Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          GNxe48mdlb80ze03f7/SEr8N7Zzof2a4PGytnxuE9wQ=
Subject key identifier:   76:A1:7D:57:B7:6A:1B:3E:4B:35:3F:9B:BD:23:93:E9:8C:B5:03:F5
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019FA9AB78F8BA6746EACF6C11B562A8932C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          095E
Signing time:             Tue 28 Jul 2026 17:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:14 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: ewxmWmWGseijJaT/fDFlqgzS4pkX+l7o97KUcO0oR/o=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:78:f8:ba:67:46:ea:cf:6c:11:b5:62:a8:93:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Jul 28 17:00:14 2026 GMT
            Not After : Jul 29 17:00:14 2026 GMT
        Subject: CN=76a17d57b76a1b3e4b353f9bbd2393e98cb503f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:69:5a:99:1f:ca:d7:55:2d:36:cd:51:ef:
                    de:6f:cf:be:de:e6:b5:d4:87:4b:fe:16:f7:fd:fc:
                    c7:70:c2:01:d5:7d:4b:c0:2c:5e:76:40:ef:e3:c9:
                    7b:dc:10:17:a8:ab:48:00:a2:31:93:91:f8:55:74:
                    ad:21:6f:c7:d8:0a:1f:8d:02:4a:91:a4:77:53:d8:
                    83:b4:4e:cd:96:39:f6:19:73:14:d8:0e:a1:16:a3:
                    40:58:49:5b:fc:97:18:4e:89:c8:75:84:87:49:07:
                    15:5d:8e:82:63:ad:42:9a:b7:92:a3:5f:d0:92:41:
                    ba:ed:5d:90:28:08:9c:5d:65:e7:a0:26:0d:df:69:
                    de:bc:a1:e2:08:8d:7f:c3:0d:9c:cd:6d:5a:30:53:
                    bf:81:f0:25:f8:68:85:09:c0:84:88:7c:4b:4c:ae:
                    68:d7:09:01:f1:d1:61:77:c8:29:5d:64:88:c4:8f:
                    1d:e8:bd:de:b7:1f:87:bc:43:17:9b:fb:3e:0d:39:
                    ca:75:46:cf:40:27:c5:65:09:a4:b5:27:58:17:3e:
                    97:75:37:6e:4a:5c:8b:93:e4:c1:79:fc:12:88:11:
                    40:83:ee:9c:b4:3f:4f:2c:b2:6d:72:94:fe:20:1f:
                    4a:08:89:91:79:61:50:b5:4e:2f:d1:0a:f8:b2:78:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:7D:57:B7:6A:1B:3E:4B:35:3F:9B:BD:23:93:E9:8C:B5:03:F5
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:95:39:0e:b5:54:c0:50:27:95:70:6d:88:5e:25:4e:30:92:
         06:78:bf:9f:22:f0:71:7c:a0:80:db:3b:bc:85:cb:d9:63:0f:
         7e:e0:68:26:1b:ee:56:dd:d8:c8:6f:e8:40:df:8c:01:b0:80:
         29:9f:76:db:52:6b:f1:be:04:8d:a8:a8:3e:7e:b5:be:be:d3:
         45:44:29:f1:bf:f4:d8:32:3a:a4:b0:d1:59:ae:2e:89:49:1f:
         b3:4e:08:c8:e6:da:b2:c5:57:b6:3e:e7:5c:98:d6:f8:a0:25:
         97:24:bb:d3:44:70:f1:48:65:ed:61:08:44:9a:37:b7:e6:ff:
         03:a1:99:d3:89:50:6a:78:e1:22:4e:94:12:c3:7a:8a:6d:e8:
         2e:83:12:65:7e:c3:42:59:c4:42:a2:5e:6d:03:45:d8:b8:4e:
         e9:4d:0b:6a:f7:86:b9:6c:60:29:88:86:73:19:14:e6:6e:5b:
         21:ea:cc:ce:99:a9:0f:d0:df:e5:8d:c3:0b:91:41:b3:6f:e2:
         f6:a8:cd:26:20:c7:33:6f:51:20:79:35:34:7f:9b:a9:92:7e:
         bf:7d:75:d0:ce:c9:0c:53:31:77:95:31:32:fe:6c:46:af:8b:
         25:9f:d1:e1:61:20:c6:84:16:f1:bc:7a:54:90:0c:40:d5:41:
         9b:cf:db:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq3j4umdG6s9sEbViqJMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwNzI4MTcwMDE0WhcNMjYwNzI5MTcwMDE0WjAzMTEwLwYDVQQD
Eyg3NmExN2Q1N2I3NmExYjNlNGIzNTNmOWJiZDIzOTNlOThjYjUwM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5BpWpkfytdVLTbNUe/eb8++3ua1
1IdL/hb3/fzHcMIB1X1LwCxedkDv48l73BAXqKtIAKIxk5H4VXStIW/H2AofjQJK
kaR3U9iDtE7Nljn2GXMU2A6hFqNAWElb/JcYTonIdYSHSQcVXY6CY61CmreSo1/Q
kkG67V2QKAicXWXnoCYN32nevKHiCI1/ww2czW1aMFO/gfAl+GiFCcCEiHxLTK5o
1wkB8dFhd8gpXWSIxI8d6L3etx+HvEMXm/s+DTnKdUbPQCfFZQmktSdYFz6XdTdu
SlyLk+TBefwSiBFAg+6ctD9PLLJtcpT+IB9KCImReWFQtU4v0Qr4snhPkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHahfVe3ahs+SzU/m70jk+mMtQP1MB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5U5DrVU
wFAnlXBtiF4lTjCSBni/nyLwcXyggNs7vIXL2WMPfuBoJhvuVt3YyG/oQN+MAbCA
KZ9221Jr8b4EjaioPn61vr7TRUQp8b/02DI6pLDRWa4uiUkfs04IyObassVXtj7n
XJjW+KAllyS700Rw8Uhl7WEIRJo3t+b/A6GZ04lQanjhIk6UEsN6im3oLoMSZX7D
QlnEQqJebQNF2LhO6U0LaveGuWxgKYiGcxkU5m5bIerMzpmpD9Df5Y3DC5FBs2/i
9qjNJiDHM29RIHk1NH+bqZJ+v3110M7JDFMxd5UxMv5sRq+LJZ/R4WEgxoQW8bx6
VJAMQNVBm8/blA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:28 2026 by rpki-client