Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          gpE11ZTvX11ZbKa+M5n70qbSwSa4Zk8nCgkhrBPgwoI=
Subject key identifier:   6D:CB:C4:09:14:C0:00:C6:D8:23:B6:5E:E6:D1:C1:71:C2:25:84:D3
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019FA9AC528BFE9723D6AA1CF55F112638F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          1410
Signing time:             Tue 28 Jul 2026 17:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:10 +0000
Files and hashes:         1: 1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa (hash: xx9XlKrKpQ671NpkBL4SSdqZlPtj4brGXb4dxduLCWs=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: RmUQr2bzigH4xiqFjWkgJnmpSCQ//QeRJhsUDFgvDOg=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:52:8b:fe:97:23:d6:aa:1c:f5:5f:11:26:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Jul 28 17:01:10 2026 GMT
            Not After : Jul 29 17:01:10 2026 GMT
        Subject: CN=6dcbc40914c000c6d823b65ee6d1c171c22584d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:9c:c3:94:60:61:73:d6:db:e2:39:42:4e:
                    37:44:11:bd:7f:bf:18:ec:47:c9:0e:54:ec:c9:be:
                    5a:9d:e0:ce:fa:83:8d:69:ca:40:e8:e5:58:a9:2a:
                    6f:74:38:90:1f:86:43:7f:e6:44:61:ca:59:10:14:
                    27:58:cc:e0:24:23:4d:c2:97:b9:74:7e:e1:bc:c8:
                    59:77:dd:0e:ae:3d:cc:60:8d:4e:cc:b1:ef:8c:33:
                    48:6a:ca:98:d5:bb:2d:b6:fb:f9:69:d5:d7:75:05:
                    7a:b1:14:d2:b9:2e:f5:d7:11:14:52:79:d7:24:ba:
                    57:e9:b6:85:bb:a2:2f:44:13:62:cc:d7:8c:a5:e4:
                    82:3d:61:3e:8c:98:9a:04:49:09:ef:05:f4:c7:12:
                    79:55:a4:74:94:9c:15:b8:4f:6e:cb:52:59:db:e5:
                    a8:bf:9d:62:7f:fc:0c:43:9e:b4:cd:ee:cc:af:83:
                    a7:df:30:bd:57:ba:4a:ae:6b:0a:11:f6:10:9e:fa:
                    b7:05:01:2c:ca:4f:26:9d:8c:b9:33:05:00:ed:a1:
                    b5:50:6e:25:7c:76:a7:aa:a0:84:87:27:7b:31:6a:
                    a1:59:71:86:40:31:cd:53:9b:e1:66:1a:88:59:9b:
                    ff:f1:c2:92:b4:21:03:66:07:00:e7:40:5f:94:a0:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:C4:09:14:C0:00:C6:D8:23:B6:5E:E6:D1:C1:71:C2:25:84:D3
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:31:d8:3b:35:84:5c:81:87:12:7d:a1:8a:10:36:11:9f:
         a9:04:f8:bc:b1:42:72:34:c4:4f:d1:1e:f7:9a:78:89:fd:f7:
         d4:cc:86:92:af:1c:d6:5e:de:e4:31:d6:19:89:b9:98:6b:2e:
         78:9c:0a:ea:2c:be:6f:c2:8a:b2:8b:d0:c6:55:9b:74:40:ce:
         dc:9f:6e:24:ad:2b:66:9f:95:11:e6:e5:15:19:5d:2f:d0:da:
         ad:dd:f1:37:0f:14:8a:a3:4c:d2:8f:67:5b:7b:19:19:cf:c2:
         ea:62:30:15:f5:13:00:ac:71:b9:61:1f:5d:dc:67:4c:ea:3b:
         4a:68:f7:fb:64:c5:75:7e:94:2e:0c:06:0c:01:95:58:f0:ff:
         25:3f:93:f5:ed:f2:9f:0d:1c:71:3d:b9:45:ed:5e:60:0b:15:
         47:01:4e:e3:b6:13:0d:13:20:e2:59:a3:88:3a:de:3d:30:8d:
         f7:21:44:fb:a8:6c:b3:4e:53:d8:2b:87:5b:b9:7a:a8:0e:87:
         6b:11:0e:69:b8:61:6e:58:bd:31:02:23:ab:39:3d:97:e6:17:
         4e:e2:f8:d8:0a:6f:96:7b:73:d9:f9:64:c0:10:54:57:4b:b6:
         fe:0c:5c:4f:bc:5e:21:a8:f1:27:82:ce:ae:88:e8:cb:6c:a3:
         be:f9:54:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prFKL/pcj1qoc9V8RJjj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj
ZDQ5ZTUwHhcNMjYwNzI4MTcwMTEwWhcNMjYwNzI5MTcwMTEwWjAzMTEwLwYDVQQD
Eyg2ZGNiYzQwOTE0YzAwMGM2ZDgyM2I2NWVlNmQxYzE3MWMyMjU4NGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B6cw5RgYXPW2+I5Qk43RBG9f78Y
7EfJDlTsyb5aneDO+oONacpA6OVYqSpvdDiQH4ZDf+ZEYcpZEBQnWMzgJCNNwpe5
dH7hvMhZd90Orj3MYI1OzLHvjDNIasqY1bsttvv5adXXdQV6sRTSuS711xEUUnnX
JLpX6baFu6IvRBNizNeMpeSCPWE+jJiaBEkJ7wX0xxJ5VaR0lJwVuE9uy1JZ2+Wo
v51if/wMQ560ze7Mr4On3zC9V7pKrmsKEfYQnvq3BQEsyk8mnYy5MwUA7aG1UG4l
fHanqqCEhyd7MWqhWXGGQDHNU5vhZhqIWZv/8cKStCEDZgcA50BflKD1IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3LxAkUwADG2CO2XubRwXHCJYTTMB8GA1UdIwQY
MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt
YTQyZWM4Nzc2ZmJiLzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi
LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb0x2Ds1
hFyBhxJ9oYoQNhGfqQT4vLFCcjTET9Ee95p4if331MyGkq8c1l7e5DHWGYm5mGsu
eJwK6iy+b8KKsovQxlWbdEDO3J9uJK0rZp+VEeblFRldL9Dard3xNw8UiqNM0o9n
W3sZGc/C6mIwFfUTAKxxuWEfXdxnTOo7Smj3+2TFdX6ULgwGDAGVWPD/JT+T9e3y
nw0ccT25Re1eYAsVRwFO47YTDRMg4lmjiDrePTCN9yFE+6hss05T2CuHW7l6qA6H
axEOabhhbli9MQIjqzk9l+YXTuL42Apvlntz2flkwBBUV0u2/gxcT7xeIajxJ4LO
rojoy2yjvvlUtg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:52 2026 by rpki-client