Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          mi6vZsIQG/3ec5wlY38X05syM5SjMaSs2JlsWbDdBdg=
Subject key identifier:   5E:F3:8C:9A:C3:33:DF:13:42:0D:4D:B9:94:B5:62:22:03:8A:69:3C
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       019F905A1990A8F51DF079B5A8059594975F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          1A44
Signing time:             Thu 23 Jul 2026 19:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:51 +0000
Files and hashes:         1: 1--d0cnUCeMBBJAQCBol8GjOem0A.roa (hash: K1CkZ/qUDDNfccO9OiBBdc3yV0iu0FE3gUcsryaKkr0=)
                          2: 14gmHyQe4PBetMf4RzBQhNC2FOk.roa (hash: GGBNsYzCN+EF6PiC/qvnbnXzs5PIoYQwa6DEc9vP7DY=)
                          3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: jQCq2DSOG2p9DS1K/v3T0tDW6qRzHw3Hnnfm/pJ6iWI=)
                          4: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
                          5: 7e9287JiavvNibirznmGp8Ri68M.roa (hash: V6aikhGlnGo6wTqTxUKPIvBQH2DvVyy6y6tZnidwhEM=)
                          6: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
                          7: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
                          8: EaIyfGeRC79erqoN_TV1V3pBgCI.roa (hash: fp/pHfcXfwK5Ba1oEm4wGvNYS46jMvtZK3LLVjXLYYE=)
                          9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
                          10: LhT4Mr7pBvmSebh_xpC6XvBDifs.roa (hash: /pqawyzvpLTnZE+ptaDtmcd+h9N5yx6aJ4Q7iNJd134=)
                          11: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
                          12: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
                          13: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=)
                          14: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=)
                          15: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
                          16: TwoQEmVWkVabFmL6zVszo7vMnUY.roa (hash: /LnMxaouyJTpcMVb8KiNbGv5/aFh1e/B9rqb2NOQWb8=)
                          17: UE4x2J_JjdAdXOITfo1JaB3GqZo.roa (hash: F8+2zT5bS88GS7Q+A9z996t58lNLXeHU3rrhcs+OftY=)
                          18: USXvFGnAypWHrQsUpHflyE7AkBw.roa (hash: leJb5YM9g0TdZzX8je+gHf/RsV+l7VFjkyGBSWLgWYo=)
                          19: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
                          20: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
                          21: ZrPtSCJ532i12xugeZ1dO4rY230.roa (hash: dH4IWysW7Ys5TJ2lt17gZtfQSYeKivQxpHQG4qiY7zQ=)
                          22: cLWx9mOmhkJFiHX0vOhviqK5jPg.roa (hash: pz0fm9ldHmFbMZZys/irFjXMA+EOl7vaFP6O4HvjCBs=)
                          23: hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa (hash: CPA0tt0+lAYozU3bXwUoMHqEh8nMLbJsWqOdKpIaQuo=)
                          24: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
                          25: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
                          26: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
                          27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:19:90:a8:f5:1d:f0:79:b5:a8:05:95:94:97:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Jul 23 19:00:51 2026 GMT
            Not After : Jul 24 19:00:51 2026 GMT
        Subject: CN=5ef38c9ac333df13420d4db994b56222038a693c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bf:22:26:d0:90:bc:ae:95:7f:95:dc:8b:31:
                    d8:f4:24:2d:b2:1c:41:6f:b5:e8:a3:a5:cb:7f:72:
                    b2:76:c7:6c:83:ce:ed:c2:af:69:f6:d4:3f:b2:4c:
                    a0:aa:2d:6c:d8:43:0d:6b:85:d1:9d:91:5e:4b:1c:
                    f1:a2:c1:e5:03:40:96:47:17:64:a2:46:cd:0c:ca:
                    e4:e3:33:b9:0c:7d:2a:46:49:36:33:1f:3d:be:f3:
                    cc:f5:a0:5e:39:11:09:6e:d6:22:42:cb:ee:f7:e3:
                    17:8c:34:e4:18:92:fd:99:19:80:c0:29:a1:43:8d:
                    f1:5d:45:fb:05:13:44:e6:48:59:6e:40:b5:46:b7:
                    1e:a1:bf:22:3e:df:bf:df:aa:bb:2d:32:1c:e5:8e:
                    da:16:98:9c:27:a0:3d:7a:0e:de:56:4e:3a:27:06:
                    d2:c1:2e:2a:2d:96:d2:50:b0:76:d9:f7:f8:5e:49:
                    44:33:9d:3d:0a:4e:c6:28:50:00:fb:d2:98:a2:2d:
                    f2:46:fe:50:ed:9f:37:ce:58:95:22:4b:35:54:30:
                    52:74:bf:da:52:25:1b:10:33:9b:b1:ee:bf:50:21:
                    33:e3:25:ce:36:19:46:33:b9:37:48:56:8b:d3:b8:
                    bc:b0:a3:ef:8d:80:fe:07:4a:50:a6:5d:ed:a0:78:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F3:8C:9A:C3:33:DF:13:42:0D:4D:B9:94:B5:62:22:03:8A:69:3C
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:ab:d0:67:0a:a3:43:a0:af:e3:81:bf:ca:2c:33:9f:bd:
         b9:a6:8e:10:df:c3:6b:e9:23:8b:a6:e3:1b:0f:09:77:c6:ce:
         8a:87:84:2b:b1:9b:e4:e3:cf:6a:9d:5a:33:27:67:6f:5e:fe:
         30:a0:7d:96:ce:83:48:c2:97:35:d1:84:22:e7:38:1a:84:32:
         98:0d:ea:4a:64:98:59:8a:eb:1b:14:46:1c:18:6b:04:47:26:
         19:4f:9c:42:cc:49:29:cc:bf:37:38:32:f0:c4:6b:99:e4:7f:
         f0:88:8b:17:cd:8f:04:91:2e:c2:e2:b3:4b:73:75:76:8c:6b:
         ba:1a:1e:1a:96:71:e9:2a:6a:db:70:ca:0c:54:44:81:d5:79:
         1b:e1:bc:78:03:05:68:87:15:c8:3c:13:c7:96:fd:25:1e:1b:
         6a:fe:04:c7:45:7e:8a:12:0d:81:74:f4:bd:2d:b3:15:20:0d:
         04:05:a7:e8:71:bd:99:7a:fc:8a:b4:96:25:c1:b4:5b:7a:33:
         0a:dd:98:f9:9e:9f:60:cf:96:6a:6b:04:65:be:fc:a3:1f:00:
         9b:7a:9c:dc:13:e3:d2:65:1f:1e:36:53:a6:25:8c:46:d8:8c:
         b6:41:e8:3e:69:33:4d:1b:4d:48:ce:40:00:ad:b0:f6:ab:3b:
         6a:b5:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:15 2026 by rpki-client