Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          +8EoCoJkSOFdCfLwzAq5R7wCU06XqSiziV8wgFoGSNM=
Subject key identifier:   B8:3B:3F:8F:F3:21:76:70:6C:BC:43:EE:8F:40:3D:90:04:83:2D:82
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019F8FB4EAB123D8BCFE94B703849AC7DCF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0F6D
Signing time:             Thu 23 Jul 2026 16:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:25 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
                          3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
                          4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          7: Fivb1SW9lsFVwsJwjqgMykWEEdE.roa (hash: zmxRgLvMepPFPNUFI1TWdNAxXvFRCxr5eHeyVhjm+aw=)
                          8: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          9: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          10: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          11: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
                          12: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          13: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          14: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          15: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          16: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          17: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          18: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: QZ4nEPX7asDJw1ci+d8qroIUqVpATVCVXOmX7ohCXBY=)
                          19: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          20: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          21: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          22: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          23: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          24: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:ea:b1:23:d8:bc:fe:94:b7:03:84:9a:c7:dc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Jul 23 16:00:25 2026 GMT
            Not After : Jul 24 16:00:25 2026 GMT
        Subject: CN=b83b3f8ff32176706cbc43ee8f403d9004832d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:5d:47:b3:04:82:a7:d3:92:38:e2:34:be:
                    e9:96:6d:17:c6:22:aa:f5:c8:36:fe:6a:87:c2:05:
                    ad:0f:21:91:34:99:8e:4d:e1:61:7f:a7:9d:42:6d:
                    88:73:02:f9:7f:e0:dc:77:5c:fa:97:f7:e9:73:a9:
                    b3:68:cf:14:ff:90:98:8e:93:c6:3a:60:60:1d:42:
                    b0:59:f0:28:e5:81:11:88:a4:53:3d:4a:3c:b4:f9:
                    2e:09:e6:42:d6:71:e9:eb:d7:1f:54:ff:c1:bc:4f:
                    bf:b5:98:bf:6e:64:9f:66:d2:69:e5:e4:5a:06:6a:
                    53:f7:2a:54:0d:8a:18:34:38:3c:c0:08:bf:5e:74:
                    a7:65:bd:c2:64:1f:62:52:e1:c3:1a:19:15:0f:71:
                    eb:4b:7a:0a:6e:96:63:70:2c:c2:d0:1f:48:69:cd:
                    7e:1d:c8:29:67:a2:c8:ca:7c:7c:7e:e4:f4:5d:eb:
                    3c:8d:ab:7e:fd:69:76:5c:1e:41:ae:d3:b9:7b:22:
                    71:7a:9b:5a:69:c5:f5:d8:8a:04:31:6c:4d:91:d6:
                    30:66:6e:f3:33:c7:25:30:30:94:93:5c:5b:59:03:
                    13:40:f0:b6:0e:e2:2a:d9:11:fe:0d:82:e2:11:8b:
                    f3:e6:2e:65:b2:49:5b:68:6c:17:8c:6c:6a:8d:32:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:3F:8F:F3:21:76:70:6C:BC:43:EE:8F:40:3D:90:04:83:2D:82
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:89:70:20:ba:4d:29:f1:63:93:41:76:a7:8e:74:c6:c1:d1:
         4d:03:3c:37:2d:83:74:5d:cd:9e:bb:ee:3e:93:88:4c:58:16:
         49:aa:8b:bc:a6:3c:a9:60:d2:ec:55:e0:02:db:65:6a:62:1c:
         f6:d1:7a:68:f5:1d:d7:fe:29:d1:25:01:76:67:41:22:ce:f3:
         58:36:b3:0c:13:0c:85:0c:11:84:86:49:48:7f:75:5c:3d:e6:
         1e:a7:da:0c:e1:ec:3f:b9:cb:f4:e6:5a:dc:80:2a:d3:b7:99:
         00:1c:a9:06:12:f5:bb:2b:9c:65:a7:60:58:37:c9:65:a6:5d:
         ca:6c:0b:33:23:73:51:eb:b2:76:6d:5f:d2:92:32:32:da:26:
         03:37:73:c8:59:92:e7:75:6f:58:00:dd:df:3c:5d:c0:3b:c8:
         9f:cb:4c:1e:f2:51:da:37:f1:bc:09:25:3b:20:1e:f6:4c:2b:
         06:e7:4c:96:d7:46:b7:fa:ea:76:cb:7d:c0:5a:3d:a5:d0:b8:
         d0:f5:a4:3e:a0:39:50:cf:17:3e:57:c7:53:36:82:a9:21:3e:
         ab:72:3f:a8:7f:7f:89:51:04:d6:ed:18:1d:5b:7d:51:7e:87:
         f1:85:49:8e:e5:5a:b1:95:bc:a0:24:d9:dd:53:3e:58:59:66:
         ce:09:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:18 2026 by rpki-client