Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          GeesyCkS16hMd46p05cbScZEnecttN7xc2JTB/wvp+o=
Subject key identifier:   A5:87:AA:6B:B7:6F:4B:D4:92:CB:48:42:43:A4:16:9F:2A:1E:1C:6C
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       01A0CCDA2B035A838701778AD81D88D6F9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0EA2
Signing time:             Wed 23 Sep 2026 06:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:44 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: +HCzQtCrW/gE+fS90Lvco8eTObWdO0Ci78XNCgbJgh8=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: oqvVF5ro_xcfYZX0L91psrz4scE.roa (hash: 9GXkVLe3LroEDzobGbILI6BVJmNa1NCl51cSlpSEpww=)
                          20: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          21: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          22: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          23: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          24: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:da:2b:03:5a:83:87:01:77:8a:d8:1d:88:d6:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Sep 23 06:00:44 2026 GMT
            Not After : Sep 24 06:00:44 2026 GMT
        Subject: CN=a587aa6bb76f4bd492cb484243a4169f2a1e1c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:2c:0f:92:4a:59:82:09:a4:b2:4c:08:a5:
                    b1:e3:60:9c:a0:d4:21:a6:86:99:e7:d5:e4:7c:94:
                    71:5f:42:d5:0f:b4:62:2b:66:36:fd:73:9a:64:9e:
                    7f:5c:ee:fa:65:d1:79:7a:68:de:6a:46:ba:d3:67:
                    28:3f:65:f7:87:c2:70:97:f3:5b:a9:18:33:99:85:
                    74:93:1b:99:b6:18:7d:23:37:72:49:4f:b3:69:48:
                    5c:a7:b0:2f:00:a4:bf:51:64:14:bc:d3:96:d6:1f:
                    77:c6:b4:0f:ca:64:42:6e:df:4d:66:16:5e:5f:79:
                    59:30:86:57:8b:87:0b:a8:cc:da:76:d8:27:80:1d:
                    6c:31:25:ea:7e:a7:59:c3:58:97:56:2f:54:a5:73:
                    ef:de:ad:2f:4b:67:71:83:c4:c9:86:94:ad:d0:f4:
                    22:56:ed:89:cd:6d:fe:6d:59:67:38:dd:3e:e8:eb:
                    9a:52:e0:8f:25:0e:f3:08:fb:66:a8:5c:50:52:e7:
                    ab:6d:ab:82:46:90:c1:ec:c4:7b:ca:cc:b3:0d:a2:
                    dc:01:ea:df:af:8e:79:5c:84:6f:f7:34:65:80:44:
                    04:b1:3a:76:35:74:7b:88:0b:a6:d9:da:e3:8d:c0:
                    26:f5:a0:da:53:10:1b:a6:58:b8:c7:b3:f4:89:d0:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:AA:6B:B7:6F:4B:D4:92:CB:48:42:43:A4:16:9F:2A:1E:1C:6C
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:db:1c:21:b7:f4:8d:24:c7:46:78:b1:21:56:23:31:dd:
         ed:f7:7e:b7:0e:42:ce:57:9c:14:42:18:dc:cd:13:71:93:28:
         a7:35:4f:69:42:82:d7:74:a2:a2:de:1f:2a:77:1e:c3:9d:00:
         2d:10:0e:e4:7c:26:19:cd:84:0e:08:b1:4f:ae:fc:34:fa:18:
         51:43:7d:5d:73:22:d8:09:c0:61:be:27:f7:cf:56:a1:18:a9:
         e6:a8:d0:f1:6d:8a:a4:69:dc:c8:e5:7c:30:4c:b5:73:2c:fa:
         38:1a:24:99:4d:e2:29:b7:30:03:b9:aa:53:e1:e0:f3:ad:1f:
         c3:ad:15:a8:03:dc:18:e6:5d:2d:01:b8:66:72:c1:4b:66:3b:
         cb:41:2f:54:82:fc:ab:a5:a6:4c:ec:51:f0:ca:b9:44:7b:8d:
         9e:b3:42:a6:b6:12:50:70:9e:87:b6:57:9f:f4:64:5d:3a:7a:
         06:bc:5b:99:06:a5:e4:df:21:36:ba:a0:d1:f8:81:01:33:48:
         a6:6e:98:be:be:4e:89:37:07:f0:ba:3d:99:a0:eb:00:77:f9:
         f8:14:e3:ba:6d:88:19:8b:b4:93:b0:de:ae:f9:01:56:22:1d:
         8f:db:59:49:2e:5d:5f:38:f9:07:19:b3:3b:ee:88:3f:08:0a:
         5e:ab:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:46:49 2026 by rpki-client