Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          N1iXIE6a8Z1qaNiFU9tllDdCWwmHY1CaP9pFTzF46/E=
Subject key identifier:   4B:30:71:BB:4B:E6:3B:E1:30:59:FD:61:3C:41:1D:9F:77:75:13:F1
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019FA8D0208FF29BC4A454FB082A46346F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0F7A
Signing time:             Tue 28 Jul 2026 13:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:39 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
                          3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
                          4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          7: Fivb1SW9lsFVwsJwjqgMykWEEdE.roa (hash: zmxRgLvMepPFPNUFI1TWdNAxXvFRCxr5eHeyVhjm+aw=)
                          8: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          9: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          10: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          11: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
                          12: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          13: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          14: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          15: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          16: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          17: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          18: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: rH55G3ISzB17tx2qx3K1HpkUIU32XJeOIUblBJpDApQ=)
                          19: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          20: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          21: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          22: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          23: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          24: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:20:8f:f2:9b:c4:a4:54:fb:08:2a:46:34:6f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Jul 28 13:00:39 2026 GMT
            Not After : Jul 29 13:00:39 2026 GMT
        Subject: CN=4b3071bb4be63be13059fd613c411d9f777513f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:9e:27:7c:4c:ce:b0:3c:74:32:ba:24:66:
                    f2:47:74:0d:eb:e3:fa:ac:3c:a4:d6:51:58:c7:8f:
                    1e:c6:89:c0:5b:6d:23:9d:d7:60:9a:fd:28:74:64:
                    d2:4a:ab:f4:b4:39:26:38:3f:8e:f1:80:0b:8f:66:
                    09:71:04:73:25:59:75:09:f6:6f:5b:06:91:2e:dc:
                    8d:ce:a6:9b:45:42:4c:22:26:f8:94:20:e9:e7:d7:
                    1e:e5:71:84:ec:d0:ba:4f:9d:f5:63:65:de:24:5d:
                    b3:7c:12:03:c7:3e:ca:0b:43:26:07:7e:11:25:0d:
                    a4:88:c9:bc:4f:26:92:99:df:e5:e3:07:cc:98:81:
                    c8:87:69:2b:b7:40:6d:c4:b6:07:80:cc:aa:18:a9:
                    5d:fc:f2:cf:e5:d4:ef:2c:ba:f8:c5:71:cf:63:99:
                    56:7f:0e:4f:a1:55:28:a2:bb:5e:19:a5:8f:72:7c:
                    20:e1:0e:75:2d:42:1d:0e:86:2b:b2:77:d6:0b:da:
                    f7:85:65:74:10:e3:3c:ea:02:1b:ee:b7:d6:1f:9d:
                    80:b7:fd:7c:27:59:f2:89:8b:06:ab:05:d5:8d:f4:
                    c0:eb:bf:ca:e7:06:04:78:81:20:c6:f0:06:0b:94:
                    1d:21:de:e2:9b:ea:ee:2e:5c:78:4a:b2:0e:51:cf:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:71:BB:4B:E6:3B:E1:30:59:FD:61:3C:41:1D:9F:77:75:13:F1
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:42:55:ce:3f:da:26:c1:34:97:89:ed:ba:6d:41:95:95:
         7e:05:be:d3:49:dd:99:a5:dd:89:50:35:23:30:ab:42:71:ef:
         dd:6f:ad:89:55:84:15:32:a5:52:1e:a7:0a:bc:25:9a:94:35:
         b5:41:d0:50:e3:2f:d5:db:e2:f2:80:84:c6:74:dd:0f:b7:e8:
         61:08:cd:53:5b:e4:0e:86:f9:23:01:33:34:d9:ef:bb:db:0b:
         20:85:bb:d6:90:1b:54:0b:f3:ac:aa:d4:da:26:7f:7a:92:5d:
         76:15:76:78:be:6e:ce:cb:e7:1a:6a:74:91:ef:05:56:3a:70:
         99:b2:6c:82:11:9e:f4:ee:aa:4b:17:d7:56:97:fd:5c:67:ca:
         de:ce:54:41:10:fe:09:45:65:83:2e:3b:a4:3c:df:cb:6c:1d:
         a5:af:86:82:88:68:16:86:76:c9:d8:8d:d7:a6:41:76:d9:71:
         30:4e:1e:ee:e5:31:04:6f:e3:13:55:0c:be:87:12:a2:25:66:
         17:20:cd:24:56:86:35:05:af:9b:60:ea:bb:c1:63:58:cf:c9:
         3d:3e:71:3d:40:23:dd:30:f8:fe:dd:63:c6:1a:af:0f:44:18:
         b8:27:5a:43:11:be:f4:e9:d7:38:f9:b6:21:7d:cd:18:44:d4:
         52:55:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:33 2026 by rpki-client