Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          +Q6yGlT/XHgLl6TEJ4Ldtx4sYn7sV0evZG+xWO4LdMc=
Subject key identifier:   36:47:72:5F:4C:EA:9F:94:35:AB:E2:A9:2B:FD:B0:9E:C9:D6:04:A0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019F916D1A885D4AF95224117976CD8B055C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1ACB
Signing time:             Fri 24 Jul 2026 00:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:14 +0000
Files and hashes:         1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
                          2: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
                          3: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
                          4: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
                          5: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: K39ZJnPWFQUnfyztnTaoio2pZtHxMl40yc2gOnzk1MQ=)
                          6: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
                          7: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
                          8: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
                          9: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
                          10: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (hash: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=)
                          11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
                          12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
                          13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
                          14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
                          15: KZa0_YbQudyugjKyiPylUaqa8cM.roa (hash: a784ru0dQdWa0IZvtgp9kIyG4IBuCvFCniVmgSRiiKk=)
                          16: On2KNHxJggzhj5AgXK5NbPHrL2Q.roa (hash: fsSPQUeJYyWLXiz1hpLry6K4C/Imk5T/lJNXRxqJKA0=)
                          17: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
                          18: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
                          19: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
                          20: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
                          21: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (hash: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=)
                          22: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
                          23: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
                          24: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
                          25: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
                          26: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
                          27: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
                          28: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
                          29: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
                          30: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:1a:88:5d:4a:f9:52:24:11:79:76:cd:8b:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jul 24 00:01:14 2026 GMT
            Not After : Jul 25 00:01:14 2026 GMT
        Subject: CN=3647725f4cea9f9435abe2a92bfdb09ec9d604a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:75:42:73:20:75:3a:14:7b:04:58:f8:07:
                    75:a4:32:10:54:2c:b7:3c:66:7c:96:62:c9:14:65:
                    dc:bd:3c:0c:ff:88:43:ad:82:3d:f3:bb:d0:d3:32:
                    40:cf:fa:29:b7:cd:66:9d:8c:eb:9c:d7:93:07:7b:
                    0d:f2:78:a5:b3:e3:19:81:fd:0f:0c:f7:2f:98:59:
                    13:0e:23:60:37:f0:a2:74:00:47:d1:63:d1:d0:ce:
                    ec:27:3a:f7:8b:02:8f:f2:17:e8:fd:1c:e1:28:8f:
                    1c:40:b9:ab:5e:50:36:86:8b:61:63:c2:00:36:4b:
                    68:9a:4e:8e:1f:43:d5:5c:65:e5:70:d3:68:39:61:
                    b6:e5:58:95:2c:19:d4:a9:ab:db:96:6e:66:a4:cc:
                    41:41:32:ca:a0:d1:ee:2a:e4:d8:1b:8c:9e:c1:e7:
                    ea:8f:49:cd:97:86:c0:04:11:f5:39:f8:3c:ea:ee:
                    80:3a:27:99:90:53:38:e7:de:30:d4:1d:be:b5:00:
                    99:84:9c:65:e1:fe:47:3e:3a:d4:08:52:eb:5d:70:
                    35:63:d2:16:3a:43:9c:86:3b:57:fa:9b:4a:a3:c3:
                    f7:f0:9e:81:55:b7:c6:6e:ac:62:0c:27:06:a1:a6:
                    ca:f1:42:0d:38:b3:98:e9:ab:a7:68:83:6d:a8:b3:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:72:5F:4C:EA:9F:94:35:AB:E2:A9:2B:FD:B0:9E:C9:D6:04:A0
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a6:4a:9d:c1:f6:82:ee:a3:de:da:d9:e8:9f:71:d4:f3:ef:
         e8:ce:3d:e7:3a:dc:ef:56:e5:92:fa:c3:e6:05:e6:aa:0f:f4:
         54:51:2e:c0:62:38:d3:87:3f:b7:8b:22:22:19:0d:d9:21:e1:
         65:4d:e7:a7:4c:45:ea:e4:b9:c7:ed:03:07:8a:18:d8:81:7e:
         41:ba:89:94:c0:7c:31:30:4c:51:1f:89:32:97:2f:db:35:cf:
         04:22:2c:c5:ed:d8:84:54:9e:e2:37:d3:33:85:39:a8:1e:26:
         62:dc:28:de:a0:52:54:41:61:eb:0f:a0:54:e2:51:19:ef:5a:
         cb:59:08:c1:6e:08:70:09:c3:81:79:04:d9:fe:91:28:d4:bc:
         d5:5f:ac:26:b3:4e:39:bd:a4:c9:62:4c:b6:ff:4e:32:32:23:
         a9:44:ad:cc:4c:ea:e3:e1:2f:74:e8:fa:25:96:82:1e:54:93:
         d6:39:76:46:87:08:51:c0:c1:4f:d8:bf:a4:20:a1:ce:68:65:
         ae:07:0a:53:c6:5b:28:88:5d:00:c8:7d:8f:87:6a:57:87:1e:
         7f:21:83:18:be:fb:63:c7:95:83:34:89:a9:de:e3:d3:e0:85:
         68:55:23:6b:3f:24:e6:7f:20:f8:04:8a:36:db:72:4c:9e:35:
         29:f1:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:24 2026 by rpki-client