Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          QZt2YGw5OJxnWABNmZmzsfingQhkVi3kwVMZD4Z6vdA=
Subject key identifier:   DE:1E:76:F1:0B:9A:F4:EE:88:7D:3B:B1:62:3E:D2:CD:C6:10:2D:8E
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       019F8FB5614CA7EE9EF67B67404F00896A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          1A24
Signing time:             Thu 23 Jul 2026 16:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:56 +0000
Files and hashes:         1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
                          2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=)
                          3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
                          4: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
                          5: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (hash: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=)
                          6: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
                          7: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
                          8: X7CBYKuwZavOmFbf8xJJDhABAJ4.roa (hash: XXFExiGUxJHCf32+M8YXjA/DO0qOOWZKBpQs4MlsYQo=)
                          9: XhKy1InQkWlvSwWNwzaeAW8Z4pk.roa (hash: iq+DLOeRYa0b+WOtuiyuomokwYAcR6VQbGOdLVM/R6g=)
                          10: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
                          11: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          12: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: XL0wJm3YXgLg8ed8nHSdKvAFIpFRSFa/Nul0R5niScw=)
                          13: cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa (hash: MJoA4QKvMfD128eHraMg34YoNGsOhXAw8I0h2v8nSz4=)
                          14: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (hash: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=)
                          15: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=)
                          16: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
                          17: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
                          18: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
                          19: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
                          20: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=)
                          21: wRsmJd7CIJgwynHO3eDWK5E65EA.roa (hash: Is86hG9/O11lh+0TSiK7Jnli8yF4j5q5FW3grn/LkD0=)
                          22: yJBe4wL__q5eFSy_v2lsZXclqhQ.roa (hash: waMNp3qW5tHL4UcllPTtbvZg9/Osk4C76/bHTxN/Vec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:61:4c:a7:ee:9e:f6:7b:67:40:4f:00:89:6a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Jul 23 16:00:56 2026 GMT
            Not After : Jul 24 16:00:56 2026 GMT
        Subject: CN=de1e76f10b9af4ee887d3bb1623ed2cdc6102d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:f2:58:ea:c1:cd:42:c6:90:e2:53:8e:80:
                    02:82:03:37:d1:16:ea:4a:c1:80:81:84:e5:62:4e:
                    58:33:31:01:e6:8f:37:bc:0a:7b:7c:4e:98:3d:2b:
                    5c:be:88:ee:1c:fc:11:3a:e4:44:15:b5:97:d3:22:
                    79:31:ee:ca:b8:fb:0f:88:83:93:14:22:16:ca:14:
                    06:02:0f:3a:12:2d:53:f0:fe:e2:83:b0:8d:24:69:
                    30:04:0f:8f:84:a8:8e:c4:d3:98:16:cc:cc:a5:06:
                    ee:81:5b:d7:41:11:a1:21:7a:bf:60:74:c9:d3:a0:
                    81:89:ab:74:9f:fd:51:54:24:e9:a4:bc:1e:43:70:
                    0b:e2:40:d8:a1:3c:56:2a:34:b5:5f:42:ff:2c:84:
                    13:c7:7f:73:61:e9:26:cb:94:2e:dd:24:6f:e5:32:
                    94:62:92:68:d7:ab:c5:54:0e:2b:5e:6e:8f:00:0e:
                    eb:09:db:53:7e:6e:30:ea:7d:e6:41:ad:fa:e8:29:
                    fc:55:ae:17:d2:97:32:22:3a:79:9a:b0:63:84:ff:
                    44:8b:37:b6:63:c6:32:11:72:9e:41:83:28:d7:6c:
                    1a:25:ad:18:bc:24:5e:19:35:43:6b:b4:d5:60:41:
                    72:40:77:74:17:db:c1:7b:6e:31:00:0f:5f:00:6a:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:76:F1:0B:9A:F4:EE:88:7D:3B:B1:62:3E:D2:CD:C6:10:2D:8E
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:9a:8e:c7:11:9e:7b:13:be:0d:7f:fa:38:49:0e:67:ab:
         b4:46:ea:35:10:93:58:b5:ec:b0:3c:e0:8b:37:c5:27:7c:50:
         cc:5f:85:e8:8c:3c:b1:b7:d5:02:0b:7d:78:a0:37:5c:fc:c6:
         49:3d:84:2d:02:c9:37:31:98:29:c1:d2:c9:c6:09:04:af:47:
         6c:84:e7:57:67:92:90:73:f8:4a:9e:e8:ba:c1:83:2b:de:cc:
         81:d6:d2:02:87:5c:ca:b5:d2:de:eb:62:8b:84:85:74:b2:b7:
         19:df:d6:58:1d:75:77:dd:38:a1:e0:91:29:e9:20:b3:3c:5e:
         e7:69:95:13:e2:20:52:fe:7d:1d:12:6f:82:bb:7c:79:78:a4:
         1e:11:03:d8:73:70:e3:c8:3a:7a:9b:77:8a:e5:7d:81:87:55:
         17:be:30:2e:da:8b:1e:74:7e:c0:86:ad:68:71:84:4b:6f:e8:
         9a:d6:fa:91:9c:7d:24:89:4b:ee:48:e2:27:1b:2f:12:b4:b1:
         7d:64:11:64:40:d1:28:10:11:7e:7e:2c:62:e7:89:2f:67:22:
         60:08:54:0a:cf:ab:0c:54:22:1a:fa:42:f4:dc:47:71:65:eb:
         f6:31:8b:b4:e9:93:aa:04:0f:39:04:b5:36:54:3b:00:9e:3c:
         a8:61:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:08 2026 by rpki-client