Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
File:                     7vUxSu71EyMZT9himFitIPuS3-c.mft (raw, json)
Hash identifier:          tQSVFE9dkwb8sL0lE0CuX/iZBQH2PskAsRbqtpftYT0=
Subject key identifier:   E6:48:AA:D0:51:01:5E:9C:A7:93:5A:3F:94:70:78:A0:33:34:AB:DF
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Certificate issuer:       /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial:       019FA899F6B41791F2F4C52F0B533A1F8060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:30 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:30 +0000
Files and hashes:         1: 1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa (hash: G3Wer1Ja0Zg4WiASwJya45QDTKp9SQuCj+KiMND2RVA=)
                          2: 5_lXPJSQU9TySGTavGFbItKITBs.roa (hash: DekZ9D2qFWZa7Ez80mvuUtfA/Ri8J/rWEExk+hN+XO8=)
                          3: 7vUxSu71EyMZT9himFitIPuS3-c.crl (hash: c9Kn0zOQyzEDqOfZz4TUbf25RtpWTndHxsVgHOPosqk=)
                          4: 96qX2JLpDjn2X07felwpqaF7sjY.roa (hash: 8OLwijPizXuspcA2/2yKy+kso5hdoNgbsBiOkwU1wxA=)
                          5: 9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa (hash: TbUpkh62Q6DCQx4wcGP/0x2T9DL2M0Cq6VM3i1VEMz8=)
                          6: HhZ_QfAVVWEjTUgyEZALP1SKayk.roa (hash: pzcqmWDZa4DD01+YgVwG705sYe7vn0DSP8QcQqTdsWY=)
                          7: IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa (hash: WNroGT5F6T4UYLI7vxb3TnN4UxlV1OI9972pLF7MpP8=)
                          8: Jp0cb6lmAjIofXK10GnisV8ZJq0.roa (hash: E8QA5JIxNVXPh+bj011j4mkyCxYWDlMzp8siE3PNiv8=)
                          9: O9sZuea9ueIX-lBdeStJj66-2JI.roa (hash: B1HtqKm4bakXSo5Bvqf1h8mPwoWz2JJwr3pKb7a7K4Y=)
                          10: TXIMOOFbySOl_fCyrIFwzH38_Nc.roa (hash: zx/ZoqOHnaqrqnJEUUNhOkPvA4KyM2M6D+k4QPkptDg=)
                          11: _0QOD1iLOQ7nNSalXlUFq8l1DKc.roa (hash: 9LxeCfnSlKfLVjaLSznS7g6keBzye2Y5wzmO6/J4hdM=)
                          12: _3ArQV0WIang3Y6566MNDlymPSM.roa (hash: S0JVvSQqWxE9GBFw98DT6M/IND88wYzRZCFMXx8E6pY=)
                          13: fsEmSsUpWyo53f9AQKnorEz_4ww.roa (hash: tkIjMfF+pTOIvEkol8ZxDkjRrmIQ6yvvI8WH2ZoXkO4=)
                          14: oGynhP4aXvthVu259k5PADuu7eI.roa (hash: oFg8RD6YZkwg8VcybZyXsgYWwcUBqNDlpQuxw8vIo6c=)
                          15: uLYhHXi716fKyjZfx2gzJ3EGUdo.roa (hash: Ui8rN3SnhBXRoOn5kXrAN5pwwH6pPo/nTDK8l35up3k=)
                          16: up_4n9Lp5vZ0pW68blQb7h8SkG0.roa (hash: GmaLLFqrP/x4pgyZv+ywc9zn/BT0CMhI9r8ah9CWbhA=)
                          17: wOVkqT7ztZXxGTTzuM5l0LfJavk.roa (hash: jmFTZuFqzg3pZRsa0IUrlDUzQ6n73sahy63N4xlRN5w=)
                          18: yFXrcqKEf7nJS9o-jQnPMUU9qVg.roa (hash: UNp8aNbRb0sX19Cut1y01pHMseIIL4CXte8eLcUOE4w=)
                          19: ypq3zheWfc4DE8P4z1cwHhkjBYI.roa (hash: VKYU1qGd4RJ3o10B1EDz3EAb01WtMqx2qvaOQyXihWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:f6:b4:17:91:f2:f4:c5:2f:0b:53:3a:1f:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
        Validity
            Not Before: Jul 28 12:01:30 2026 GMT
            Not After : Jul 29 12:01:30 2026 GMT
        Subject: CN=e648aad051015e9ca7935a3f947078a03334abdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:d2:c9:47:0c:37:85:e3:db:81:1e:f5:90:
                    06:bb:b3:2b:9e:5a:6a:74:85:33:06:a5:ff:5f:ef:
                    3b:ac:56:c7:bb:b3:67:ec:f6:e0:6b:ef:8b:c3:70:
                    fb:3b:65:ef:71:7f:78:95:55:bd:dc:82:1f:44:08:
                    96:b6:90:40:ff:6c:81:a3:6b:f3:b8:d7:22:5b:f7:
                    49:e0:74:e6:b9:5e:47:2d:6f:04:8d:62:8c:54:72:
                    bc:bb:aa:53:73:fc:52:9e:c2:b3:16:26:1e:1f:d9:
                    d4:87:9e:f1:59:62:ef:b3:f2:80:5b:e4:d0:4d:b6:
                    36:d6:81:af:34:90:fc:2a:dd:55:60:b8:e9:ea:d9:
                    05:db:c6:fd:70:cb:1e:13:dd:8e:0d:8d:7d:bc:10:
                    86:1e:bc:ca:9e:a2:8d:3f:80:80:98:cc:95:c3:9a:
                    47:88:00:01:51:85:42:70:53:63:18:38:38:0f:53:
                    47:0e:f7:7a:6d:fe:c9:18:d0:ed:57:7c:ed:e9:30:
                    30:e7:24:df:c7:a7:33:4d:de:64:91:f7:ff:6a:86:
                    33:6d:d2:21:f6:1e:4e:f9:f5:9a:8b:8d:18:9b:7b:
                    50:c6:5c:d1:05:f3:6c:d1:e4:26:d8:65:79:33:c5:
                    f1:e0:1d:eb:ce:22:34:4c:a7:b6:11:57:7a:92:7d:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:48:AA:D0:51:01:5E:9C:A7:93:5A:3F:94:70:78:A0:33:34:AB:DF
            X509v3 Authority Key Identifier:
                keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:da:39:a0:b9:3c:91:da:43:65:86:9b:9a:69:19:35:dc:be:
         55:0f:be:da:64:74:ed:91:ac:cf:d4:35:26:de:18:df:ce:fd:
         67:fb:0f:97:5b:ec:f7:9d:e1:c4:53:40:31:c8:63:15:cb:32:
         b5:ce:0a:46:25:c0:41:a2:25:0b:92:78:16:23:96:5d:58:43:
         c6:4e:3c:d5:da:82:b0:5c:c7:5b:de:8f:de:20:ba:a2:ca:ed:
         da:9a:1e:0b:e9:7f:8a:bb:49:64:ef:c9:fe:b3:cc:e1:55:e9:
         de:c3:ec:38:e7:a6:db:8c:f6:04:bd:b7:b7:da:ad:96:33:83:
         5e:74:fd:21:49:d9:5b:3b:82:4a:bb:46:ce:bb:a8:b3:56:de:
         66:48:9c:c7:49:e3:e2:c5:e1:b9:e9:95:c4:9e:d4:3e:4c:39:
         b5:dc:bd:99:4a:2d:d4:ad:d3:bb:5d:8b:0f:43:4e:7d:c2:35:
         0b:b9:0a:0b:da:a8:4e:f0:00:ed:bd:94:e4:c3:57:bd:c9:92:
         e5:dc:d8:63:17:f7:6f:1d:d2:87:45:f4:86:ac:ab:2a:45:e4:
         64:14:56:7a:b9:6f:ca:00:a9:04:50:2a:fa:af:2b:4b:8d:6c:
         09:97:93:92:8a:62:ca:f3:bb:12:57:8a:d4:bf:31:77:af:8c:
         4d:42:63:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omfa0F5Hy9MUvC1M6H4BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZjUzMTRhZWVmNTEzMjMxOTRmZDg2Mjk4NThhZDIwZmI5
MmRmZTcwHhcNMjYwNzI4MTIwMTMwWhcNMjYwNzI5MTIwMTMwWjAzMTEwLwYDVQQD
EyhlNjQ4YWFkMDUxMDE1ZTljYTc5MzVhM2Y5NDcwNzhhMDMzMzRhYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIfSyUcMN4Xj24Ee9ZAGu7Mrnlpq
dIUzBqX/X+87rFbHu7Nn7Pbga++Lw3D7O2XvcX94lVW93IIfRAiWtpBA/2yBo2vz
uNciW/dJ4HTmuV5HLW8EjWKMVHK8u6pTc/xSnsKzFiYeH9nUh57xWWLvs/KAW+TQ
TbY21oGvNJD8Kt1VYLjp6tkF28b9cMseE92ODY19vBCGHrzKnqKNP4CAmMyVw5pH
iAABUYVCcFNjGDg4D1NHDvd6bf7JGNDtV3zt6TAw5yTfx6czTd5kkff/aoYzbdIh
9h5O+fWai40Ym3tQxlzRBfNs0eQm2GV5M8Xx4B3rziI0TKe2EVd6kn0ZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZIqtBRAV6cp5NaP5RweKAzNKvfMB8GA1UdIwQY
MBaAFO71MUru9RMjGU/YYphYrSD7kt/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgto5oLk8
kdpDZYabmmkZNdy+VQ++2mR07ZGsz9Q1Jt4Y3879Z/sPl1vs953hxFNAMchjFcsy
tc4KRiXAQaIlC5J4FiOWXVhDxk481dqCsFzHW96P3iC6osrt2poeC+l/irtJZO/J
/rPM4VXp3sPsOOem24z2BL23t9qtljODXnT9IUnZWzuCSrtGzruos1beZkicx0nj
4sXhuemVxJ7UPkw5tdy9mUot1K3Tu12LD0NOfcI1C7kKC9qoTvAA7b2U5MNXvcmS
5dzYYxf3bx3Sh0X0hqyrKkXkZBRWerlvygCpBFAq+q8rS41sCZeTkopiyvO7EleK
1L8xd6+MTUJjdw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:43 2026 by rpki-client