Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          AkIylatoTsUhPst4ndAMUi41SnrFRdrdwSBcyXOeC6s=
Subject key identifier:   77:3E:0B:E4:26:64:4A:03:B7:42:0E:9D:62:8C:84:7E:B6:FE:F8:58
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       019F91A45E302ADC8661CD8AFA57B8218B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          1A8D
Signing time:             Fri 24 Jul 2026 01:01:36 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:36 +0000
Files and hashes:         1: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (hash: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=)
                          2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
                          3: 2KoAgZVTwnbWcixjMbqnJvf6xN0.roa (hash: p0gbt1YvA9hNbGitowNrqQTyinoOy92to8c/+jH2B7c=)
                          4: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=)
                          5: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
                          6: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
                          7: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
                          8: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
                          9: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
                          10: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
                          11: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
                          12: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
                          13: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
                          14: XtF6dx1K_-9E8G1QrrAN0rjOP2E.roa (hash: AEIk+UMFJZOy6fARFY4HiJljniS60LJkRzj37goEaUE=)
                          15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: cbRUtIN5q5dIFlvzAW4KF2iM+eqldJoE2B2fjWzfd88=)
                          16: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=)
                          17: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
                          18: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
                          19: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
                          20: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
                          21: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
                          22: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
                          23: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
                          24: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
                          25: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=)
                          26: sjQCjerjRwfah-q2hwwOmAstMTo.roa (hash: N10Zo0ylNZWVNpGxcYshMOYMt1EH12p203A0DA3EChs=)
                          27: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
                          28: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=)
                          29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:5e:30:2a:dc:86:61:cd:8a:fa:57:b8:21:8b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Jul 24 01:01:36 2026 GMT
            Not After : Jul 25 01:01:36 2026 GMT
        Subject: CN=773e0be426644a03b7420e9d628c847eb6fef858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:f2:a8:f9:8e:3a:50:53:29:71:6b:ca:8f:
                    77:4f:0d:f2:72:f3:ba:f0:29:dc:2f:48:2f:b6:34:
                    98:84:df:97:49:3b:f7:79:69:51:20:50:17:4f:e9:
                    83:ac:6f:3d:4e:aa:ce:92:0f:61:6c:78:41:28:7c:
                    a1:76:81:4e:ce:37:88:57:bd:6d:a3:8b:4c:44:05:
                    9a:a8:d7:9a:0d:8e:26:2a:f3:63:b8:2c:64:c6:80:
                    8c:3f:95:d3:45:09:fc:a2:4b:11:c8:c7:96:6c:fa:
                    42:0d:83:1e:48:28:e1:d9:4f:ce:07:42:07:f2:e8:
                    b7:f7:76:c6:e6:1d:76:dd:58:41:f0:e5:40:32:e2:
                    8c:9e:c8:95:e7:83:5a:a2:ef:b4:1c:a7:aa:3b:c9:
                    02:1e:2d:59:fb:8b:bb:a1:67:90:0c:ef:7d:0b:25:
                    60:2c:a0:88:84:31:25:c0:ae:48:c0:05:de:03:e3:
                    fa:69:2e:a0:3b:b4:ce:8e:91:25:15:76:f7:1e:f8:
                    3e:0b:db:6f:36:7e:84:77:59:1a:3c:47:67:d3:da:
                    47:5a:2e:a1:94:ad:fe:06:2e:3b:95:66:e7:8d:b4:
                    ef:20:c9:d7:86:74:69:58:82:c2:10:7f:dd:dd:7a:
                    c4:6b:1b:db:db:eb:04:13:08:d2:4e:e2:01:ce:e7:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:0B:E4:26:64:4A:03:B7:42:0E:9D:62:8C:84:7E:B6:FE:F8:58
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:92:d9:2b:e5:42:5b:0d:41:03:e6:cd:1c:87:84:36:db:
         e3:86:4a:96:89:8f:3c:b6:dc:48:b3:ae:c0:fe:46:8d:55:72:
         65:93:98:73:7d:fe:87:4d:1d:a3:5f:e7:03:f3:b0:e0:6f:e4:
         d3:14:a8:fc:70:5a:ee:4f:30:a0:52:b5:a3:70:34:0a:3a:79:
         71:a4:5a:8f:5a:ea:af:4a:79:4c:2c:82:4f:66:be:a5:f4:d0:
         b3:c6:6c:ac:4a:b2:43:e5:0b:48:47:11:12:d4:e2:d6:62:79:
         d8:ab:ec:cc:14:88:f6:e3:82:e4:a9:b4:32:df:dc:ec:6d:4b:
         5a:d7:05:dd:30:bb:72:76:7a:e8:33:c5:85:cf:30:2f:3e:13:
         aa:8a:bc:e2:07:77:a3:60:d7:f9:ce:77:e7:d1:95:d1:94:82:
         97:38:c8:f5:43:cd:1a:b8:c0:d9:10:94:42:ce:86:e0:74:19:
         3e:aa:89:b4:66:2c:97:fd:9c:3c:0d:e2:5a:07:4d:a3:0e:9b:
         92:9c:ea:29:9d:58:9b:2a:99:af:33:91:73:66:1e:82:32:9f:
         f9:48:28:63:f5:4c:40:63:7c:cc:c6:80:55:d4:1b:8f:f7:03:
         6e:75:a2:eb:c1:b0:e6:46:fb:83:cb:a1:de:50:4e:e8:2d:a5:
         98:7b:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:31 2026 by rpki-client