Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          qvX/+ZbuUOVwSe5CvmNbHxT2M9zHigOteec9WSkXoLQ=
Subject key identifier:   38:65:D8:61:BC:8C:F6:99:14:9D:95:25:04:38:3D:7E:FB:17:D9:36
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019F8F7F83D51781406AF178AA7608C8B423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1ACA
Signing time:             Thu 23 Jul 2026 15:02:06 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:06 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:06 +0000
Files and hashes:         1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
                          2: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
                          3: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
                          4: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
                          5: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: LXkUrKs9/0AphessEJWZvHDAPSsFXchMHXF+kw5eLkY=)
                          6: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
                          7: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
                          8: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
                          9: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
                          10: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (hash: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=)
                          11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
                          12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
                          13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
                          14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
                          15: KZa0_YbQudyugjKyiPylUaqa8cM.roa (hash: a784ru0dQdWa0IZvtgp9kIyG4IBuCvFCniVmgSRiiKk=)
                          16: On2KNHxJggzhj5AgXK5NbPHrL2Q.roa (hash: fsSPQUeJYyWLXiz1hpLry6K4C/Imk5T/lJNXRxqJKA0=)
                          17: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
                          18: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
                          19: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
                          20: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
                          21: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (hash: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=)
                          22: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
                          23: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
                          24: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
                          25: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
                          26: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
                          27: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
                          28: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
                          29: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
                          30: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:83:d5:17:81:40:6a:f1:78:aa:76:08:c8:b4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jul 23 15:02:06 2026 GMT
            Not After : Jul 24 15:02:06 2026 GMT
        Subject: CN=3865d861bc8cf699149d952504383d7efb17d936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:e2:59:99:0e:50:b2:40:ff:ee:0f:08:ad:
                    ba:2e:7e:78:27:ff:27:49:16:18:00:3c:fe:36:33:
                    dd:5e:94:c6:87:05:71:b4:7f:65:04:8a:ee:96:30:
                    2d:e2:5a:1c:89:57:50:52:4b:60:26:ed:6e:3a:c3:
                    1a:e5:d4:05:86:fa:42:7d:68:64:52:67:a5:8f:ae:
                    8e:8f:7d:14:db:4d:5f:53:11:31:08:ca:35:0c:55:
                    f2:79:fc:a2:0e:e3:b8:2e:93:38:a7:9f:73:bc:8d:
                    4c:f0:f4:ac:64:43:b3:e4:a1:8f:62:ee:a8:ea:ff:
                    af:85:00:ca:cc:7d:23:f9:32:f9:38:ba:da:2e:a7:
                    3a:4f:1e:b6:ed:a5:5f:4e:f7:e8:9d:33:2e:a1:0a:
                    6c:e1:d5:2d:f8:c0:c6:a0:14:4a:1b:34:8a:04:3d:
                    e3:eb:db:ad:76:9c:87:94:d9:c8:7e:d4:6a:03:e0:
                    e8:46:21:86:84:23:cc:6d:26:5a:ee:f0:7a:6b:cf:
                    34:92:c8:36:c7:92:00:ac:6a:27:ae:b8:07:84:cd:
                    98:87:23:78:6b:73:10:bc:74:48:73:0d:23:81:7b:
                    27:a1:c7:3f:2a:6d:b9:50:a5:38:67:e5:e4:4e:61:
                    9d:e9:c7:41:cb:ad:ef:0b:31:ec:a4:93:d3:bf:d1:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:D8:61:BC:8C:F6:99:14:9D:95:25:04:38:3D:7E:FB:17:D9:36
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:cf:db:f1:eb:e7:11:be:63:fc:0c:53:68:40:15:05:4a:
         4f:c8:32:0a:93:b7:3f:87:41:9b:71:0d:df:8e:35:b9:78:55:
         91:95:99:6f:0c:f7:5a:88:10:fb:49:3e:ba:fb:eb:10:6f:f6:
         a3:64:83:66:6e:c0:41:41:38:5b:66:03:d8:a3:a5:81:42:01:
         89:23:38:6f:ac:3f:a6:c6:53:25:a7:c9:49:43:39:bd:4e:4d:
         c5:34:db:64:ff:51:37:ee:e6:1d:b9:aa:89:77:52:61:39:1a:
         a5:7e:75:ae:d0:cb:84:13:45:b7:51:46:b3:ba:ec:89:b7:bb:
         cb:4e:4d:9d:dc:98:ae:77:66:5e:65:e5:99:2c:24:a8:e3:da:
         4b:ce:85:8c:99:3d:c0:9f:ed:c8:40:50:53:77:fd:f8:5a:e3:
         09:16:ab:5d:3a:08:14:7a:0b:82:e9:3f:33:3a:b3:e3:9a:ca:
         e7:2e:0c:5e:4d:f6:b0:11:e2:ae:8c:91:59:9d:56:8e:2f:91:
         93:84:f6:11:ea:34:72:74:94:ef:d7:09:9a:5a:f0:6c:48:5c:
         2b:7f:06:e2:5d:c6:0c:41:0b:a7:bd:2c:a6:ce:77:cf:ae:20:
         5d:55:50:22:91:48:e7:d0:39:53:d5:37:a7:b8:3d:69:b8:97:
         c2:3b:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:26 2026 by rpki-client