Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File:                     34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier:          VIGRJ6ikSBThVX9oPEsXuCL7NAMuM1bMzzKeqPVLTDA=
Subject key identifier:   AC:15:86:B9:79:91:9F:6E:BE:9B:F1:D7:7B:EC:FA:52:25:5C:45:49
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer:       /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial:       019F8FB569E31E55514476446C2990937B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number:          08B8
Signing time:             Thu 23 Jul 2026 16:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:58 +0000
Files and hashes:         1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=)
                          2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: HIFGsS3VIcF8g2thn90A5wZlCYaMYfIij1tAzEVfARc=)
                          3: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=)
                          4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
                          5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
                          6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
                          7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=)
                          8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
                          9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
                          10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
                          11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:69:e3:1e:55:51:44:76:44:6c:29:90:93:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
        Validity
            Not Before: Jul 23 16:00:58 2026 GMT
            Not After : Jul 24 16:00:58 2026 GMT
        Subject: CN=ac1586b979919f6ebe9bf1d77becfa52255c4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:be:29:93:e3:d6:6a:e1:f9:51:af:5b:c1:
                    2f:41:ff:49:36:77:b3:34:96:eb:7f:06:03:cb:0f:
                    9e:49:00:21:33:79:ed:fa:96:a3:cb:ec:d5:bb:4b:
                    d2:c1:bf:59:cc:1a:ad:5e:b9:4b:7b:9a:57:1e:58:
                    10:91:3f:3f:06:ce:26:df:55:f3:fe:b6:fe:a0:88:
                    d8:6e:b1:00:1e:c2:b5:3b:c9:f9:84:51:a3:80:15:
                    ab:b1:c4:0e:73:03:cb:62:b0:9a:da:f7:d4:c2:bb:
                    71:af:42:ae:67:49:5c:ef:56:72:cd:20:22:6e:f2:
                    2b:35:a4:1c:2a:bc:69:32:41:a8:25:37:d6:3e:e1:
                    88:a3:47:d0:14:4b:a7:25:ce:4e:d3:9a:6f:b4:b5:
                    d6:5d:85:02:86:da:79:ba:46:78:dc:c1:f0:dd:b9:
                    3a:36:13:f2:73:05:22:6c:ab:39:af:0f:6e:be:0d:
                    bc:14:a8:c8:5f:65:e9:c2:35:5a:fe:b2:6f:fa:96:
                    66:0e:30:2a:e0:ef:23:8d:97:45:1d:f6:e0:47:41:
                    b2:48:de:73:b1:d1:d3:af:b0:4c:c3:1e:13:83:92:
                    fa:00:79:a7:42:e4:10:f8:53:e8:ec:db:e1:d9:e3:
                    e2:18:ef:90:61:81:3e:ba:b8:af:79:54:02:9c:89:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:15:86:B9:79:91:9F:6E:BE:9B:F1:D7:7B:EC:FA:52:25:5C:45:49
            X509v3 Authority Key Identifier:
                keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:26:74:88:ef:be:ee:f2:92:9a:39:0c:10:3d:e1:05:29:
         a9:ba:a5:e0:de:e0:8b:84:7e:c4:d3:00:96:ee:62:0a:c7:1f:
         77:26:5a:e4:f3:85:27:d6:b9:25:83:96:76:69:83:1b:cb:40:
         7e:2c:27:5b:8c:5b:6f:d5:ad:88:13:4d:ee:ea:61:23:f1:00:
         5c:82:5b:86:70:df:cd:cd:63:ea:48:0b:83:73:c1:03:57:71:
         0a:76:58:2f:16:8a:fe:ce:44:6c:4b:73:d2:9f:00:08:06:49:
         66:19:0d:81:00:c0:0c:42:f1:6a:79:7d:5b:de:b8:9e:21:ec:
         28:83:ef:85:34:d8:30:01:a9:36:6c:43:2e:11:60:53:57:1a:
         a5:c6:bc:69:e0:71:72:74:48:99:61:28:4f:1d:d3:e5:da:5c:
         45:fb:d1:d7:e4:3e:11:f7:b7:40:ee:d1:c7:af:08:a8:e7:91:
         42:e4:6e:29:8a:f3:aa:e2:ee:80:39:66:70:ad:2a:b8:66:1b:
         82:a5:fa:93:e9:cf:b4:19:39:2e:77:58:1e:83:0d:5f:7d:15:
         39:14:74:b9:59:37:69:23:f5:38:a7:c3:b8:1f:fc:e4:32:7f:
         e6:6a:68:3b:62:17:03:c8:08:6b:af:90:75:16:94:40:3b:2e:
         75:09:50:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtWnjHlVRRHZEbCmQk3uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk
NjYyNjkwHhcNMjYwNzIzMTYwMDU4WhcNMjYwNzI0MTYwMDU4WjAzMTEwLwYDVQQD
EyhhYzE1ODZiOTc5OTE5ZjZlYmU5YmYxZDc3YmVjZmE1MjI1NWM0NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1C+KZPj1mrh+VGvW8EvQf9JNnez
NJbrfwYDyw+eSQAhM3nt+pajy+zVu0vSwb9ZzBqtXrlLe5pXHlgQkT8/Bs4m31Xz
/rb+oIjYbrEAHsK1O8n5hFGjgBWrscQOcwPLYrCa2vfUwrtxr0KuZ0lc71ZyzSAi
bvIrNaQcKrxpMkGoJTfWPuGIo0fQFEunJc5O05pvtLXWXYUChtp5ukZ43MHw3bk6
NhPycwUibKs5rw9uvg28FKjIX2XpwjVa/rJv+pZmDjAq4O8jjZdFHfbgR0GySN5z
sdHTr7BMwx4Tg5L6AHmnQuQQ+FPo7Nvh2ePiGO+QYYE+uriveVQCnImswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwVhrl5kZ9uvpvx13vs+lIlXEVJMB8GA1UdIwQY
MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt
NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4
LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQwmdIjv
vu7ykpo5DBA94QUpqbql4N7gi4R+xNMAlu5iCscfdyZa5POFJ9a5JYOWdmmDG8tA
fiwnW4xbb9WtiBNN7uphI/EAXIJbhnDfzc1j6kgLg3PBA1dxCnZYLxaK/s5EbEtz
0p8ACAZJZhkNgQDADELxanl9W964niHsKIPvhTTYMAGpNmxDLhFgU1capca8aeBx
cnRImWEoTx3T5dpcRfvR1+Q+Efe3QO7Rx68IqOeRQuRuKYrzquLugDlmcK0quGYb
gqX6k+nPtBk5LndYHoMNX30VORR0uVk3aSP1OKfDuB/85DJ/5mpoO2IXA8gIa6+Q
dRaUQDsudQlQIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:36 2026 by rpki-client