Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          8dTGZPcLG6e4ilVZdZtKO7+uYjUwJcsKHmJiMBjQq1I=
Subject key identifier:   DC:2D:7E:6B:47:D4:19:3F:D9:03:16:D7:46:4D:57:C2:78:52:99:11
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       019F8F46EA59B0621F98278A0D544D788108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          135E
Signing time:             Thu 23 Jul 2026 14:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:16 +0000
Files and hashes:         1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
                          2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
                          3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
                          4: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=)
                          5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
                          6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
                          7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=)
                          8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=)
                          9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
                          10: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
                          11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: 1nUS0ESNq21v+7XvEklIh+AK9b/3+RwUTCliYAUnOWQ=)
                          12: hlXzXwqfKevRV0ZOYD4xuZeyv68.roa (hash: ILiVM3fgCJT+94jYQT8N5fmuGvDZmGhhJIkkPyMYJ8o=)
                          13: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:ea:59:b0:62:1f:98:27:8a:0d:54:4d:78:81:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jul 23 14:00:16 2026 GMT
            Not After : Jul 24 14:00:16 2026 GMT
        Subject: CN=dc2d7e6b47d4193fd90316d7464d57c278529911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:82:38:fb:e8:61:8e:39:4a:88:6e:6f:ed:
                    7b:bf:20:ef:04:39:61:f5:96:26:0b:2c:16:dc:12:
                    79:32:78:22:ec:65:9f:95:ba:b9:1e:5f:d4:aa:f9:
                    40:72:74:79:c7:ed:7f:b8:42:4b:34:fd:ec:26:0a:
                    50:69:d2:d7:7c:31:cb:69:3a:c3:d1:41:e7:23:31:
                    e8:92:5f:71:b0:17:47:0e:81:8a:3c:74:4d:b3:18:
                    f7:ed:c7:e8:98:42:e3:b5:06:26:8e:30:f8:1a:88:
                    d0:cb:13:94:fa:9e:95:76:62:01:f2:88:1b:67:40:
                    e1:88:b5:17:d2:c6:5e:6a:4b:1a:1e:6e:4a:bc:06:
                    06:fb:c1:90:90:02:bd:86:c8:39:85:90:68:d5:eb:
                    8c:22:2c:ad:b5:b4:4e:be:a2:9a:32:d6:a5:c6:f0:
                    a6:32:26:77:df:9a:b6:4a:2b:d5:c7:d9:38:36:a5:
                    a7:f8:ec:9c:16:2f:18:00:8f:38:da:37:6e:60:89:
                    09:95:7e:e1:98:64:c8:02:89:6f:45:40:d7:73:14:
                    68:91:91:30:34:81:04:05:b0:ff:d1:3c:40:9c:b7:
                    75:a2:ed:ed:af:a3:e8:56:ea:05:cd:71:b7:4d:05:
                    41:bb:38:84:11:cc:48:4f:89:eb:f2:5f:42:41:e7:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:7E:6B:47:D4:19:3F:D9:03:16:D7:46:4D:57:C2:78:52:99:11
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:bf:65:46:30:aa:b7:d7:62:64:52:22:a4:c3:3d:78:cd:
         39:be:59:9a:ef:ba:fa:a8:c7:71:ad:78:23:51:da:05:4a:35:
         34:a3:6b:3c:42:b1:1f:4e:84:f3:39:5e:2e:a4:7c:6c:a9:eb:
         ee:f8:89:6d:b9:f0:81:ce:38:56:8a:da:40:b3:ab:f7:1a:81:
         4b:8d:5d:9b:5b:82:c8:d5:c5:25:f8:c4:ff:fc:8f:66:00:32:
         67:78:a6:58:e8:87:09:5f:3b:4d:86:d8:d8:0b:ef:ae:a4:e4:
         bc:a5:fa:f3:3f:e6:e7:c0:e9:29:bc:0e:f0:00:73:57:78:d0:
         60:cf:fc:de:f6:f0:3d:81:19:08:34:8c:f1:a3:4e:a6:68:dc:
         ef:ce:07:f8:f2:2a:49:cf:c1:7b:a7:b6:86:3e:b9:4e:b2:56:
         fb:cc:1a:31:9c:d6:2c:e0:a4:e3:95:44:bc:43:8e:ef:89:9b:
         9b:9a:04:55:50:ea:16:9e:d6:8a:e6:b3:6f:1d:3a:6f:07:16:
         6b:4d:74:6e:4d:e9:bd:18:c5:54:8f:9b:02:fd:92:24:9d:fa:
         18:47:e0:b8:4c:28:00:c7:90:af:c9:ce:92:77:db:16:14:79:
         5f:54:a9:a2:ef:8c:c3:df:23:bb:0d:e4:87:1c:47:77:1d:26:
         63:8c:eb:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRupZsGIfmCeKDVRNeIEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwNzIzMTQwMDE2WhcNMjYwNzI0MTQwMDE2WjAzMTEwLwYDVQQD
EyhkYzJkN2U2YjQ3ZDQxOTNmZDkwMzE2ZDc0NjRkNTdjMjc4NTI5OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspyCOPvoYY45Sohub+17vyDvBDlh
9ZYmCywW3BJ5Mngi7GWflbq5Hl/UqvlAcnR5x+1/uEJLNP3sJgpQadLXfDHLaTrD
0UHnIzHokl9xsBdHDoGKPHRNsxj37cfomELjtQYmjjD4GojQyxOU+p6VdmIB8ogb
Z0DhiLUX0sZeaksaHm5KvAYG+8GQkAK9hsg5hZBo1euMIiyttbROvqKaMtalxvCm
MiZ335q2SivVx9k4NqWn+OycFi8YAI842jduYIkJlX7hmGTIAolvRUDXcxRokZEw
NIEEBbD/0TxAnLd1ou3tr6PoVuoFzXG3TQVBuziEEcxIT4nr8l9CQefJIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwtfmtH1Bk/2QMW10ZNV8J4UpkRMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN++/ZUYw
qrfXYmRSIqTDPXjNOb5Zmu+6+qjHca14I1HaBUo1NKNrPEKxH06E8zleLqR8bKnr
7viJbbnwgc44VoraQLOr9xqBS41dm1uCyNXFJfjE//yPZgAyZ3imWOiHCV87TYbY
2AvvrqTkvKX68z/m58DpKbwO8ABzV3jQYM/83vbwPYEZCDSM8aNOpmjc784H+PIq
Sc/Be6e2hj65TrJW+8waMZzWLOCk45VEvEOO74mbm5oEVVDqFp7Wiuazbx06bwcW
a010bk3pvRjFVI+bAv2SJJ36GEfguEwoAMeQr8nOknfbFhR5X1Spou+Mw98juw3k
hxxHdx0mY4zrAQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:57 2026 by rpki-client