18:8b:bb:23:40:51:27:ed:9a:e1:d4:f4:e8:dc:b5:f8:00:9e:
         26:f9:f8:37:8b:db:e4:14:ec:29:3b:cf:ac:8c:88:0a:33:82:
         0c:f3:54:f7:2d:50:fe:c0:b4:12:ec:ce:99:34:cc:91:a0:46:
         ce:2c:ad:4d:31:40:78:83:62:57:d0:2f:0c:81:d6:17:9b:99:
         26:14:66:3b:11:87:71:65:52:1d:f7:0e:96:60:92:85:a5:51:
         fa:bd:90:63:19:f7:d4:b6:07:9e:f8:a9:61:e1:f1:45:ad:b3:
         e5:8e:6b:0c:41:37:75:79:bf:97:10:64:a5:2b:46:5b:0d:c7:
         bb:b8:d7:84:29:3e:81:0f:04:88:90:34:4d:8f:2c:7f:88:2e:
         99:1d:2c:1f:47:5a:69:79:0c:53:cd:2d:a2:b5:08:59:b2:06:
         dd:fb:04:3d:70:78:2e:e6:8d:b6:ef:f9:81:db:11:f3:a2:41:
         d5:f1:bf:36:a4:04:86:44:a1:6f:8c:a3:ea:70:ba:5a:bb:6d:
         ae:7f:ef:48:dd:b8:f0:b3:a1:40:71:9d:31:76:01:04:47:06:
         b9:25:55:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I6pVqLWA8Up+l+4jeXDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy
MjdjMjQwHhcNMjYwNjEzMDQwMDQ2WhcNMjYwNjE0MDQwMDQ2WjAzMTEwLwYDVQQD
EygzYjZhNzVlNWI1MjAzNWU4MWUxZDVlOTcwYTc2M2ZhMzY4NmY5NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8bHzZxfDUb315LUOSDndjOJAn8E
dSL7C4U5FOt44UJIKeNi+oow+AgclX9jveCLIRfD5FRfGjVYGmwl1e49O0LdqZnd
wfWMGz5qPzhuc6FVNUrBcr7VOZuz3mCL/k9PWuVAaHmq4dQy0R9Qh3VQriB70EY9
I7BUUklEpz407lgmUAX+NuAFLaAFsiBXJQBsNBYupP3iszOd9hI23E0gtmhYGuFW
Wq8qhC5AY3MGBnRWr3ZtciUHF7JQT/EtLRKuqmbXQtnQywLHFk+WZSVxbfytvroy
IuCk9T1g3DSyrJugh3Z2QeyouzrcHRbRP0XXitlKcu5HUq2IcJjwU3Q53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtqdeW1IDXoHh1elwp2P6Nob5SBMB8GA1UdIwQY
MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt
OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2
LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtSpuHSK
ufRsm0RJjA2PW2xs5SyR/MJ8T34O9iQnXEE6gx1HGIu7I0BRJ+2a4dT06Ny1+ACe
Jvn4N4vb5BTsKTvPrIyICjOCDPNU9y1Q/sC0EuzOmTTMkaBGziytTTFAeINiV9Av
DIHWF5uZJhRmOxGHcWVSHfcOlmCShaVR+r2QYxn31LYHnvipYeHxRa2z5Y5rDEE3
dXm/lxBkpStGWw3Hu7jXhCk+gQ8EiJA0TY8sf4gumR0sH0daaXkMU80torUIWbIG
3fsEPXB4LuaNtu/5gdsR86JB1fG/NqQEhkShb4yj6nC6Wrttrn/vSN248LOhQHGd
MXYBBEcGuSVVnA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:47:50 2026 by rpki-client