Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          h7rtEG29+6VamopBeFCcFh1d2mQQ0kvNC4Zn3w8BBaM=
Subject key identifier:   4D:D4:72:1E:D9:3A:72:34:13:F6:5D:7B:BB:F2:5B:C8:3D:1B:D6:F2
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       019EBF5ABDC331675E200BD49538E37F4260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          0D2B
Signing time:             Sat 13 Jun 2026 05:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:55 +0000
Files and hashes:         1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
                          2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
                          3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: cEkOa8NQIe1vGKgTi2fNpLXpDMuN6IT/yPkPBTuP6uM=)
                          4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
                          5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
                          6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
                          7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
                          8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
                          9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
                          10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
                          11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=)
                          12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=)
                          13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
                          14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
                          15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
                          16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
                          17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
                          18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
                          19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
                          20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
                          21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
                          22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
                          23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
                          24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
                          25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
                          26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:bd:c3:31:67:5e:20:0b:d4:95:38:e3:7f:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Jun 13 05:00:55 2026 GMT
            Not After : Jun 14 05:00:55 2026 GMT
        Subject: CN=4dd4721ed93a723413f65d7bbbf25bc83d1bd6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:b0:3e:d2:75:48:60:69:17:2e:54:fb:1c:
                    74:47:14:bd:b5:af:ec:67:df:f3:4f:9e:fb:c3:01:
                    59:0e:6b:8d:d4:38:78:f2:b6:59:0b:80:9a:ed:e1:
                    5b:06:a2:bd:b0:1b:30:04:73:01:32:dc:94:4e:f9:
                    70:4d:35:0a:c8:5f:8c:53:b3:be:73:14:05:01:e0:
                    41:06:44:35:5b:34:4f:a5:69:d9:2d:1c:4d:d1:b5:
                    12:a1:b8:91:0b:34:2b:cc:f6:40:2e:2b:35:f5:eb:
                    05:6a:a6:f4:ee:5e:c5:89:ad:09:f8:93:17:97:dd:
                    c9:09:80:d7:70:81:74:50:d5:ea:f5:e1:c4:f0:54:
                    a8:d0:15:1a:32:f5:ce:d7:46:67:71:99:c3:0c:9c:
                    25:40:40:ac:96:9a:cf:11:30:84:c4:ab:a7:3c:cc:
                    e0:0e:24:63:57:f3:bc:b7:3b:e4:02:0d:0f:48:bb:
                    c9:f3:64:ca:8a:00:e0:db:8c:e2:4d:74:df:2d:68:
                    ed:58:64:0f:9f:16:1e:56:58:36:51:18:9b:69:a3:
                    b8:2e:4f:a9:15:15:8e:17:8d:6d:6b:9d:e8:19:09:
                    ff:b1:19:c5:10:2e:c1:ba:a1:88:85:00:3d:f2:de:
                    d6:c7:9c:4f:85:11:89:81:70:41:bc:3c:ea:87:29:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:72:1E:D9:3A:72:34:13:F6:5D:7B:BB:F2:5B:C8:3D:1B:D6:F2
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:17:20:fe:09:2a:d1:ee:c9:c1:cd:6f:c2:7d:6c:24:f5:ad:
         c2:14:61:2e:d4:6a:68:86:8e:a0:a9:30:91:db:7a:19:3d:47:
         12:ec:a6:48:12:a3:30:94:8a:25:e1:05:0a:6e:ef:97:cd:c0:
         36:a8:23:cd:37:6d:19:1e:a1:96:89:b9:e1:aa:fd:ba:54:fe:
         3d:46:32:2a:92:4b:14:d2:ee:88:61:19:a6:55:6e:39:ff:91:
         93:f1:98:3e:27:1d:9a:ba:ee:01:b8:6b:70:96:68:09:6a:1a:
         f4:d7:24:74:9b:e8:54:b7:19:53:61:c4:7a:ee:f1:8e:af:4e:
         05:1b:1d:fd:a6:64:2f:8f:6f:38:f2:f2:74:80:56:10:fc:a9:
         c1:07:07:be:53:81:ba:57:41:91:ad:0c:b0:97:5e:50:34:49:
         20:d8:e8:11:d2:f3:f8:23:ac:1a:74:9e:79:7d:74:09:7f:59:
         92:9b:c3:d1:2d:e2:8c:08:45:80:e8:e5:20:49:89:8d:be:d4:
         61:7c:ef:9a:5a:d2:69:2c:2a:9e:95:e6:75:e1:99:dc:29:2a:
         4b:5e:5b:ae:3d:c3:fe:a3:ef:68:d6:e3:0e:f6:6e:40:fd:7c:
         55:50:5c:b2:4e:22:fc:01:e0:a2:9a:70:23:7c:f3:ae:b1:15:
         ef:d8:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:33 2026 by rpki-client