Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          2c47yMUZB8v7nA6ndvO3MEjg3oRC1K0R9fZJgUTs6Q8=
Subject key identifier:   99:8E:75:09:17:9E:91:97:F0:AF:59:61:8E:F2:7D:4E:82:80:E2:AD
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019F92110B07BEFBB9940BB09C30C8D89F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0DFF
Signing time:             Fri 24 Jul 2026 03:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:17 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: 5PO7AB9BAHlbN9SgP3WVxbsOvRRRHmA88nbtmvR/C4s=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: oqvVF5ro_xcfYZX0L91psrz4scE.roa (hash: 9GXkVLe3LroEDzobGbILI6BVJmNa1NCl51cSlpSEpww=)
                          20: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          21: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          22: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          23: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          24: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:0b:07:be:fb:b9:94:0b:b0:9c:30:c8:d8:9f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Jul 24 03:00:17 2026 GMT
            Not After : Jul 25 03:00:17 2026 GMT
        Subject: CN=998e7509179e9197f0af59618ef27d4e8280e2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:09:94:0d:28:49:ca:52:e2:e0:4d:88:77:
                    89:50:c6:5c:c8:bc:d6:88:e0:1c:52:bb:3a:95:92:
                    c7:db:17:96:82:00:2b:85:2c:3b:9a:e6:5d:3c:0c:
                    09:88:d2:a4:61:38:3c:73:f1:c8:f8:bd:31:8c:0e:
                    de:5e:de:10:07:d7:e1:c9:d6:16:4f:79:33:a5:2b:
                    56:23:e5:0f:65:d2:3f:43:f5:98:1d:d3:ce:c1:1f:
                    fb:ca:97:76:81:3e:44:ce:6f:31:4e:f5:24:e0:64:
                    63:0e:61:a3:3e:31:ae:6b:d9:5f:aa:d6:5c:f1:be:
                    96:57:2f:3f:64:7c:b1:b7:58:bf:78:06:d9:a0:b3:
                    53:86:e5:39:11:b8:59:79:8b:ff:5f:a1:47:d2:19:
                    3d:f5:86:54:0a:e8:e8:94:c2:25:ca:07:8a:13:57:
                    98:7e:c7:3a:99:e4:18:ff:61:da:db:c8:56:ff:af:
                    d5:eb:2e:8b:a0:00:4a:b3:78:bd:f7:08:a2:2a:97:
                    16:48:f3:fe:6e:31:30:05:63:d1:64:fa:0f:94:6f:
                    84:17:12:08:b6:0e:66:59:1c:a6:80:88:0b:95:a6:
                    fc:43:01:f1:b7:a0:47:31:33:a4:0a:ff:8b:49:1c:
                    c6:9f:8c:18:ed:42:b8:2f:db:7e:f0:19:5c:21:06:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:75:09:17:9E:91:97:F0:AF:59:61:8E:F2:7D:4E:82:80:E2:AD
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:59:e4:e8:3c:c3:83:21:4a:a3:43:1f:c6:3f:22:9d:26:
         04:08:6f:85:d2:17:37:53:a2:38:0b:46:26:72:47:66:88:66:
         7b:f6:22:1f:e5:4e:76:07:0d:fe:94:3c:d8:c1:63:21:22:f4:
         f5:3d:65:5e:c7:0a:80:29:8a:c4:47:17:e7:72:59:ca:48:da:
         fa:ab:f1:43:4d:1f:58:1e:53:db:dc:8e:25:d2:8e:f2:d6:f8:
         b0:42:32:e1:c7:4c:95:87:30:4b:85:9e:10:cb:af:8a:a6:d1:
         df:e3:93:51:24:23:93:75:70:1f:a6:4c:d3:08:55:4f:cd:99:
         f9:f4:36:24:f3:aa:a2:8d:95:84:84:42:c7:ce:3f:8f:b3:2a:
         82:34:44:81:be:a9:01:39:25:8a:e0:4e:ed:35:de:10:1a:4c:
         f1:f3:da:02:b6:59:8c:c9:5f:4a:9f:6d:e8:c4:6d:35:1f:5a:
         70:6a:93:18:ef:1e:2e:f3:d7:4c:6b:c9:8d:4d:04:57:cc:95:
         79:75:a1:30:3c:14:84:4f:8a:f8:c7:df:db:bf:7f:91:7a:0f:
         aa:70:3d:96:8d:58:ab:d5:2e:58:51:63:98:4d:bd:8b:a6:ce:
         d2:64:b5:a2:27:af:44:92:80:e0:59:ff:4a:e6:49:d2:98:bb:
         db:ac:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:11 2026 by rpki-client