Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
File:                     RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json)
Hash identifier:          IqQQ/UJXYBs6hBp0giMFt9fJ29hz8VCYPySYnMi3YaA=
Subject key identifier:   8C:07:E2:47:DB:96:1B:18:05:7D:59:C4:81:8D:16:B4:CA:25:A5:EA
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       019F9391889EA928CC8E93C2A4909CB17CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
Manifest number:          1AB8
Signing time:             Fri 24 Jul 2026 10:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:16 +0000
Files and hashes:         1: 2K2LRFKVS5G4UBpi02aIHEwaYbo.roa (hash: vp6Q5byh4sOxsLn6+xnbICkzt50Gu7I9DJlz9grAs68=)
                          2: 4EHQchkmRvw4hrIZwKVmoTVrXcE.roa (hash: KpqMiHj1SwCn1wHf9cbF+sIlJ2SNrDY7ghIe8T7leBk=)
                          3: 5Z3398bPjFZnkQuZgIZdGWDznRY.roa (hash: xmJ4QribTdZo3tMhYvYOnwRRxONh8dhYrIwoBT29TpE=)
                          4: 60n7OcQD1rVkRE8LPW3kEfdX9gw.roa (hash: N0mQsLvGMMdhDPTL/se4j6fwbJ89Tgbu/0d6LhVYRLs=)
                          5: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (hash: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc=)
                          6: 9iM7YuqWIbTP1jDWJnvJ3Bq7Q0Q.roa (hash: fsZlnOQR9nRVkMGwqtj0xSg8Xg6dl3hOvSIpUTk2D6w=)
                          7: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (hash: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w=)
                          8: EPwl8m_4qnHfbdpohqEPL96FCA8.roa (hash: FC/VvypcMirKAoVs4a1mrptO5b709xlEgfldyqGdEhQ=)
                          9: FN70esTZXn5X2vP3ZcEnYIks9AM.roa (hash: 1ow9uwWZ1DORgXwnTVw8JvTT23AJVzQa+9quYRVEN6M=)
                          10: Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa (hash: bBRpWE7OiUMYeqNpou2p2Wpdx4ns4UHX64/R4Kr6c+U=)
                          11: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (hash: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0=)
                          12: M2P5NHOr1VNdgU_pG36AXasq6n0.roa (hash: 0BcfiTpnoAKg2w/PTa9f6dvzV2U3+YYKy/UwXHMH75Y=)
                          13: PNU5dT-FRZhCGuEDnFsX7GuO8MU.roa (hash: 5nuXPVsdc9izSwCCuB+1KPJnkougYuwEFE0ABa/v1lw=)
                          14: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: sdN0mIM9KGJf2C88LYSXl7oZfGqeoXeMXpbO3whrrbg=)
                          15: S7h5Fby9bbpxdXYmDtza_SDSYtg.roa (hash: IOxFJnKliiuzpHTvfCVgOBtXgnXsZ5cTLcWr06Mhmmg=)
                          16: ShGZf2KqimtbKzToWYg54Tsrrwo.roa (hash: I51c/DNMfjZlsvQm5k/7jwF4EguCQj/kTUTXhZ80zs8=)
                          17: UBprnGDgUIQGgKvWmIS8_yQFiII.roa (hash: jDsEX8R1Ij/Kl7yB4Ey14j2vt5dE21hu/30hNI0mPyA=)
                          18: UGZ3vMnUVhnMHprA-js3vspKmwo.roa (hash: n4uZoakF4GvbWWZaqJL1srzglcS0eKby+fyHBjJ5GXk=)
                          19: WIe_yXnGz2qxmkA-Jl4unhtVXd8.roa (hash: JDWlYllOoFXRzwvexL0+Z+xQJXmvy5W2gSffNKHemAA=)
                          20: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (hash: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM=)
                          21: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (hash: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8=)
                          22: af2hi8V_6XBfDLcR66UImjT0iRs.roa (hash: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc=)
                          23: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (hash: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8=)
                          24: ewMk8U-CtYsjt6E6j_tG33Bkeds.roa (hash: ilAg19RjRWMFfvWl4ecpGWCs1APQudEqMJ6oIH0eDTA=)
                          25: fmuRuMynV3t-W1T59fbCP9gm_2M.roa (hash: 6pRpct2vh79WehrYAlgUzvTdvNK24YaVVaa9iZsg5+Y=)
                          26: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (hash: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY=)
                          27: jXJPIagQB7xJy4c-VYsshQQ5ZU8.roa (hash: LZ2zXEnHEosFY9V/e5cqBzDV0kKFDDyZWuhh0GN0XAw=)
                          28: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (hash: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM=)
                          29: m3rFClN8OrN1kUgzbffmVeYXm_g.roa (hash: gTzP3qQCo24jaH53JEi/3E2xk77hA7ta7BJO9SMqoTE=)
                          30: rkBhirDw6cwGmYoKR4iC3hOackU.roa (hash: YwBhd1vKI0Ytq6+5JsB0zVmdhHIcO9WNEw9TuJr99XA=)
                          31: ruijiG2c7OWNAbZg1DzBzUw2h9A.roa (hash: gl727KrmeoI8zfQ+pdZJ+FzEFZTT7EufSZa415R+/6E=)
                          32: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (hash: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM=)
                          33: tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa (hash: ItE7bOguG+BdS6odPM38WwfaltkIQcsRe3Hme/srpYs=)
                          34: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (hash: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU=)
                          35: xFV6naJ395ubjh_EqiAHvE__j48.roa (hash: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0=)
                          36: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (hash: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY=)
                          37: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (hash: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:88:9e:a9:28:cc:8e:93:c2:a4:90:9c:b1:7c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jul 24 10:00:16 2026 GMT
            Not After : Jul 25 10:00:16 2026 GMT
        Subject: CN=8c07e247db961b18057d59c4818d16b4ca25a5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:d8:c1:44:f8:c7:b4:21:ed:f5:53:10:23:
                    fe:54:38:b4:bd:69:c4:d9:2e:7e:e8:2d:a8:92:0b:
                    b3:d7:f3:65:be:16:00:41:a2:04:7d:1e:c6:e6:60:
                    d0:c8:e7:54:23:52:de:38:2e:cf:07:18:03:1c:12:
                    ed:67:aa:f8:f5:d9:15:d3:69:33:52:e5:53:94:db:
                    bd:0b:f5:b1:37:f2:ab:36:4a:bb:76:4f:9b:e2:21:
                    f6:4d:c8:2b:79:e5:e7:72:6e:9f:ac:ec:c5:a0:dc:
                    cc:d0:19:56:1b:85:13:77:f4:f8:ed:4b:f2:07:00:
                    81:dc:53:d5:74:39:ed:ee:d8:73:42:ac:a3:cf:5e:
                    c4:ba:07:32:60:b1:21:e5:12:4d:87:1f:ab:63:b2:
                    0b:41:bc:35:65:06:1f:89:96:4c:45:62:fc:56:fe:
                    41:86:f0:cf:a6:b7:bc:c1:53:b4:70:52:eb:fb:89:
                    f6:67:a9:33:42:26:28:6d:26:ea:81:3b:05:bc:52:
                    c9:65:07:42:7d:32:c5:8c:1f:4d:0e:35:6b:ca:99:
                    91:f0:61:99:de:66:08:00:3c:c3:2e:5a:a2:fb:0d:
                    d5:58:e7:33:b5:fb:1e:7e:1c:17:92:a7:45:cd:9e:
                    f8:fc:1e:c6:7f:b7:d9:d5:f4:bc:f5:f3:69:c8:be:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:E2:47:DB:96:1B:18:05:7D:59:C4:81:8D:16:B4:CA:25:A5:EA
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:60:aa:68:50:46:4f:0f:cf:13:1b:16:05:33:e8:b7:47:a7:
         73:03:c7:e3:80:6c:60:eb:5e:f2:f0:98:93:36:82:8e:a4:d2:
         f0:22:d0:3c:fe:22:df:bb:01:b9:55:2b:d4:1c:a8:3b:ca:15:
         54:d0:78:21:de:0c:fc:0e:19:80:7f:f5:44:29:90:aa:d2:46:
         12:f1:14:fa:ac:04:a2:57:7a:21:67:21:01:92:f0:fa:7e:9e:
         9b:39:e1:21:d1:b3:b2:46:da:f7:0c:43:c1:91:f7:bf:dd:f0:
         16:7f:58:cc:97:02:94:13:c6:80:a2:d2:36:57:cb:07:4c:bc:
         1c:11:2a:8e:a2:ca:7a:76:c4:cd:99:87:de:1d:3b:d9:f8:6f:
         0f:ec:d8:41:01:5c:c2:9c:64:9d:0d:dc:13:6d:de:40:69:28:
         b2:21:48:ef:72:02:ab:23:5e:01:c4:e2:67:dc:38:26:85:62:
         83:87:c5:1f:18:51:36:b6:60:b4:b7:74:0c:65:e8:2f:93:1c:
         7b:2b:01:36:b7:6c:e7:fd:68:b7:c9:80:67:65:20:7c:5f:11:
         02:ff:b7:d4:ef:3c:e7:b2:dc:41:83:45:9b:0a:c3:b2:bd:6a:
         eb:53:97:ba:bd:d5:75:fd:8e:c0:76:eb:b5:17:fb:43:c2:4b:
         0b:05:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:41 2026 by rpki-client