Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File:                     IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier:          wkZqurfT5jWUKa6b0iWDaOuu0YHKf7TQXn1cB4Gr9P8=
Subject key identifier:   7F:F1:BF:C2:DA:7D:01:94:79:A3:B1:70:7D:A8:75:50:75:E5:3C:FC
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer:       /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial:       019EC300B65FD3EA1DD6192CAFFACA43955C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number:          035E
Signing time:             Sat 13 Jun 2026 22:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:04 +0000
Files and hashes:         1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: rPw88Gxcwj3T4FI74NTBv0i8j1Gxhk6Y5xvoWxDqihk=)
                          2: ZVUh7y26ToxL-oq8YITOKQgfF08.roa (hash: mGiVKv+1/ai9DnwEadL7YecZ7TPX9VgOuJDaNOyNIA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:b6:5f:d3:ea:1d:d6:19:2c:af:fa:ca:43:95:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
        Validity
            Not Before: Jun 13 22:01:04 2026 GMT
            Not After : Jun 14 22:01:04 2026 GMT
        Subject: CN=7ff1bfc2da7d019479a3b1707da8755075e53cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:72:40:42:b2:a0:9f:71:d8:8f:33:12:f9:
                    eb:de:c1:1d:94:75:6a:a0:75:2b:11:59:83:da:9c:
                    29:f5:e2:ca:07:7b:8d:de:c8:30:21:4a:d2:0b:96:
                    9b:f2:27:5f:f7:94:61:2c:7b:ff:67:e7:23:76:2a:
                    73:23:8c:a5:29:e1:d8:8b:ed:c3:44:86:6c:3b:98:
                    75:63:35:c6:ed:41:90:0d:97:5c:6a:7a:66:df:85:
                    63:47:53:a4:c2:83:eb:b9:ab:59:88:a3:5a:f6:ce:
                    bc:02:3e:ca:5b:59:91:d5:d4:70:46:2a:5f:be:71:
                    35:41:51:a6:af:b4:86:21:93:0d:2a:aa:3e:85:b0:
                    ef:a4:7d:a2:e1:d3:46:7d:46:cf:9b:7a:e7:4c:88:
                    78:5d:80:5a:35:ec:1e:e3:ef:6a:f5:52:cb:c1:e7:
                    39:40:61:3e:1d:c9:d9:f4:2a:ba:09:41:f6:9d:b1:
                    83:36:39:19:13:29:4a:0b:60:ba:e6:da:ad:ed:fc:
                    64:7a:a6:06:8d:4c:bf:5a:ac:62:31:67:46:ff:c1:
                    fb:77:55:04:94:6d:68:c0:02:78:05:af:74:5e:c4:
                    48:69:1a:6e:32:b4:54:74:4f:88:74:ae:f2:0a:3d:
                    2d:ab:31:ff:fa:9b:a0:15:55:1c:3f:9f:11:3f:84:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:BF:C2:DA:7D:01:94:79:A3:B1:70:7D:A8:75:50:75:E5:3C:FC
            X509v3 Authority Key Identifier:
                keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e8:05:cd:dc:fd:d8:bb:f5:7d:3b:4a:ce:9a:9b:30:c1:4b:
         09:bd:e4:55:d2:32:dd:3f:9c:1e:9a:5e:c9:59:a2:d5:99:5a:
         8f:83:83:6b:86:25:61:a3:06:bf:5f:e7:e4:93:33:00:6a:2b:
         8e:66:08:a9:40:1b:a8:67:b0:9c:2b:7d:a7:e3:40:5e:07:32:
         fb:32:94:6a:d8:5b:bb:bd:cd:b8:0c:39:ec:90:87:5d:98:af:
         2b:0f:cf:1e:2c:23:e8:f1:b1:4a:9c:4d:02:34:ff:a5:61:ad:
         eb:fa:09:5d:ad:6e:58:9b:99:97:63:74:42:14:04:dd:34:dd:
         09:7f:b8:72:d6:2f:33:86:89:c7:13:a2:02:91:7e:90:95:90:
         50:9b:e1:36:dc:ed:67:a5:ba:e3:e6:24:50:41:e9:e2:08:58:
         51:30:8a:67:c5:59:9c:ad:13:e3:00:f3:3c:18:ec:fe:4a:2c:
         e6:b5:a2:72:23:45:74:a0:8c:cb:98:42:d5:ef:2d:01:88:6c:
         f3:a4:75:af:14:18:dd:6b:c6:b6:fd:09:52:03:d4:69:29:11:
         26:74:92:cb:70:94:85:45:d1:f1:27:37:77:b7:2a:60:63:2c:
         55:8e:fa:35:09:99:e6:74:7a:27:2c:0a:36:ee:d1:a1:c7:cf:
         d4:a3:3c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DALZf0+od1hksr/rKQ5VcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1
ZDg2OTQwHhcNMjYwNjEzMjIwMTA0WhcNMjYwNjE0MjIwMTA0WjAzMTEwLwYDVQQD
Eyg3ZmYxYmZjMmRhN2QwMTk0NzlhM2IxNzA3ZGE4NzU1MDc1ZTUzY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCdyQEKyoJ9x2I8zEvnr3sEdlHVq
oHUrEVmD2pwp9eLKB3uN3sgwIUrSC5ab8idf95RhLHv/Z+cjdipzI4ylKeHYi+3D
RIZsO5h1YzXG7UGQDZdcanpm34VjR1OkwoPruatZiKNa9s68Aj7KW1mR1dRwRipf
vnE1QVGmr7SGIZMNKqo+hbDvpH2i4dNGfUbPm3rnTIh4XYBaNewe4+9q9VLLwec5
QGE+HcnZ9Cq6CUH2nbGDNjkZEylKC2C65tqt7fxkeqYGjUy/WqxiMWdG/8H7d1UE
lG1owAJ4Ba90XsRIaRpuMrRUdE+IdK7yCj0tqzH/+pugFVUcP58RP4SLzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/xv8LafQGUeaOxcH2odVB15Tz8MB8GA1UdIwQY
MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt
Yjg4OGEzMTI0NDU0LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0
LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+gFzdz9
2Lv1fTtKzpqbMMFLCb3kVdIy3T+cHppeyVmi1Zlaj4ODa4YlYaMGv1/n5JMzAGor
jmYIqUAbqGewnCt9p+NAXgcy+zKUathbu73NuAw57JCHXZivKw/PHiwj6PGxSpxN
AjT/pWGt6/oJXa1uWJuZl2N0QhQE3TTdCX+4ctYvM4aJxxOiApF+kJWQUJvhNtzt
Z6W64+YkUEHp4ghYUTCKZ8VZnK0T4wDzPBjs/kos5rWiciNFdKCMy5hC1e8tAYhs
86R1rxQY3WvGtv0JUgPUaSkRJnSSy3CUhUXR8Sc3d7cqYGMsVY76NQmZ5nR6JywK
Nu7RocfP1KM89A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:53 2026 by rpki-client