Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          kCBTwFcRcit0G2h5uo0tKgJ/8vLOoFOV7kAOGbvJtZI=
Subject key identifier:   8B:0B:14:AB:EC:27:64:D3:19:77:2E:9B:09:B1:5F:5B:F9:42:B7:E4
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       019F916D00495B08A8B118278E0C3CE70221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          0DE9
Signing time:             Fri 24 Jul 2026 00:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:07 +0000
Files and hashes:         1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=)
                          2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: XrHTLY3R+0hEsL8b6ti+eGMjBrHMw8Wuocs8fq7usK4=)
                          3: I282anzuqDNnfUXZQwC7438bDro.roa (hash: AyYFkSKEVTPhYSL98MtWNGzVahEdTLNrPzpWGukk9EI=)
                          4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=)
                          5: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=)
                          6: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=)
                          7: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=)
                          8: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=)
                          9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=)
                          10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=)
                          11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=)
                          12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=)
                          13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=)
                          14: fOoxnzASXzopslTz2k2wiJL3x5M.roa (hash: D1BQFLMSMw0KzyyXwQEu8OixU3Lr8v2KEMxHdqrQGxI=)
                          15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=)
                          16: xHeW6hanIuUj6uUE4gfLE62ik_E.roa (hash: s8Vjq9HDlOU0cOKYgu76uft1EVcTgBUurUnTdZ01l/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:00:49:5b:08:a8:b1:18:27:8e:0c:3c:e7:02:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Jul 24 00:01:07 2026 GMT
            Not After : Jul 25 00:01:07 2026 GMT
        Subject: CN=8b0b14abec2764d319772e9b09b15f5bf942b7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:d1:45:24:54:a3:a8:87:2d:5e:ff:d0:3f:
                    58:2a:63:2f:fd:28:f8:ed:7c:17:8a:ac:42:f5:f1:
                    fa:94:56:15:d5:06:08:2a:f1:c7:97:4b:e6:84:61:
                    4e:35:00:63:8f:c7:f3:8a:eb:7e:3b:64:73:2f:1b:
                    9b:2e:e2:c9:ce:f3:4a:c5:26:87:da:75:af:1a:77:
                    0a:45:e4:29:ed:d9:e3:f6:26:43:b5:42:2b:ea:54:
                    56:c2:6d:03:74:8b:83:91:94:9e:bb:0f:a5:ef:27:
                    f4:2e:a0:61:5b:cc:a7:ed:1d:7b:e6:b6:4d:81:01:
                    0b:d5:e3:6d:d5:39:11:24:3c:4a:01:27:fa:10:9e:
                    45:68:e0:75:1a:8a:90:09:9e:42:c5:42:df:7c:4c:
                    99:26:1d:f5:44:37:5c:24:c2:a8:d3:4e:20:91:d3:
                    f4:17:66:e0:d1:18:9b:cf:ee:2d:e4:45:e8:95:0d:
                    3d:69:09:67:35:9e:ed:d4:d0:ff:df:0d:82:56:98:
                    f7:65:18:e6:84:dc:0f:95:5d:00:76:7c:38:4d:1c:
                    77:4f:23:e4:61:24:2c:64:bb:82:96:f7:4b:5b:b7:
                    37:fc:19:6b:5d:fc:73:12:77:b6:cb:fe:30:d9:b8:
                    da:69:85:fb:c4:49:e9:31:fe:9c:cf:4e:04:1a:ec:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:14:AB:EC:27:64:D3:19:77:2E:9B:09:B1:5F:5B:F9:42:B7:E4
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:98:9b:31:be:62:5d:bd:01:dc:44:46:4f:da:b0:ee:b5:4d:
         5c:3f:32:7a:3e:56:2b:73:83:55:75:52:64:e7:66:f5:a7:c9:
         81:7d:0a:8a:82:bf:d1:e0:df:22:ca:1b:5d:b9:50:aa:de:dc:
         1b:47:a0:d0:06:8f:38:52:91:39:5f:38:70:f8:35:ff:5d:85:
         ff:9c:f1:95:e1:dd:25:49:54:ec:15:7c:c7:6f:15:97:cf:21:
         70:e9:68:a8:33:d5:ff:a2:20:16:ca:39:ef:8d:14:b3:14:52:
         e7:f8:ad:26:96:71:41:78:b2:61:a4:7b:b3:38:af:73:c0:1b:
         60:24:92:f0:bf:e9:74:d4:da:3e:e4:f1:81:bd:6e:99:b0:b5:
         d5:30:f8:c8:da:38:80:47:ad:71:36:8f:a8:7a:1e:0c:a7:4f:
         dd:7c:e1:3f:62:9b:21:e7:4f:6d:81:a1:62:fa:13:dc:6a:1d:
         d9:96:a9:75:28:22:2c:8e:26:1e:d3:90:a4:66:09:d7:6d:d2:
         5e:52:80:d8:69:ae:b3:43:83:72:19:14:87:27:30:bb:13:81:
         47:88:dc:98:76:ee:e0:a3:4f:85:3c:8d:55:e1:db:aa:0f:d2:
         88:e6:41:b9:f3:ab:93:7c:0a:72:30:c9:3b:17:c4:28:23:d3:
         ba:84:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:25 2026 by rpki-client