Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          JyBY9WHuojtA/vzOzCEko4aRD5cGPgwasD9OEwh2R/g=
Subject key identifier:   F7:E3:EE:D4:49:05:3B:03:17:51:22:B3:36:C2:88:72:09:3F:33:F9
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019FA975582543B769AA3D458F9E649473AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          131A
Signing time:             Tue 28 Jul 2026 16:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:07 +0000
Files and hashes:         1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
                          2: 0BgZTv7QXJlAZiTUHRagH3BQkp0.roa (hash: 1Mi6r34YcOgbA3mJxnRLp1QOHS59HC92Y/0BpqQFJkY=)
                          3: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
                          4: 5yanEvaCNGmxYIoFSwD5iS2g81s.roa (hash: aMWaHQ8wF/Y1htK9oNbLHRQFbe1aIxUDLSAfigLBhqk=)
                          5: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
                          6: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (hash: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=)
                          7: DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa (hash: INeru24dQtWv6aaG7GCU8qjGuCXwfkgwswLcSE0c5rM=)
                          8: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
                          9: N_eH9tP8sKwGQPcNm7GNoBELV-M.roa (hash: u35SZW/814bffQ/2bUCoM6NNXgrCPwx/svz9dyeDXMM=)
                          10: P979fSRbZB2qJAsaRL-Un7UziRU.roa (hash: 8yhPFAaSS82QNaTgnE/13ZmLFiKivRIrhPw6xm3ENmI=)
                          11: QAhoslHofszADcmZui-eOUMvrKU.roa (hash: 1XMldMRsg874vTqcGiQzaQlXR7XcVR1ojHBp2U217Pg=)
                          12: QErVVtuOwcB_yB0LqZmmy9fn_ak.roa (hash: FDpvep+63kI4zULI0Sfg5/w/pD8+A58oJ0Hyf+jbagg=)
                          13: Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa (hash: LC/otdFV7sxTd0BKKQkekKeoWRTU5X1nRWOWC62qdAw=)
                          14: XPqNLDSioTBbUphggaW_qiKHxQM.roa (hash: u77od1+BFXbLHFmFQ0ohdLmIQae78vCNTKOMpKBDO4A=)
                          15: ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa (hash: DY4bo++5JP9csslzTNXD8o/1EwFJpWmc6JHBfz5aBOU=)
                          16: _sxN__19ZJD-wDLf4-2wxc5ndzI.roa (hash: cDLlnQNW3AtBhQs73FYFH7LRcTVmcIP6AmZwXbvRoBQ=)
                          17: b8rph-cr35APSGmIzjlav9x-ibM.roa (hash: ewv4AA8yj9deK9EvneGfkLw6HKhasqrB49rsY1tooVU=)
                          18: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
                          19: g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa (hash: m+xGgcoyjZzC8OaS+PwG/1kW4RfwvvedJMhkcRHvmJw=)
                          20: jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa (hash: SIMXAPgCs88kIDrWS92r3YG0rKy8dHX8r7UiSduHK9s=)
                          21: nJWPR3ijpZMRJhibKnA2bqIBU-0.roa (hash: hkrTvd6KUmz1EfV2glZ262Azwm8Xx7aPhY3VGefvZcM=)
                          22: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: tnkC6Lxya9LraGZCu+bWb/rJQz9gK7c9SdcUXG+YnOA=)
                          23: vYpCuwM7rWjLKY_sErODVzSuRPQ.roa (hash: cKiFxlCvXlppFUZycLfczFtZWOx0j+yYfF3GWyjfGtk=)
                          24: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
                          25: xDSHSPDYqUST1yGDzj0hcab5JsA.roa (hash: ck+8f/Zhnhgy0hfrt8gda3b7LFRzqdXFoYHCpi0gwvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:58:25:43:b7:69:aa:3d:45:8f:9e:64:94:73:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Jul 28 16:01:07 2026 GMT
            Not After : Jul 29 16:01:07 2026 GMT
        Subject: CN=f7e3eed449053b03175122b336c28872093f33f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:98:0f:0e:a6:73:ef:d1:99:24:60:ed:27:
                    24:2e:a3:34:6a:ad:d1:84:43:ae:2f:50:9e:32:d1:
                    a4:4c:1e:15:04:f3:30:4c:54:d2:99:ab:33:73:bf:
                    04:9a:00:81:64:9c:96:9f:ae:e8:c4:67:cf:4e:3d:
                    53:c0:dc:b2:f1:96:53:41:2e:01:d9:a6:94:33:c7:
                    47:80:31:62:a0:29:87:e1:3e:8f:d1:08:1d:9a:fa:
                    cd:8a:70:47:3b:dc:90:f2:74:26:ba:b9:93:8b:84:
                    03:4b:60:bf:73:72:73:81:9c:5f:0b:6a:cb:ed:3d:
                    a7:14:6f:88:d0:bd:5e:ec:a6:90:71:5a:a3:a1:37:
                    eb:d4:df:85:b5:a9:73:13:04:0b:47:ea:d8:9f:d6:
                    c6:e4:16:89:6f:06:c3:b1:2d:99:10:85:12:a6:f3:
                    7e:d3:98:7c:48:9f:a1:83:fe:58:87:b3:bf:b5:d9:
                    5e:dc:c1:0d:6a:32:9b:4a:47:39:1e:4d:65:cb:44:
                    90:0a:dc:58:df:82:a6:88:c5:bb:9b:62:e7:d3:c3:
                    a3:c3:93:8d:cc:29:ea:54:d3:4a:11:ee:c4:d6:47:
                    4d:92:7e:39:41:48:1b:7c:40:ab:60:bd:00:65:81:
                    4e:2a:f3:db:a1:25:e7:04:c5:09:f3:7d:28:ae:1a:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E3:EE:D4:49:05:3B:03:17:51:22:B3:36:C2:88:72:09:3F:33:F9
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:b2:20:27:eb:be:bb:d4:b2:e5:10:86:90:f5:72:fd:58:
         6b:d7:4e:52:5b:3b:8c:db:79:41:0a:e2:f6:f8:99:9d:cc:ce:
         7c:02:d7:d2:f3:43:95:59:99:7b:1e:4c:d8:4e:a6:06:ad:c9:
         42:97:51:d5:f7:dd:89:55:6e:7b:f7:b3:01:fa:94:f1:bc:0e:
         52:94:50:58:0e:74:d1:68:80:97:a7:82:d6:30:0e:b5:c0:74:
         2b:15:d9:5c:01:ea:ca:d7:39:53:73:82:65:38:bb:2a:28:51:
         9a:6b:1e:06:70:22:53:56:5b:ae:f9:10:b6:6f:c9:94:bd:f2:
         ff:2a:d2:36:ea:69:89:46:96:c0:8f:62:44:92:c1:0f:1f:44:
         66:43:75:e5:ac:61:c6:49:bc:6f:77:13:68:58:0d:c8:e0:78:
         5d:d5:53:6f:44:d9:0b:2c:dd:95:a1:57:e1:4e:3f:32:56:a5:
         d0:08:3c:87:e6:14:87:eb:5f:68:9f:9f:12:6f:d1:27:26:4b:
         f3:1d:48:f9:6a:08:69:96:58:50:4a:53:d9:3e:64:12:7a:e8:
         cc:61:0c:04:98:f8:48:3d:43:80:93:91:fd:18:54:09:a3:d7:
         0f:b0:54:92:48:69:3f:58:f9:c2:23:20:53:ee:da:0b:2c:93:
         fd:34:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:46 2026 by rpki-client