Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          5WnK03Kr7dmGeX5FEBqdsmfpXLqMCeifmojh5YF0U/8=
Subject key identifier:   43:8A:7B:42:0C:15:F3:8A:9B:81:34:38:F1:4D:5A:CC:6D:32:04:0A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019FA9E27150F6B440F79ADF94FAC2F1478B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1AFE
Signing time:             Tue 28 Jul 2026 18:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:17 +0000
Files and hashes:         1: 0vj7JXUBrLagybLlWJ4PWRimrk4.roa (hash: p4ApMOK+SPj5XHXGwhSfxlbMJCsXzdSuABgqPBnj3MU=)
                          2: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=)
                          3: 5DO2gDG0jIsxWfIdsn6VtS8YzVU.roa (hash: vc1lWKgaQKcWvIEiovIUH6ry7EbnnG5est8nMrCuGtk=)
                          4: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=)
                          5: 9fWzc0pq3BXFhW64R8Ye6I_odlI.roa (hash: OYKts7CQg3YuQ0vSm4PNuWhYnkYjfwUXCIDdAVw58AA=)
                          6: BrWqmn6ufu1c3ybbHYyn6m2ftOw.roa (hash: pAOxKx1gtDUQFlIMdZFxk4PbU1mAiO8jSv4488AwJjA=)
                          7: CsPvX5VkNnHfjEVzf--3N7HiCt0.roa (hash: swdTyMp3lCerLGvqWW9rxner06UFPkpgqjF5MiGiKxA=)
                          8: EFrq_d0PEb8VRZIfuNqJqAIXBNI.roa (hash: GQErCRLgtsNLuPVfFh+ekGren6oKGfK322nyL4XlzQk=)
                          9: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=)
                          10: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=)
                          11: KqX_F5inahfFi_Uf0lUdknq02_I.roa (hash: eMyY/RJXEgkwFfwzZdUeVSIVLAkusZF0X9dpw7S9hvQ=)
                          12: KuME14rByfBQ9KhepX6_nqj4Ylo.roa (hash: MoO6a+GTnNJm8wDObqXafhuus/oWua527WThP/mTmaI=)
                          13: MbqU94NccAUwOqnQFVGY-JB8NWs.roa (hash: befsJKRxsU09OTkrfmvxJvEheLnX+laHe6P6sZhiUVE=)
                          14: MubDzUXgYKZNyqpvxVViG0zZCmY.roa (hash: 8Olxf9Zw2mndVFhL+vEgGkp3VdkiYT/3tzzXyDV4KAg=)
                          15: NfhjXThRAR9WlLAnnMDPo95swGA.roa (hash: SMa2RFFbVljNgbhdlNWYkUqOIq1qiZ/eebXtBg1vaJE=)
                          16: OJDcnZKMbzW_ndCn_Y8xeVCn05o.roa (hash: soAxA3YCjbh3KJriK0iGluXyH4QMgs1fmaVz0A3jO4Q=)
                          17: Ocu7yhS16lIhkaz6kvNf5EjHEQk.roa (hash: UYtrIc1zOVUnLJzMzL7BiCNr+68t1qaFHcOgeUn477k=)
                          18: PQvYJRaDPLduNRM19RIULh1iH1E.roa (hash: 9+eYJbeeIsnY4uSYOqJAx4dOFxxz6YxL8bPsLR/VBqA=)
                          19: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (hash: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U=)
                          20: TeEN_g-HN2hPiwNoH322Uht7dE0.roa (hash: K8H74GvLNHzRtP0MbhQ/DuIVuXcfUX8899uSVd06/ek=)
                          21: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=)
                          22: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=)
                          23: W68hFODp_YtpWmt1oMmh6ym8JE4.roa (hash: kfWSRnQ/EP4hGIaCz20/BrHw2/sY7DyFe4rlnpfCVKM=)
                          24: W6HPV15W-t9IGjT1BKBKDdDstfY.roa (hash: 6XCqqg5d5VswUyQkGuFshjIyxQG3YtTL+kdMuwS0bxM=)
                          25: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=)
                          26: Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (hash: mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=)
                          27: Y3c1Ak3JjLBatsrW2gTMq42unDs.roa (hash: V3CWN+tjhR644j/TU9W4RO+YGp9W+J2N1VVBE6r43Ds=)
                          28: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (hash: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=)
                          29: aMUM82zpD72PsTtPXeMoMh79hv4.roa (hash: H8WMnSCDbFYVDWSdtnYWXZ6sdYW8tWytjzxH1fpLKPM=)
                          30: aluPJjWAdecEuPhfT6xPiTscs3g.roa (hash: qEqte9DjCpMuL2xi7meGIeRKrFtmTNmtA+hOPFoxGLo=)
                          31: b7Iy2K3fNT4o1ptsUOWTXaKegGE.roa (hash: eEGHYrUDZjWkpvJG7XTr6ECBrJ12pRzTfDc9yq6RjR4=)
                          32: fXi-3J0I08pHCGpMDBfoClmPjMc.roa (hash: 021lBJ+9jhBzDrRbngydXsCj6/uNgbtu04bJTaEzJbY=)
                          33: fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (hash: V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=)
                          34: iO87tVaqBHQbaJyf-L6RWAyKhsI.roa (hash: aX9KA5fEEcTue19WBEH78kPWB2BBeDX/IvXWW3HldXM=)
                          35: imq_-vyZQocM05HAJ1aGB-Na32E.roa (hash: zILdHViD6+2XwPUydnZqZNWtXsiWdTIyLeh2NFQq4bA=)
                          36: n4AMurCrww_nURM0yKJCQWoqFho.roa (hash: Pu6TaTGLhHGntg0HayCe7LPYpIinuWkfBvOuAdu6bq8=)
                          37: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=)
                          38: nYiu6oOW0if5nPqD1uAIjhy7bwU.roa (hash: aV32bg43L5hMCnFWVWW9c3F2Uf1RkZZVycXuhNm++yY=)
                          39: pq6V1IZy-9ZmY3yG58LAIoneZVU.roa (hash: Az7YHbsrPWtkI6VahaTJif6J6wTdzuZGNkht38V4VVA=)
                          40: q8hTGjeYyE7mKQcwFyxuyANkWP0.roa (hash: Z/EmoEIqThnkNLbQ909doNIcKbNDWOwWqQfmP11OUzM=)
                          41: qCoveAVX32HIopIBireH9gp8zEU.roa (hash: gtdKvptn4CgaUavZ31yxeWK0Q3MkTStDIsjYh4vSeXE=)
                          42: qdTxmC1M-cLgpOCU4X2vmsVLSxA.roa (hash: A9F9hgF4690mdOxK/7gd71yvYHQZzaHopzHxADwnEzA=)
                          43: rPIzoCFP-zCt505IFJ-JM6SHddk.roa (hash: ff67hWMpb0SLcbXRIw3vOQeGFPvfgLQxI2Na2l7rVAw=)
                          44: rot2DCf3Cxh1_wLd9sFwvbNf0ik.roa (hash: uSwTt1vU7kWcIHPRaMMP17mJZZIOQlv9nqnTBizkqpg=)
                          45: rw8mJZQzW6QEiAYdPeC2A-CJl7U.roa (hash: nUf7q3yUcLT6NsR7mCamf7rAlLZq8kgUDnVA/JLnNo4=)
                          46: taxrKIGgholt0zw4AAjTrut9jTw.roa (hash: GntLLWvcFu7rtcqcniIhyohPjU/HRBpEmtMSeeRbwBg=)
                          47: uvo9qLrP-xQ9FWfoQOzD-ND2gZs.roa (hash: bNQzpEIOSnPK9ZwpcBxEVwm8tiEls+8YjeG+tA3PxQ8=)
                          48: v8IwCDtYNCTuGpxpKIyBWWgQpH8.roa (hash: zZMyLP8ljYbmWtxvqiri+t8K/bApVDIvmS40veLHe3A=)
                          49: wlZTNZPVMxiXs641En6t5-EeJUw.roa (hash: gKSFJeU2J/eZ0luL9bAhjMHupWPFMTGpHQJ2vR/V7JY=)
                          50: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: JKwxmwpLiL9rNHzxkl5AXf+Fb1+m8kohOyDIqSgXn1g=)
                          51: yQ5bWrG2yLKQItntFqkI_RRZD3M.roa (hash: 6dgereTkYEBvruil0ZD3KfeKaq1Pr8Am23D3rXb7l/8=)
                          52: yer03pmH6SIs0nqVKhWdrS2aciQ.roa (hash: hidSPdxxMCs5YGj76wIsTiK9tc65CoMTtEqXLLr5NP8=)
                          53: yyHCGsXDUPnVtBHPRPboM31Xff4.roa (hash: Jc6WR4RpUbLk+U0vWhrAX/MYvjvy+viiWMrZKy3AV4A=)
                          54: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:71:50:f6:b4:40:f7:9a:df:94:fa:c2:f1:47:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jul 28 18:00:17 2026 GMT
            Not After : Jul 29 18:00:17 2026 GMT
        Subject: CN=438a7b420c15f38a9b813438f14d5acc6d32040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:9d:62:91:4b:96:74:19:22:14:33:d2:33:
                    f9:5c:03:7a:7b:5b:73:00:4d:6a:b4:ae:3c:fe:ef:
                    26:73:8a:44:d7:a2:cc:b2:e2:fe:bc:d9:31:92:51:
                    73:f7:a1:41:c4:93:21:ea:b8:25:b1:d5:65:b0:11:
                    21:37:68:90:9c:79:81:55:fd:a9:c8:40:e4:ac:f5:
                    08:14:99:97:f7:8f:3e:da:aa:10:7f:35:93:1b:89:
                    dc:43:32:56:87:2b:fe:6d:77:1f:05:54:d4:06:c6:
                    1a:d0:20:71:fa:13:cd:e8:b2:88:53:72:36:80:34:
                    fa:64:f3:02:e3:85:72:7d:01:84:a5:b9:72:8b:94:
                    af:76:20:2d:cc:38:33:a1:73:ea:de:8d:bd:b0:e8:
                    9a:aa:6d:3d:29:62:38:d5:52:c6:5e:56:2e:92:87:
                    ea:0b:29:ea:a2:6c:21:6d:2a:42:5d:0f:5a:c5:41:
                    b3:70:ad:76:84:8e:e7:e8:56:6e:c0:8c:6d:55:49:
                    ea:a8:c9:26:96:dd:e8:c2:6e:26:24:32:4a:78:19:
                    63:8b:a2:c8:a7:f7:6c:1b:56:c4:d5:bf:3a:82:e4:
                    8c:25:b5:48:3a:2b:5b:3f:8e:d8:24:2c:4a:26:45:
                    c3:45:5f:66:f6:c5:dd:1f:9e:91:67:71:2f:f7:03:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8A:7B:42:0C:15:F3:8A:9B:81:34:38:F1:4D:5A:CC:6D:32:04:0A
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:08:c0:f4:14:6e:50:a0:c8:15:60:62:be:cb:30:7a:ff:92:
         37:3b:a6:4b:b5:10:91:a9:52:7e:eb:3c:d9:79:4b:cf:7e:df:
         38:4a:68:f0:d1:3f:5d:56:b8:7d:5c:f0:71:db:55:94:3b:19:
         a6:3a:66:17:3d:70:1b:87:66:d0:70:b5:5f:18:8f:86:97:4c:
         35:b9:df:0a:bc:8e:60:85:fb:fb:6f:ab:bd:ec:f5:82:07:f6:
         b9:37:58:be:db:ac:60:58:77:13:77:c7:1f:7b:3a:7e:59:e2:
         6e:19:d1:a7:e6:e4:c3:25:54:01:1d:04:bc:5a:39:e5:0d:24:
         bc:cc:bb:38:00:fb:dd:5f:91:dc:d3:a9:9a:e2:28:ba:f0:f7:
         3d:db:e6:dc:30:c3:f1:49:c9:75:75:f2:2f:a7:9f:02:6c:d0:
         3e:4a:84:b0:04:13:b5:b7:ef:97:35:65:3d:b0:7c:17:20:94:
         11:06:69:1e:0b:9a:b3:01:ec:d7:74:fd:a9:7f:1d:99:8b:a0:
         d8:ea:21:85:ea:d8:5c:20:a4:c1:47:d9:12:85:f6:9e:50:f5:
         29:d0:39:3d:a2:b4:5c:93:85:1a:c7:08:6d:51:4d:b5:5e:ec:
         52:a3:6f:0f:af:ce:38:81:06:32:a0:a8:f1:93:9c:42:00:fb:
         b2:ee:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:44 2026 by rpki-client