Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          mK29oTKbAEqDtCkMnzV6c1fB5YAgOFzgqQCxQVZpEVc=
Subject key identifier:   E3:D5:AA:46:76:29:A0:92:45:8A:1E:D3:94:32:A1:F8:E4:AB:D5:3E
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019F9090EA7BA9D19048CCCDC15B4C26E2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          14F6
Signing time:             Thu 23 Jul 2026 20:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:44 +0000
Files and hashes:         1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
                          2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
                          3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
                          4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
                          5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
                          6: JFd9BHy0Nxa89upjrAgFVTR3EO4.roa (hash: Jkab6LW8tUPmu7eFr3Cbffo3EOm9TOdlDCvxF4uia6E=)
                          7: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
                          8: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
                          9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
                          10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
                          11: dS0fvHXBhFw8I4isU2XioLXpRxM.roa (hash: 5TqIfIhP/SO9ksAoUP3Ktq7aWt1McVI3y+SBhdLlUlQ=)
                          12: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
                          13: fJS637JzUY9ugv22p8_OUjWaiaw.roa (hash: 0k+9V5c/ReVam6mmzzfcrumGw60s8Iaw9s34MK/6hIU=)
                          14: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
                          15: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: eskBp+Dhupo4zVi/fkdY53fYhB6bPAS/ovR/h8V2tao=)
                          16: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
                          17: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ea:7b:a9:d1:90:48:cc:cd:c1:5b:4c:26:e2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Jul 23 20:00:44 2026 GMT
            Not After : Jul 24 20:00:44 2026 GMT
        Subject: CN=e3d5aa467629a092458a1ed39432a1f8e4abd53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:5d:3f:c7:62:ae:08:d5:92:44:aa:15:41:
                    f8:86:e7:4d:ae:2d:99:a6:6a:8c:3f:ec:fe:19:b8:
                    e7:05:00:91:3c:b1:aa:f0:f9:c5:46:69:5e:34:02:
                    57:77:9e:ff:83:15:31:19:5a:5f:cb:24:3d:c3:de:
                    24:32:2a:c0:dc:2d:c7:d3:2c:75:21:33:ae:ad:67:
                    ac:12:53:f5:ac:97:aa:94:bb:1e:a3:0e:b9:41:c6:
                    cb:51:7e:fb:bd:68:16:b6:52:7f:89:6d:44:9c:31:
                    a4:2d:56:22:75:4d:b6:08:f8:71:a4:eb:61:f5:a6:
                    ac:f4:6c:bd:81:0d:94:45:21:05:46:c0:b6:bf:c1:
                    74:30:75:55:94:2a:7e:2c:ff:1d:62:29:00:56:ee:
                    ae:ee:a3:e5:c2:e9:c2:ab:50:9e:8d:39:63:70:a3:
                    0f:15:58:1a:d6:ac:c3:b1:a3:15:69:cd:16:12:4b:
                    46:19:76:6f:dc:7e:32:93:9c:4b:94:a4:7d:5a:6e:
                    42:b8:af:63:e0:a9:db:92:0c:b7:42:67:0a:5c:de:
                    a7:d5:ec:f0:5d:50:c7:10:31:12:6d:06:a3:52:6f:
                    96:d3:35:70:91:70:a2:4e:e7:61:49:9e:60:2d:b7:
                    c4:96:50:56:e4:21:39:d3:81:e7:70:59:0d:22:23:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:AA:46:76:29:A0:92:45:8A:1E:D3:94:32:A1:F8:E4:AB:D5:3E
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:8c:0f:dc:4c:ca:16:e6:07:b8:a0:8d:f4:42:55:fd:d7:
         1c:a2:e9:8c:d0:d0:cf:57:20:ff:5b:81:71:e1:ca:b5:9f:89:
         b0:fd:d3:90:16:28:a8:4b:4e:bc:a1:1e:23:ff:eb:3b:82:9e:
         27:6b:c5:7c:d5:ce:a7:37:74:46:73:13:10:68:2e:75:aa:f3:
         5c:4f:26:a6:e9:6d:60:1b:59:df:f5:50:c4:3c:81:b8:84:b0:
         dc:ed:4f:42:2a:d2:d9:52:a7:38:68:ed:99:8c:58:28:8a:78:
         35:88:1e:5b:22:d5:c8:99:6c:0b:c5:ff:4a:5a:75:3d:79:23:
         0f:7d:7e:78:85:cf:87:f7:38:e7:a7:5b:f8:67:2f:03:6f:5c:
         aa:59:cd:d9:2a:a4:d6:59:7a:ba:83:2e:3e:26:56:14:c6:89:
         76:12:a3:1e:c4:86:0a:0a:89:96:25:73:11:23:5e:ea:0b:f3:
         15:64:0b:24:5d:66:3c:92:b5:b8:a8:2c:46:e6:d0:87:b5:c4:
         5f:b2:e0:d6:31:10:df:7a:5a:d1:e3:0a:20:ed:57:fa:e9:a9:
         34:e5:56:f2:53:54:1c:4c:5c:7d:f5:c0:f2:18:73:4b:85:27:
         a0:0a:ce:3c:88:31:b1:e2:6e:d3:c1:9c:f1:16:5d:ce:7d:a8:
         14:2f:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:32 2026 by rpki-client