Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          y8+qD7a8qcIP4sbfH9zohRNXLNLyi7Ps+DomqJZgwco=
Subject key identifier:   C6:54:0A:DD:95:68:7B:CC:89:0D:E5:C7:7C:45:33:81:F0:00:EF:75
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       019F91DAB5CD3E2ACCBB6D1B85C17ECF92F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          0D98
Signing time:             Fri 24 Jul 2026 02:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:57 +0000
Files and hashes:         1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
                          2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
                          3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: zPJ8Qz6sSa6ck+r6hShgdGImVCJUJ+UmxECkJukX/aM=)
                          4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
                          5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
                          6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
                          7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
                          8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
                          9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
                          10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
                          11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=)
                          12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=)
                          13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
                          14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
                          15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
                          16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
                          17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
                          18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
                          19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
                          20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
                          21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
                          22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
                          23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
                          24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
                          25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
                          26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:b5:cd:3e:2a:cc:bb:6d:1b:85:c1:7e:cf:92:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Jul 24 02:00:57 2026 GMT
            Not After : Jul 25 02:00:57 2026 GMT
        Subject: CN=c6540add95687bcc890de5c77c453381f000ef75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:16:0f:fd:23:96:c4:47:e4:d4:0b:70:bb:
                    17:5c:39:88:67:60:81:9c:15:fb:fb:4f:24:bf:b1:
                    fe:bf:a3:58:e3:8d:b3:74:d5:14:36:b1:0f:0b:9d:
                    09:f1:c2:c1:d8:f0:b0:12:93:e9:38:dd:fb:6d:76:
                    65:25:b7:50:87:59:fd:37:ed:f6:4f:dc:35:ad:a4:
                    e0:93:ed:d9:5d:6b:7a:97:00:7c:da:c8:32:38:2e:
                    07:8d:22:46:27:5d:91:e8:42:b5:fa:9f:7f:24:7f:
                    e2:39:73:ba:e3:8f:08:c4:85:2a:b2:26:4c:01:fd:
                    e9:b5:bc:06:53:08:c4:85:f2:46:ba:54:7c:74:bb:
                    b8:fd:21:58:95:b6:89:5a:83:7f:8f:c4:d6:62:bd:
                    c6:67:c2:40:c3:17:3e:e7:c1:ec:d3:2b:61:ca:40:
                    fb:e5:af:ab:9a:38:71:95:00:b8:34:87:d6:20:c4:
                    32:c2:4f:a6:bc:68:f2:a7:22:36:9b:b1:82:7e:fb:
                    c8:97:c3:cd:16:26:1f:76:86:98:64:b3:a9:14:52:
                    be:6b:e7:99:b4:14:a7:ac:b9:e0:77:f3:cf:66:7f:
                    e8:97:af:ab:21:85:3c:aa:45:2e:15:58:3f:bc:fe:
                    0e:0f:a5:70:dd:d6:3c:24:f6:9d:09:e2:49:48:c9:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:0A:DD:95:68:7B:CC:89:0D:E5:C7:7C:45:33:81:F0:00:EF:75
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:e4:1b:11:ee:c9:21:aa:99:e3:d6:c0:08:00:cc:3c:d3:
         36:cb:d2:a1:84:4b:ec:63:86:60:c1:ce:00:3a:5f:a3:92:4d:
         b0:11:1a:29:e6:ff:08:13:1c:7e:3e:34:3f:24:4c:25:6d:42:
         ad:b2:b5:8a:60:0b:57:6b:e5:40:42:d6:1e:41:8d:52:ba:4f:
         6f:1d:21:22:2e:d3:36:b4:d6:fe:0c:49:0a:c9:d6:db:70:7e:
         3d:b7:d6:89:0a:15:b5:45:3e:e0:74:80:d1:09:3c:e5:ef:b7:
         f8:44:e0:2c:7d:da:3a:6a:bd:63:c3:0e:4b:57:66:db:b3:34:
         bc:50:8a:8e:30:87:a0:ed:37:df:69:f1:f0:2a:35:db:05:72:
         73:93:5f:e8:65:ac:06:64:2d:6c:ad:09:26:d4:51:6d:52:dc:
         ca:a5:45:5e:e5:af:75:98:fe:f5:91:de:41:0a:85:10:3a:64:
         98:90:85:de:84:e9:fb:f0:40:5a:ce:1a:1c:2c:c2:92:b0:8f:
         1f:f3:47:a2:8f:ba:99:e4:3b:9a:b3:f9:cd:de:e4:4c:3a:b3:
         47:60:1f:67:3c:b9:c6:87:0d:ac:40:fb:6d:bc:8a:a1:49:fa:
         54:be:3f:f6:0b:79:4e:62:f6:06:a0:b6:e2:b3:3b:f5:33:86:
         82:e4:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:48 2026 by rpki-client