Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          SPTBfj8icm1G+MtU/bBscSZwb/9IWenCzQTOlR8paYk=
Subject key identifier:   F9:E8:67:7B:7F:00:39:8E:3A:C8:63:69:20:26:20:F5:DE:38:52:F8
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019F90C842A120C4490B2616D4A8C8A814F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1A6F
Signing time:             Thu 23 Jul 2026 21:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:11 +0000
Files and hashes:         1: 1-aRoA0WhlYlJc8wz6ycex6Zo2ac.roa (hash: sdFqzlSJZoMBZXBYF/7sSNH10IFmTEtJ+BqqB3vKvsU=)
                          2: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          5: 7ZTyX9adnTNDDr2DkH9w3SeIE7Q.roa (hash: TDggRWtskV5FNrfGL200t0vlFEUm+QOeNFcEHwtHFss=)
                          6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          8: FuaYYjgBfEQcCzdt3IfIOZHBF18.roa (hash: lZIUFdAbzhx1VS24I+2a5RfR2Jz8EjNumHCTBfayC3U=)
                          9: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          10: MpedeZnqqfWdHaUYwzO5l8FT3pM.roa (hash: 75NfuiTmUQjPMCKkuZLw9T7cDXANU8tWdyz9AlGaZ6s=)
                          11: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          12: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          13: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
                          14: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: A5eyN/fj0fNVLHh6gaT2PVaoyR8jVyFCdvM5e1XiZx8=)
                          15: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          16: VEwNY5P1vuA23oPruHvqJ6HFtjs.roa (hash: eZpyIVZzTVU8RDs8Mn5Dvw3csgwI8cTA6KbGalIl4hA=)
                          17: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          18: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          19: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          20: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          21: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          22: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          23: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          24: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:42:a1:20:c4:49:0b:26:16:d4:a8:c8:a8:14:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jul 23 21:01:11 2026 GMT
            Not After : Jul 24 21:01:11 2026 GMT
        Subject: CN=f9e8677b7f00398e3ac86369202620f5de3852f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:e7:91:b4:62:d9:55:4f:99:90:e1:1b:9c:
                    e6:56:46:c7:53:1c:ef:1f:a8:5a:98:11:d5:b9:a9:
                    81:26:94:ef:45:e0:62:0a:16:cb:4f:24:04:82:01:
                    8d:fb:a0:e7:06:67:b5:36:4c:07:19:bc:10:94:3c:
                    e5:60:99:5f:94:0d:7e:e2:4e:1f:ed:37:f7:c7:1d:
                    bc:4a:86:09:b3:25:44:65:89:86:c7:12:21:38:3d:
                    0c:14:d2:6d:35:a2:1f:83:08:ca:4f:f4:38:17:29:
                    fa:73:ee:b1:d2:b0:72:ee:1a:0f:fe:43:2a:32:ef:
                    c9:df:71:2b:4f:35:67:1f:1c:a4:94:c2:7c:cb:e4:
                    84:d0:a8:7c:2b:4c:9b:58:07:a5:13:2a:d9:d3:89:
                    94:a3:b0:d4:99:73:a8:29:9f:02:6e:f0:a9:65:e5:
                    b2:ca:1a:74:23:fb:9e:f9:8f:09:15:fc:e1:ea:1f:
                    20:91:32:87:33:7c:7a:09:9c:a7:13:0e:1c:6c:83:
                    21:85:90:e0:75:da:12:aa:61:6a:37:e0:20:74:b9:
                    0c:b1:87:89:57:f3:6b:d2:74:25:44:51:a5:8e:e0:
                    cd:fc:40:94:d8:7a:62:84:a1:f4:4f:7a:ac:fa:24:
                    b8:98:70:d3:37:6d:42:67:08:c2:dd:1e:a2:e4:77:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E8:67:7B:7F:00:39:8E:3A:C8:63:69:20:26:20:F5:DE:38:52:F8
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:35:db:d1:b5:f0:2b:e7:40:7e:2c:ae:1a:6a:0d:33:b4:
         02:e8:bc:ba:8a:d7:77:09:35:d7:ff:be:c0:c4:13:87:d7:ae:
         cb:74:b9:35:8c:9c:db:44:12:d2:b7:4e:9e:46:0b:8f:4e:6f:
         79:32:dc:9e:af:36:a2:a7:e2:0f:2d:55:52:89:a3:98:8e:7c:
         ad:2e:99:4f:80:44:14:ba:ea:90:88:29:5f:76:b6:51:fe:18:
         88:89:8e:9e:a9:ba:35:3f:09:ec:4b:cb:74:b9:ad:ef:6c:03:
         90:9b:06:b8:5e:8a:cb:f4:40:45:12:f8:fd:a4:f8:7c:ab:6d:
         2e:f4:5e:8f:b8:ad:52:39:47:b7:a5:01:5e:1d:c7:36:f1:a4:
         47:ac:32:d8:31:45:d0:0e:55:29:5f:5f:c5:5e:88:20:5a:49:
         75:12:61:f2:19:92:f3:1a:1c:f9:d1:3c:41:03:5d:ca:92:0f:
         90:ef:9a:0c:58:dc:59:24:9a:e1:9a:02:e9:86:bc:fe:39:cf:
         79:fd:e6:2d:35:0c:b3:3f:43:9f:18:be:ea:6e:90:ce:36:26:
         d3:ca:79:0a:97:9c:80:1c:d4:5b:04:4e:6b:42:92:1a:3d:6d:
         0c:dd:67:3b:ea:5f:3a:53:1f:b4:9a:b5:e2:b6:9d:fc:ac:d8:
         23:c7:26:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyEKhIMRJCyYW1KjIqBTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjYwNzIzMjEwMTExWhcNMjYwNzI0MjEwMTExWjAzMTEwLwYDVQQD
EyhmOWU4Njc3YjdmMDAzOThlM2FjODYzNjkyMDI2MjBmNWRlMzg1MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyHnkbRi2VVPmZDhG5zmVkbHUxzv
H6hamBHVuamBJpTvReBiChbLTyQEggGN+6DnBme1NkwHGbwQlDzlYJlflA1+4k4f
7Tf3xx28SoYJsyVEZYmGxxIhOD0MFNJtNaIfgwjKT/Q4Fyn6c+6x0rBy7hoP/kMq
Mu/J33ErTzVnHxyklMJ8y+SE0Kh8K0ybWAelEyrZ04mUo7DUmXOoKZ8CbvCpZeWy
yhp0I/ue+Y8JFfzh6h8gkTKHM3x6CZynEw4cbIMhhZDgddoSqmFqN+AgdLkMsYeJ
V/Nr0nQlRFGljuDN/ECU2HpihKH0T3qs+iS4mHDTN21CZwjC3R6i5HevLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnoZ3t/ADmOOshjaSAmIPXeOFL4MB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU8129G1
8CvnQH4srhpqDTO0Aui8uorXdwk11/++wMQTh9euy3S5NYyc20QS0rdOnkYLj05v
eTLcnq82oqfiDy1VUomjmI58rS6ZT4BEFLrqkIgpX3a2Uf4YiImOnqm6NT8J7EvL
dLmt72wDkJsGuF6Ky/RARRL4/aT4fKttLvRej7itUjlHt6UBXh3HNvGkR6wy2DFF
0A5VKV9fxV6IIFpJdRJh8hmS8xoc+dE8QQNdypIPkO+aDFjcWSSa4ZoC6Ya8/jnP
ef3mLTUMsz9Dnxi+6m6QzjYm08p5CpecgBzUWwROa0KSGj1tDN1nO+pfOlMftJq1
4rad/KzYI8cmGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:57 2026 by rpki-client