Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          DyvXKYStXVGEFoNOEAdVG8f76yRXZQTwz8nWPNLxSpM=
Subject key identifier:   E3:C5:E8:0D:FA:44:E7:4C:E3:6D:7F:31:F6:8F:D5:CB:A8:98:0A:41
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019F902359DDF754F350FD39AD2A0D2B4188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          0DE3
Signing time:             Thu 23 Jul 2026 18:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:03 +0000
Files and hashes:         1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=)
                          2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=)
                          3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=)
                          4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=)
                          5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=)
                          6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=)
                          7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=)
                          8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=)
                          9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=)
                          10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=)
                          11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=)
                          12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=)
                          13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=)
                          14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=)
                          15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=)
                          16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=)
                          17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=)
                          18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: F3mIoR7lzbL4FUkNf3MaHkIUwAGV+HZ1alrzGrR+eU8=)
                          19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=)
                          20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:59:dd:f7:54:f3:50:fd:39:ad:2a:0d:2b:41:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jul 23 18:01:03 2026 GMT
            Not After : Jul 24 18:01:03 2026 GMT
        Subject: CN=e3c5e80dfa44e74ce36d7f31f68fd5cba8980a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:ec:99:57:21:b8:b6:59:0e:35:f7:d3:96:
                    f5:12:f5:6b:7f:08:65:cc:14:14:79:5c:90:54:94:
                    8f:4e:c8:df:aa:59:02:f0:df:3c:ef:ff:f4:df:91:
                    71:24:a0:78:5c:30:ea:73:f1:88:8f:af:ec:a8:af:
                    06:2f:f5:91:a1:5c:2b:ed:56:20:b5:0a:29:5a:c6:
                    d7:2e:01:91:70:58:9f:38:da:57:55:c7:ec:5a:13:
                    d7:9c:26:42:f7:e7:29:f4:87:1c:d2:73:6a:94:5d:
                    3d:49:0b:03:3d:32:1b:29:a6:26:d0:68:d9:e5:6e:
                    95:fd:15:30:b6:d1:96:30:a5:12:60:3f:c4:b8:9b:
                    e9:d7:46:f5:0f:18:1f:21:d2:84:07:da:41:a7:0e:
                    45:dc:1b:b3:fd:22:45:b1:50:b0:4b:39:d6:73:fe:
                    65:29:59:91:ac:d0:fc:c2:82:6e:5a:80:70:9f:95:
                    48:cb:d7:18:29:f4:3b:ec:42:3d:c0:eb:0f:3d:e3:
                    19:35:e4:69:dd:dc:ee:17:7a:74:f5:b9:4f:63:3b:
                    ee:b9:32:22:60:23:cf:7e:3a:44:b1:28:9e:c1:2f:
                    bc:ef:8c:f6:6d:fe:25:bd:72:26:9f:c7:cb:f3:7a:
                    bc:b7:18:aa:30:3d:8c:78:a5:7f:a4:81:fe:1a:0a:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:E8:0D:FA:44:E7:4C:E3:6D:7F:31:F6:8F:D5:CB:A8:98:0A:41
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:7e:a0:01:5a:38:da:cf:63:a6:95:44:a0:01:cd:ef:4a:
         a8:76:20:f0:97:b5:2a:a6:c2:00:e1:f1:23:20:e1:26:23:39:
         fb:26:93:22:82:ba:d8:27:a6:48:f7:19:ad:79:80:9e:4b:5b:
         47:f3:14:ca:3a:4e:ce:16:c6:c2:5d:68:2c:ac:1a:5d:4c:98:
         6d:ac:9f:e8:88:a6:7b:93:e4:b5:4b:c3:ee:7a:6b:36:ce:8d:
         d0:3a:5f:ba:63:81:b3:43:49:5d:40:54:e4:38:00:96:e6:f4:
         fd:54:1b:97:54:1f:21:c8:ce:3f:86:a6:a2:82:67:af:4f:7d:
         3a:a2:4c:7d:89:14:30:02:c0:9e:35:fd:45:23:83:af:ae:6f:
         67:4c:50:6b:da:33:c7:89:8e:53:ec:17:4c:31:b5:86:e4:95:
         68:07:63:6c:46:d6:21:6a:0a:3d:d4:52:a5:28:06:5c:d3:bd:
         65:b3:38:bd:09:23:91:8a:a6:d0:4f:d4:f2:67:90:53:d2:b1:
         6e:4e:7c:7d:ab:a0:b2:94:1d:3d:5c:7a:17:ff:d0:9a:43:32:
         bf:c0:d7:48:5e:ba:d0:a4:e1:b8:19:96:30:69:1b:dc:7b:4b:
         c3:16:95:2c:0d:3a:e6:8f:2a:e2:1c:ce:d8:b5:8f:47:38:8f:
         7c:34:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:03 2026 by rpki-client