Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
File:                     8Z05blrVtyjOls-873X1j1DmEAc.mft (raw, json)
Hash identifier:          X+RtuIjj3ZUIRiGsWadQRlFWRCbhJHbypbBhmkYMFGY=
Subject key identifier:   50:0E:78:90:77:9A:8F:53:6F:B9:7A:84:98:9B:FB:EC:55:5B:85:65
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Certificate issuer:       /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial:       019F8FB4E38939117606FF2A6442F959BFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
Manifest number:          41
Signing time:             Thu 23 Jul 2026 16:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:24 +0000
Files and hashes:         1: 1-SrNkJ_64slvcxIYCtIWwr_ziZo.roa (hash: wC11btMg48oJqpnE5kIKjSpODZBVHk6fn773tx9e1RU=)
                          2: 8Z05blrVtyjOls-873X1j1DmEAc.crl (hash: ISzvSHh5/8d1pNb/mjuwYRllqUHXvvT0QuRxCaNbyMs=)
                          3: AtCvDZ1gkwKaUr0RAylS9H6WM3o.roa (hash: DvUxPPL0ZeYMgyuO8EozAf26cpQppfVc22cW8ci010U=)
                          4: Dhi5B2eTlpGFOydBSPNIaYSidSY.roa (hash: yNkwT1TF61Cxe0EeoPTICAxd+24qk4US46TaOUvyyeo=)
                          5: EOYmWFU2P5zIUeHMuSlY6cnQqIw.roa (hash: mQSUxp91QdwQKxr2rE4JmFGkd5x9nm55ITw2rDvsMrU=)
                          6: GIxEbcE4snVftAhCgt1cTYRBjz8.roa (hash: iaySxkTBLxjauIEjaDIAJVCjjvkkVkcWxP728iqyNoc=)
                          7: K2GWtLYMAohjVuHS9DpG0ijtxy0.roa (hash: Pz8nYPaBGF6TCKGobR6JMsE+6JQiMr6Srm1o6o74t3E=)
                          8: L8c0UwhnCK23bNK0a8cfhU3hjY0.roa (hash: qVBWnnDtxju/zVfDeVmLOnp5RK6iMuivdhdiL42hZVs=)
                          9: LGwJ-zpLpKLY4oV4l69bCZ1fauU.roa (hash: 4yO8h3FU5ovTGLZQ4PWlvRWpjKxDfjoDBv6TYzszsBM=)
                          10: Mn_cdSX9-8vcNApIDqmQopi-zs8.roa (hash: vuWv6/D61zZTC43qWH2VxQYewYoM/GrmpSiGlKeBN24=)
                          11: RKDTZDAapjyGjmgcOC5hOMUCT48.roa (hash: GdUclTSeXMaBONqcsxJlGmgC4gytMMz114zVwX8TEdA=)
                          12: VDFXt-dXviihS84RgwHcRcxaVZM.roa (hash: tbMXrVysPbiN87go1BkqgUUoSDVWVfDWBolacXRuiRQ=)
                          13: WObWrh1qxqjAIJFdbbp4MiLgXUI.roa (hash: lVhgHB9c0I13TXQ+I0HDDlPJ2sYG66BAHVl20xtcAlE=)
                          14: YRakhs6efEFnm6l_LULBYVyFEIk.roa (hash: djebTsnNVE3WxVjIBUpAJhnh3/3A5D39quUN6bFqtyM=)
                          15: ZsBXsiO20xCp3dTuXx4MmBrhQFo.roa (hash: ufDELerNa/k1eDfdmKPm9whfcY8j/xL+os6dSH+k4AE=)
                          16: aBLsMauGKIS43dLOfcpL0XdNHtM.roa (hash: HtmyjY2kf2C9fXcumpzEFVnT60/n/nQya3SUQ0iZuFI=)
                          17: awQdHVIR10Sfnf3qMMuTCd3lhsI.roa (hash: NtZJ2aDYhwabQadn3kE0qvG4S6OLIASqys8+ERwasrg=)
                          18: d0oDNFtupKBE5SmEnpPU7kF_d7U.roa (hash: gpjTQDKI3EBYyEaeePohrLuOYHhtc2RoaMFL6AcgShU=)
                          19: fq3XjITgyCpBfRb5dZODNlC78rA.roa (hash: 8NCVqaeZ/P+lGhOlQTcJ/FE6jWTwRsi8YCx6ZhUrJnw=)
                          20: fwDF7NfWK5kjIj0MPYpEyXbfAVU.roa (hash: P6ANF+yzdWqN3RNz/JiJIMnS1YuXeCaT7fjDPfFwX/w=)
                          21: fxZMntMS1K7s1_SlS1AVFEtX00U.roa (hash: MWEWzctsa9u3a1v8a+wryK0O3oKvmxTaDmm4Wqx9EA4=)
                          22: iC6Uza-NHrGKqMhykESnQekh6lg.roa (hash: IPs4PI6W9K7bfe+8Mlawt5IFCK1JJ0x1m8QfffrK3VM=)
                          23: iSGD7Yd3EYidBfBKdlJD8ax-oyQ.roa (hash: KH96g93vL+2pp/9qLDPcj4+bRqGTak1g9rArLQUe3k8=)
                          24: j95KZacu65LcIUxcLXVmOAdhH6Y.roa (hash: PJ2W72hMJu9cz8ZsopSnihi9xme+iNzvYlbW5Aa4KWE=)
                          25: jeLF5ceyt9VNXiS_AwP3xYsUoTE.roa (hash: Ez9m0bhUU870nSVicGfKfMBRrQBAVfz5oCOWyzkLOYY=)
                          26: k5l8imJyXXzz3QDSE7WXEepmmpo.roa (hash: NLjr0pMr2r+WXjCry+MMRuslx/XS/hTXMSWHanKvTX8=)
                          27: p-Ln8gMwcxh25XojvNKPYPhBetM.roa (hash: 5FiAFCofU79NZF0gfy5Zl2VsARTHxYy7/SbCEFmVzL8=)
                          28: pXoM_ZvT2GIdC09rBn-aygbRiIw.roa (hash: BG4UFOJpjdfRuKyVZq8WAK1+byMi54L2+Lp5SiXtTOA=)
                          29: phreA32JIBh9EEBki_eHuMSlC7c.roa (hash: oE9AJHyFgj/ewpAvhdqCYOGzG1lWvz6E+SACng5xB9I=)
                          30: t5Us2Vb1_gCddzOcbszZqXCiryQ.roa (hash: inLGSCdl/floj6JmJGfOMeu7odrCEI2N26VONTqKdRU=)
                          31: tjrZtcYd3WCDcECvuc602OdRVfU.roa (hash: 32OjWovYfhiPA1f94j1L1UOxJ1y/e1Gns2retSrKm3s=)
                          32: uKunhyk3XJsedoH46lY9fnPCTVA.roa (hash: Aw48trw5KZXSgLxSh/nXOd1ecpyxN9Qk1fCKZrKnssE=)
                          33: wktP20h7fSODZANVGDm7ZiO-Vcc.roa (hash: 1JRN1Veu3nmM2MIXfwmspbtUX8SWnNZ8r9nc1tacNI8=)
                          34: xG4ON5piTWUrbJZW0C8M9TTrCbE.roa (hash: y3hHFlvGg9uUU6GoSQ7UbNdISjixgkkmewwYg4y2R38=)
                          35: yQudwm_1B1Rb0raxiSznli8z5eA.roa (hash: hP41DAGYUjAntZOmp95Ru1B3qbs86jRqP1JwGjTF/Ds=)
                          36: yfVg2Ri9wmXpQQ7e1BfSstwdYmE.roa (hash: /lE1a4wM5yqGo+jmdWNHczzQGadra5za5I7+44kOkNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:e3:89:39:11:76:06:ff:2a:64:42:f9:59:bf:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
        Validity
            Not Before: Jul 23 16:00:24 2026 GMT
            Not After : Jul 24 16:00:24 2026 GMT
        Subject: CN=500e7890779a8f536fb97a84989bfbec555b8565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:c6:0a:34:ee:3a:0f:9d:49:15:20:06:5e:
                    da:6e:fa:12:2a:fb:bd:ca:f0:11:da:7d:8d:aa:65:
                    a0:9c:c2:9d:30:4a:d0:a7:08:77:7c:62:f6:31:ed:
                    63:08:46:00:41:1e:d3:f8:26:3d:23:a7:c3:c9:a1:
                    56:5c:45:04:75:d9:63:cf:1d:39:95:cd:86:0c:10:
                    dd:5f:b6:16:ae:50:66:49:23:ff:aa:26:00:29:ba:
                    8a:ee:6a:b0:4c:7e:77:31:f1:cb:4a:1e:8e:8e:20:
                    3e:f6:63:63:ab:cf:b3:1f:ed:72:39:cb:5b:06:dc:
                    a2:84:6e:c1:f2:1a:d7:9e:49:39:d2:57:b7:be:c3:
                    42:f2:20:16:4b:e7:a1:be:48:79:dd:e1:dc:bb:00:
                    eb:a9:ae:8e:c6:a9:e3:a2:9f:0a:20:bc:ed:76:a4:
                    28:b4:ca:a4:b0:b9:fd:f2:43:f3:b2:33:9f:38:2b:
                    3f:97:e2:c9:a6:5a:83:90:08:8c:96:c8:4a:bb:28:
                    4b:f1:6d:33:b3:2d:c8:72:9e:9d:c1:99:87:8f:f2:
                    2a:91:8d:3a:96:4b:e6:f6:e6:3f:90:71:9e:28:6f:
                    10:de:8f:c7:a6:20:3b:d2:9e:59:9d:4c:8e:8f:ba:
                    e6:3b:81:fb:75:5c:91:4d:c1:9d:4d:a1:e1:8b:94:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:78:90:77:9A:8F:53:6F:B9:7A:84:98:9B:FB:EC:55:5B:85:65
            X509v3 Authority Key Identifier:
                keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:17:5a:ba:b1:93:5e:7e:b9:2d:6b:eb:73:4f:33:79:25:a1:
         9b:62:e8:0f:cb:24:4f:d1:7f:2f:0b:0f:ba:68:6f:15:e0:c0:
         18:c7:1e:b5:54:ef:12:d2:0e:17:17:ef:a5:ad:c2:54:1a:66:
         83:c5:11:34:40:ca:5b:55:89:c5:9d:c8:09:f7:06:49:01:7f:
         93:fe:3e:24:e4:27:9d:57:66:6a:83:17:45:11:b9:b2:66:d5:
         cd:9a:93:5c:28:01:70:c4:83:1e:a9:b3:84:45:96:a6:64:05:
         fc:7c:be:08:6a:d2:3e:b1:88:77:08:e8:e0:91:ee:37:1e:43:
         a7:f3:56:2b:ba:20:29:83:f7:dd:34:68:0b:1d:85:81:dd:9a:
         c7:04:92:6f:73:2d:35:6c:31:e8:36:a0:4a:b9:05:4b:66:96:
         59:18:7a:40:21:63:71:e1:f7:39:5c:f5:59:47:67:65:cb:91:
         93:ae:dc:c2:e1:56:6b:b4:7c:c3:ae:36:1f:d8:58:23:55:d3:
         73:2d:7c:1f:d3:0a:86:0f:90:61:18:d0:eb:ce:cf:d5:25:3e:
         52:5b:8e:86:96:35:a0:a0:27:59:bb:24:fa:c5:7f:d1:97:f6:
         f5:b4:e6:9e:94:96:64:2e:83:4d:53:d6:ac:a4:22:46:3b:1e:
         ac:5b:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:15 2026 by rpki-client