Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          4eCenJ3i6gfVyB5HR6fDqV9b7rCCATpy1guucsx7eu8=
Subject key identifier:   A0:1E:79:B2:C5:C9:68:80:CD:6D:CF:EE:47:4D:03:34:3F:C9:06:DC
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019FAAF57A9AF9798345A74D35119630DBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          1382
Signing time:             Tue 28 Jul 2026 23:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:42 +0000
Files and hashes:         1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
                          2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
                          3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
                          4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
                          5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
                          6: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
                          7: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
                          8: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
                          9: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
                          10: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
                          11: K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa (hash: EjAMOySbpY1BQojVyP+4Fblh4A/2sP9R9ArCHE0eUrI=)
                          12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
                          13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
                          14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
                          15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
                          16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
                          17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
                          18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
                          19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
                          20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
                          21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
                          22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: ZuP/t7+6DtUY1BEEUI7NXVNwQupeNl/3eSz+25977eI=)
                          23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
                          24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
                          25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
                          26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
                          27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:7a:9a:f9:79:83:45:a7:4d:35:11:96:30:db:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Jul 28 23:00:42 2026 GMT
            Not After : Jul 29 23:00:42 2026 GMT
        Subject: CN=a01e79b2c5c96880cd6dcfee474d03343fc906dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:75:fa:59:e5:a2:7b:6f:88:b1:2f:d0:35:
                    02:83:b3:79:96:b0:f1:4e:60:ce:dc:32:e2:e7:f2:
                    93:54:fe:3c:51:18:f7:53:99:77:79:bd:b9:2d:fa:
                    e7:8c:15:91:25:53:05:4e:ac:8e:0e:a3:d9:76:be:
                    ac:83:ea:a2:05:24:82:0f:c7:52:35:0b:20:8f:35:
                    83:a8:6b:db:dc:a6:93:b4:06:b6:81:78:94:62:a9:
                    48:dc:f2:be:a9:ba:ad:00:dd:e8:86:fe:52:b2:37:
                    81:1f:cf:fd:00:9e:89:62:70:17:d5:c8:f1:5e:19:
                    b7:8c:f9:4b:a8:a6:b8:71:47:47:0a:10:31:5f:0e:
                    24:47:6e:27:65:9c:67:19:0a:da:0e:04:89:9a:23:
                    cd:0d:3c:21:10:05:7c:1f:83:94:e9:e2:00:0b:60:
                    47:ab:9b:bf:20:13:02:3d:25:58:d4:46:b8:c7:9f:
                    14:2a:f1:73:55:8c:6a:15:49:25:97:5f:f8:e9:9b:
                    2f:b1:55:50:a8:59:ac:4f:d5:a4:cc:c9:87:89:77:
                    69:48:67:5d:4b:44:7a:88:02:73:f8:c7:d4:87:f5:
                    49:6b:88:21:8e:d7:79:d9:e8:23:74:d9:4c:ff:f6:
                    65:16:b9:11:a8:8a:44:b3:eb:a2:8f:81:a9:3a:b2:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:79:B2:C5:C9:68:80:CD:6D:CF:EE:47:4D:03:34:3F:C9:06:DC
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:04:4f:99:20:c4:66:2f:c0:e1:38:c6:cb:46:fd:ca:da:52:
         67:29:86:0d:d2:50:9a:c3:32:92:1f:31:6e:4b:c6:5e:d0:5d:
         4c:53:fa:de:8c:c9:1b:29:97:fd:2a:74:83:06:c6:39:f1:6a:
         df:18:3e:82:8e:28:fd:61:21:70:82:05:87:e7:96:84:01:4b:
         28:c5:af:c0:54:9a:c2:89:56:3c:3d:63:12:26:3a:b0:b4:91:
         c9:f3:4f:64:db:0f:ee:77:7a:e3:4b:c6:eb:76:cf:f5:22:b4:
         1f:a4:cb:01:87:e1:dc:4e:b7:16:e9:67:29:3e:93:ed:a1:3e:
         25:44:50:0c:11:be:27:96:89:35:c5:43:ab:88:76:5b:90:67:
         89:e0:be:b5:f1:34:ca:be:1a:5a:fd:94:9f:c2:f2:8a:ba:aa:
         f4:2c:11:3c:d1:42:e4:38:49:71:fb:fa:ea:c3:1d:a6:16:22:
         3c:a7:d0:3a:78:19:c1:e3:1d:b8:cf:83:11:56:35:8d:0e:ae:
         13:0e:c1:7b:a5:b2:2c:90:73:b8:a4:96:c4:78:d0:20:37:3d:
         c8:d2:6e:4c:ca:38:c8:df:11:e3:12:ed:14:4e:86:fd:41:fb:
         07:df:4f:77:ec:78:0e:bc:f1:eb:40:40:82:6a:db:d5:3f:b6:
         e5:ff:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:34 2026 by rpki-client