Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          163+GUk2N+ANKdj/RyDkkuPeVUVqSvsHCvOlS9vCML0=
Subject key identifier:   9A:B2:CB:2C:70:C8:D3:31:F5:46:54:B2:56:E6:80:3A:D7:F4:FD:54
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019E1D226DDA907853D64F802C2F6F378226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0951
Signing time:             Tue 12 May 2026 17:00:56 +0000
Manifest this update:     Tue 12 May 2026 17:00:56 +0000
Manifest next update:     Wed 13 May 2026 17:00:56 +0000
Files and hashes:         1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
                          2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: X8npUW6sjo8+peMkFdV9epzEICUGvjdesAzCDqXWV8Y=)
                          4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
                          5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
                          6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
                          7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
                          8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
                          9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
                          10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
                          11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
                          12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
                          13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
                          14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
                          15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
                          16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
                          17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
                          18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
                          19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:6d:da:90:78:53:d6:4f:80:2c:2f:6f:37:82:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: May 12 17:00:56 2026 GMT
            Not After : May 13 17:00:56 2026 GMT
        Subject: CN=9ab2cb2c70c8d331f54654b256e6803ad7f4fd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:14:81:0a:c5:d2:70:b4:27:21:df:ae:c6:
                    7f:5d:8e:0d:6f:97:18:73:bb:ca:48:90:2c:0a:88:
                    b2:74:d6:73:58:b2:ea:b1:2f:52:36:0e:a0:63:bd:
                    37:61:70:59:93:23:74:1c:6c:a8:40:e5:90:81:3b:
                    4c:0d:ce:e7:8c:24:50:9a:60:83:b5:7b:a2:87:9a:
                    b5:b1:eb:58:f7:a8:c4:65:02:d5:a7:2e:c9:8c:cb:
                    da:34:a7:f7:68:00:5f:31:53:15:a0:5c:80:4a:29:
                    74:8a:04:50:cf:3f:95:be:38:87:d8:0b:9c:60:28:
                    b3:19:f6:4b:f4:ee:ab:19:fc:7a:cd:ac:00:b6:17:
                    a2:d0:ac:24:e4:bd:3b:2f:21:32:76:64:69:8e:4b:
                    13:5d:c9:58:32:5a:8d:e0:3a:a5:45:c2:73:5b:77:
                    69:4c:c1:10:c2:4d:b4:4b:a5:4a:89:93:1f:cc:5d:
                    1e:22:5a:0f:b9:8b:22:24:e4:e8:5d:96:88:15:6b:
                    67:c7:c4:4e:55:ee:2e:6c:c3:ad:c3:cb:22:48:9e:
                    e6:f1:25:86:1d:17:95:3c:3c:4b:31:b7:81:51:e6:
                    20:f7:55:70:d4:51:2c:e1:06:2a:d6:cf:62:23:10:
                    f5:f6:b1:e4:e7:ee:79:2a:a0:8f:dd:b7:81:6d:03:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:CB:2C:70:C8:D3:31:F5:46:54:B2:56:E6:80:3A:D7:F4:FD:54
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:79:f0:ea:a5:74:ce:53:9e:49:73:5a:f9:88:b7:31:b8:54:
         21:7f:6e:de:bb:c8:a5:c4:1a:e9:d4:a2:6b:5e:04:52:ca:17:
         31:39:39:17:ab:0e:4a:9a:f6:fc:00:9e:bc:ed:cb:fe:9b:55:
         44:2e:53:db:fd:8e:71:9f:08:72:51:6a:a3:3f:06:ab:a6:83:
         20:99:3e:ad:1c:1a:7c:eb:d2:9a:03:0e:c0:9f:bf:2b:cb:48:
         24:0d:3f:09:13:ec:a2:06:18:ef:cb:4e:91:f0:b9:03:22:eb:
         8e:71:7c:5c:86:7a:eb:22:2a:52:e4:5e:b7:fd:4c:bc:a6:8b:
         d1:fb:04:3c:1c:b8:ae:18:5d:6b:d8:53:db:b4:ff:1a:e9:1d:
         2b:13:ac:09:c0:25:1e:25:4f:ee:ae:0c:83:28:6e:5c:66:39:
         ea:bb:0f:6b:da:d2:ee:30:2d:ea:9a:c8:07:57:bd:6b:65:f0:
         dd:44:16:0f:84:f7:c5:2b:45:93:0f:41:20:ce:55:62:48:69:
         d6:b8:a6:0d:d6:8d:07:ca:c2:76:47:f1:3a:22:6e:21:06:81:
         19:66:59:1a:f5:ae:11:4c:96:b0:07:b6:d8:df:5a:4b:9f:f3:
         a7:9c:9d:e2:b6:ef:29:85:c5:9a:a4:49:eb:95:80:82:76:3b:
         5c:ce:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:59 2026 by rpki-client