Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          9n/TfHi107Q/sX2X1bddSFdA5aPnfJkw2GyfmipxITY=
Subject key identifier:   3B:9A:E2:40:43:A6:58:1B:A3:99:F4:5F:B8:2D:4F:45:F0:F4:F0:4A
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       019F8EA245D34F947DA37D85DD90609C9E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          15BB
Signing time:             Thu 23 Jul 2026 11:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:27 +0000
Files and hashes:         1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
                          2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
                          3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
                          4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=)
                          5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
                          6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
                          7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: KHqmXuokEVQHk+8Pa2E/lrR8IVoG2kMrbD5xobgN1eA=)
                          8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
                          9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
                          10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
                          11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
                          12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
                          13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
                          14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
                          15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
                          16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:45:d3:4f:94:7d:a3:7d:85:dd:90:60:9c:9e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Jul 23 11:00:27 2026 GMT
            Not After : Jul 24 11:00:27 2026 GMT
        Subject: CN=3b9ae24043a6581ba399f45fb82d4f45f0f4f04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:be:72:54:e5:e0:2c:2b:7e:f7:8d:ee:aa:
                    f9:b2:bf:22:74:55:c5:2a:a7:6c:22:6c:0c:83:33:
                    e6:cf:98:05:b2:0b:fc:c0:48:53:b0:20:42:9e:f4:
                    e8:b7:cc:a4:f8:53:a0:ba:2a:1c:98:80:8c:14:e1:
                    80:d6:a8:eb:0d:64:ff:96:60:8e:f5:33:8d:2f:aa:
                    9e:00:51:9a:36:1a:fd:c7:29:b4:68:05:51:ed:68:
                    20:78:7a:75:6e:7a:57:f2:ad:f4:12:83:5b:da:c8:
                    bd:e1:d5:e7:26:00:a9:30:2e:2a:88:2f:ee:9d:28:
                    15:de:fd:18:fd:44:44:be:77:ce:7a:bd:08:22:52:
                    b7:08:89:41:03:61:b6:9e:b3:65:d6:76:b5:1c:bf:
                    5b:50:77:ca:0c:56:da:da:59:a1:6c:18:4e:50:e2:
                    1b:15:54:6b:df:3e:9c:6f:ae:77:bf:b9:b5:4b:2d:
                    bb:0f:d3:54:bf:8f:49:88:36:13:5c:b4:fb:8f:17:
                    a5:52:2f:bc:98:56:ae:25:1a:7f:ac:4a:d1:80:99:
                    a8:00:87:02:5e:1f:31:98:9f:58:b8:98:77:02:a2:
                    79:3f:a5:90:9f:8b:a2:ca:1a:61:86:98:4b:37:0d:
                    1a:43:bd:7a:b8:9c:cb:e4:d3:40:da:ab:ca:6d:dd:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9A:E2:40:43:A6:58:1B:A3:99:F4:5F:B8:2D:4F:45:F0:F4:F0:4A
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:9c:1f:78:cf:02:2a:24:5f:70:1d:c8:af:99:7e:fc:db:
         c7:12:0e:a3:b4:51:03:69:44:0e:dc:0a:b9:f0:a7:e1:44:20:
         e4:bf:27:4e:1a:e8:f0:bd:4e:c0:c8:7d:71:86:08:69:ec:93:
         d3:d8:65:cf:6f:25:1b:c0:0d:6f:76:c7:45:7e:36:03:4c:a7:
         22:31:05:db:2a:0b:78:49:20:70:c9:3f:9b:ac:1c:5b:dd:e1:
         f6:83:71:43:8e:0d:2c:b0:39:e9:d3:a6:a2:a3:d1:61:71:9d:
         b9:b6:24:8b:fb:e1:9d:6d:75:08:57:8a:ba:72:e0:e6:e6:61:
         66:05:c8:fb:60:6b:80:a0:2e:f7:4c:6c:b5:87:cb:87:ac:07:
         bc:ad:b0:3d:d1:5d:ae:b4:d7:3b:b8:1d:22:ca:ba:0d:00:8c:
         c8:fe:9a:9e:01:b2:d1:e3:df:1b:c7:47:20:18:87:eb:37:5e:
         c0:71:d9:4c:17:d6:45:e5:30:6e:a6:98:bc:6a:fc:6b:4c:4f:
         04:9b:93:cb:fe:a1:99:00:f8:0d:dd:ac:3f:25:d1:87:10:33:
         a5:0c:02:87:0b:9f:91:83:39:08:94:bc:9e:e8:47:79:7a:7c:
         7a:a9:d6:bc:e6:89:36:c2:0f:84:6c:f1:7e:c1:53:7a:ab:94:
         c9:96:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:18:24 2026 by rpki-client