Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          pdTyDQJPK/fiqOktP4xQihN2JrjMyGRyqejkomf7xGI=
Subject key identifier:   76:19:78:C7:16:2B:A6:94:7C:A9:EE:7A:90:80:7C:4E:51:3E:89:80
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       019FAA1A08A70EE7DE365A5A5EBA488DC998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          1A32
Signing time:             Tue 28 Jul 2026 19:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:00 +0000
Files and hashes:         1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
                          2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=)
                          3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
                          4: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
                          5: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (hash: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=)
                          6: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
                          7: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
                          8: X7CBYKuwZavOmFbf8xJJDhABAJ4.roa (hash: XXFExiGUxJHCf32+M8YXjA/DO0qOOWZKBpQs4MlsYQo=)
                          9: XhKy1InQkWlvSwWNwzaeAW8Z4pk.roa (hash: iq+DLOeRYa0b+WOtuiyuomokwYAcR6VQbGOdLVM/R6g=)
                          10: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
                          11: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          12: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: FWYyzJMFcrvSbxV7uBafdeCNSCo0rJ2LbT6f6Vuyj0g=)
                          13: cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa (hash: MJoA4QKvMfD128eHraMg34YoNGsOhXAw8I0h2v8nSz4=)
                          14: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (hash: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=)
                          15: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=)
                          16: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
                          17: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
                          18: glWxdut08Vwn-qxiS-pyw1KuV6s.roa (hash: RXAylKSGn5n8hPtBxyqJXbZqVSosVeuUL9onv9ffIJ8=)
                          19: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
                          20: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
                          21: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=)
                          22: wRsmJd7CIJgwynHO3eDWK5E65EA.roa (hash: Is86hG9/O11lh+0TSiK7Jnli8yF4j5q5FW3grn/LkD0=)
                          23: yJBe4wL__q5eFSy_v2lsZXclqhQ.roa (hash: waMNp3qW5tHL4UcllPTtbvZg9/Osk4C76/bHTxN/Vec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:08:a7:0e:e7:de:36:5a:5a:5e:ba:48:8d:c9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Jul 28 19:01:00 2026 GMT
            Not After : Jul 29 19:01:00 2026 GMT
        Subject: CN=761978c7162ba6947ca9ee7a90807c4e513e8980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:f9:41:96:10:03:34:99:f3:11:eb:29:18:
                    8c:04:45:f6:19:84:2f:81:f9:08:2f:a1:9e:34:d5:
                    18:72:bb:91:5c:c5:18:49:0f:c4:4d:4d:79:8a:ea:
                    0f:ff:14:9e:7b:40:51:f9:65:ee:52:b6:f7:71:8c:
                    5b:12:2d:6e:b6:64:e3:09:4d:00:b9:8d:3c:41:4a:
                    b9:54:f9:cb:2f:af:ae:99:bc:b6:f8:6d:af:82:e9:
                    ed:d9:8f:64:1b:ab:29:55:f8:95:36:03:b6:6d:ab:
                    a9:04:e4:65:64:05:1a:cc:91:57:cb:bb:b1:b2:91:
                    84:00:a2:24:fc:e9:7d:93:bd:50:6a:d2:ec:57:af:
                    c0:df:f8:52:44:6b:a9:e5:98:a3:7d:99:8b:8c:09:
                    5c:10:9d:5f:38:e9:72:f1:bf:cb:b5:b4:a7:a8:24:
                    ab:e1:16:50:5b:0d:e3:40:1d:a4:71:7d:87:17:04:
                    4c:87:d9:70:d9:9e:a4:60:a7:ac:4e:d7:6b:88:cd:
                    24:26:ab:38:c0:85:f6:d3:15:3a:18:64:38:98:e7:
                    92:1b:55:05:64:bd:e2:85:65:ae:7f:9b:5b:14:5b:
                    a9:49:27:e6:0d:64:f6:47:3b:e6:f7:dc:97:83:5d:
                    51:84:c3:39:fd:1a:2a:d5:2e:f6:ed:08:1f:62:67:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:78:C7:16:2B:A6:94:7C:A9:EE:7A:90:80:7C:4E:51:3E:89:80
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:5c:52:e6:32:cd:49:f8:40:8d:8c:c6:a6:dc:f6:12:84:
         64:ae:a6:2b:02:e3:6a:b9:5c:e6:6c:4e:0b:cd:d0:73:ab:79:
         9c:47:04:dd:99:4f:1c:74:aa:b1:5a:47:1b:5c:8a:7d:84:fd:
         ad:fa:7c:5f:32:73:4a:fd:97:1f:f5:dc:3c:38:a6:70:8e:b1:
         3c:e8:4b:ae:64:a5:28:06:0a:8b:96:6e:6a:70:9f:20:b5:37:
         7d:83:78:09:a9:6e:ff:56:dd:90:1c:2b:ff:cf:75:ed:bc:45:
         a5:cc:5d:7d:44:1a:d6:bf:63:b7:bf:a3:1d:58:a4:5b:cf:08:
         2f:e7:d3:bd:35:53:bd:87:90:fa:68:7e:92:00:f3:a7:e2:a4:
         5b:e1:bc:9c:86:4d:77:d2:19:39:1f:d4:43:18:db:82:51:70:
         97:e1:4f:1e:92:f0:10:86:28:5d:16:cd:1d:1e:6d:04:aa:ca:
         63:c3:86:9c:2c:09:45:b6:54:58:2d:a6:c6:06:d7:55:3c:f9:
         4d:57:ab:6e:0d:b3:c2:8f:06:28:ad:eb:ea:d3:5a:55:db:7b:
         2e:fe:02:3c:71:e4:9e:51:ef:fd:9e:e9:be:de:54:fc:a4:3a:
         dd:aa:4a:9c:f9:2e:01:bd:54:96:2a:d4:0d:06:55:fe:9e:b2:
         97:ad:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:49 2026 by rpki-client