Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          QkysD4gZPG14XlL3oZgj2a3a1kSIQQUsjIK/36NtGvM=
Subject key identifier:   F7:82:51:EB:F7:EE:D3:3D:61:24:A1:56:04:F8:76:54:A5:03:15:D2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019FAB9A89737561CC9EAEC84787A6980449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          1A55
Signing time:             Wed 29 Jul 2026 02:00:59 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:59 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:59 +0000
Files and hashes:         1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=)
                          2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=)
                          3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=)
                          4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=)
                          5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=)
                          6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=)
                          7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=)
                          8: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=)
                          9: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=)
                          10: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=)
                          11: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=)
                          12: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=)
                          13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=)
                          14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=)
                          15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=)
                          16: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=)
                          17: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=)
                          18: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=)
                          19: _65TQQa2lDYa7SLCtFzoS6XVE0U.roa (hash: 6e5rcCTHzzr1GhWvBaLCo3yEBEEAmszZxrtHucA18KI=)
                          20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=)
                          21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=)
                          22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: PNyMutdd26zaIFZsdP243wr/F5EsNlImCB9zfq0QuVY=)
                          23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=)
                          24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=)
                          25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=)
                          26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=)
                          27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=)
                          28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=)
                          29: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=)
                          30: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=)
                          31: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=)
                          32: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=)
                          33: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=)
                          34: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:89:73:75:61:cc:9e:ae:c8:47:87:a6:98:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jul 29 02:00:59 2026 GMT
            Not After : Jul 30 02:00:59 2026 GMT
        Subject: CN=f78251ebf7eed33d6124a15604f87654a50315d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:51:60:a1:34:86:ec:23:33:87:ea:f7:c0:
                    5a:27:ff:98:5f:18:6b:f5:d8:ce:02:c0:b0:d5:81:
                    92:03:19:fa:a3:6e:47:e7:74:6b:da:b3:b2:61:a6:
                    78:34:f6:61:59:cf:b7:86:70:e1:ea:13:2c:fe:55:
                    b8:3e:8d:f5:87:12:db:87:35:d5:46:3f:7f:0d:41:
                    e9:cc:49:c0:9c:79:5d:f0:4c:4c:79:27:18:f0:5f:
                    0f:60:4b:f4:36:dc:1d:71:11:21:9c:34:e7:95:39:
                    bc:f2:56:59:38:e5:7c:bc:c9:5a:26:aa:df:9d:0f:
                    fb:33:0b:f4:fa:05:d7:57:67:4e:14:2c:fd:3d:e5:
                    f6:41:d2:f8:f7:79:65:92:2d:01:9e:36:ff:be:7a:
                    95:db:44:5f:d1:2a:09:eb:df:64:33:0b:75:8c:94:
                    4a:70:7b:7c:5a:fe:cf:fd:3d:52:72:0f:ff:6a:d0:
                    b7:8f:9b:cb:d4:d0:7f:0c:c5:92:82:16:16:e3:e4:
                    dd:73:63:63:6f:a8:1b:69:21:c5:55:ad:6a:ce:e4:
                    ed:02:be:84:06:9e:0c:56:47:b5:ad:d4:04:56:d3:
                    e0:21:f0:3e:79:39:a3:53:9b:a6:c0:b6:46:37:3f:
                    7e:85:16:8f:24:58:0b:99:f6:20:90:c1:40:96:1e:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:51:EB:F7:EE:D3:3D:61:24:A1:56:04:F8:76:54:A5:03:15:D2
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:92:78:17:c3:99:1a:a3:d6:09:c3:c4:f4:f5:53:2d:46:ab:
         a4:23:5f:a4:6e:6a:c2:98:53:fa:82:1a:6a:7e:2c:82:6f:2b:
         63:72:d8:e8:57:1f:c1:97:cc:d7:c6:2a:55:82:a8:6f:8c:13:
         4c:0e:f4:45:0f:e1:10:c3:6f:0f:39:54:4a:01:e7:8d:54:ea:
         e6:8b:d2:d4:1c:00:69:22:7a:5e:a7:63:a2:cc:ee:97:1d:73:
         d5:4a:60:fa:89:fd:fc:82:95:e9:24:21:37:3b:54:11:90:e1:
         fd:6f:e2:b0:ff:2e:ad:b4:af:fd:3f:b3:ae:2a:95:16:76:b0:
         da:64:c7:05:be:ba:12:e4:fd:06:04:77:78:17:86:35:8f:ba:
         7c:1c:a4:48:16:93:63:0e:ce:b0:00:56:2b:a2:b3:df:f8:ac:
         75:f2:d8:45:a9:9b:25:ef:c3:79:ce:f0:15:1b:51:d5:f1:03:
         9d:23:5e:53:84:5a:90:c5:76:07:74:07:52:ef:81:e9:c2:90:
         19:24:4b:6c:79:6f:54:52:e6:50:32:5b:49:0f:cd:1e:74:54:
         88:e3:f3:b5:4c:31:df:94:e3:9b:89:5f:33:cd:ed:10:35:4f:
         34:9f:78:2f:b9:20:5a:d4:31:9e:7d:8d:e8:6a:88:2c:80:13:
         55:03:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:14 2026 by rpki-client