Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          8qAzQJJ0O5BEeUhA7S42x28Pnsi12SV5VVn3oehrROs=
Subject key identifier:   36:DB:9B:66:9E:4D:5D:E1:9F:98:C4:BB:10:7C:D0:03:0D:C5:46:8E
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019F9090EC79FA4DE8A955E3AE8ABA590107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          0951
Signing time:             Thu 23 Jul 2026 20:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:44 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: EV408IeYq/+7lKYwR/LdYh8qkXoA8Aj7kzuICWpsQko=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ec:79:fa:4d:e8:a9:55:e3:ae:8a:ba:59:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Jul 23 20:00:44 2026 GMT
            Not After : Jul 24 20:00:44 2026 GMT
        Subject: CN=36db9b669e4d5de19f98c4bb107cd0030dc5468e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:d4:39:7d:d2:4e:a1:2f:2c:30:d9:d5:9f:
                    2e:14:df:b7:df:27:cd:2c:d7:aa:19:d9:2c:9a:a8:
                    40:cf:b0:c5:f2:88:76:6e:69:66:bf:26:62:fe:3c:
                    b2:d3:71:9e:11:94:94:4e:19:58:2f:4d:c0:1b:f0:
                    ee:9b:0b:9c:bc:d1:de:8e:61:69:b3:7f:2d:1b:8c:
                    35:ce:0e:3f:9f:5a:b1:5c:ac:b7:47:a2:fd:1e:7b:
                    a3:64:a0:d4:eb:5f:40:b6:3e:9d:7c:95:ac:a9:19:
                    65:9d:c2:63:e4:10:b5:46:28:f0:27:92:c5:fa:59:
                    ac:3d:d3:a8:fd:99:69:8c:8c:7d:af:75:31:2d:7f:
                    b6:5a:ab:df:2e:82:52:23:0d:0a:18:78:13:10:d1:
                    3b:92:50:81:fd:c8:0a:84:bc:3b:a9:e3:3a:6b:18:
                    21:ad:a6:e8:01:20:3b:00:d3:58:bc:95:13:d6:e3:
                    bd:dd:08:49:72:7a:9a:16:cf:89:27:e3:3d:d5:18:
                    4f:88:15:d9:ac:08:dd:b2:fa:4f:38:15:cd:38:db:
                    e9:33:a9:58:75:2d:84:6b:dd:03:f4:08:d7:f7:8b:
                    13:27:07:d1:58:9b:d3:34:26:84:18:d6:40:e0:8e:
                    dc:5a:e2:19:a1:e2:98:3c:26:82:e3:c3:f3:71:c8:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DB:9B:66:9E:4D:5D:E1:9F:98:C4:BB:10:7C:D0:03:0D:C5:46:8E
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:a3:40:9e:8c:43:2a:53:f1:dd:73:46:0f:84:fa:37:db:
         53:65:dc:31:fd:5f:71:1b:3d:d5:f3:3d:59:89:17:ad:d2:d0:
         e5:25:e5:67:9a:bb:4d:bd:f5:62:a2:bf:e1:4a:07:0a:b1:b9:
         fe:83:66:2d:ca:b3:51:ec:5a:73:85:52:a7:46:fb:ac:9a:c9:
         b4:0b:8c:94:f3:f9:6f:d1:a1:76:8e:98:31:a7:04:d5:89:b0:
         64:a9:d9:40:1d:43:07:f2:36:59:ba:95:d6:da:b6:66:7e:fb:
         67:8b:2a:ef:c5:eb:83:8b:8a:a4:0e:a9:b4:84:a2:34:b4:86:
         7d:e1:03:18:d2:41:0b:5f:b2:2c:33:33:d6:d4:83:d0:53:e4:
         ff:22:e2:0c:71:8e:42:fe:a8:bf:cc:60:a5:84:49:44:9c:30:
         64:49:76:f2:b3:b0:8b:58:24:49:85:e6:89:71:42:de:6e:d8:
         8c:53:31:38:c4:72:2a:e3:4b:63:03:5e:c0:91:0b:c5:5d:d4:
         5d:9b:cf:a5:e2:4d:6e:ef:14:86:cf:21:3e:7a:06:81:5a:5e:
         9b:f7:f2:04:5c:3f:f6:b8:55:fe:87:cb:45:4d:e7:0e:db:bb:
         5b:3e:27:c4:08:eb:29:d3:94:35:4b:8a:1a:f0:92:8f:f0:92:
         5c:00:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:30 2026 by rpki-client