Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          mifZBdogj/3u6veN7lui7am+IonN2HPKE+S32tSlDpc=
Subject key identifier:   E5:3D:10:8B:14:58:5D:6B:42:49:3B:5F:35:3F:45:CC:37:07:F5:C5
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019FA862756EDFE643C5729885949C387D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          1AAF
Signing time:             Tue 28 Jul 2026 11:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:52 +0000
Files and hashes:         1: 01fcbO9Bfxx1VFKSbJlE6EkZBDQ.roa (hash: EvZLdX9Binx5+1EbIcTN/VUYvU4nOSU+e5FUofioFRw=)
                          2: 0m4ltZUMLMH5EW1WAYFmLMh9R24.roa (hash: oN/H4oIS0TOP5inExJtWMH4xNu20yAkjIU6XDFSb2wo=)
                          3: 13qwekY4GjAcz5yVaJHHXBWQpgs.roa (hash: fmublu91Ntmu81PKh1AFUCuBP9ZsM4t5yIMkiVJ3Bds=)
                          4: 2skprZUpM-WAyMVPiUblz0n6p88.roa (hash: Bqhd6ONeiNR2qB7sHqrQyAIEGV0c1LqnuWRoJAQhj1Y=)
                          5: 44hWThy0SQaOd4Kq-LaiKY0ucis.roa (hash: EnW4ozIjPnoxuPL8GsuFSrxEODlmtr8p/kgDAIn9JZY=)
                          6: 4rYk_4AAnRFDyT9t6UpddF8HpbI.roa (hash: oWq4t3qZMNjnxZMnR0CDSI4+6ASnvrTUi22Ho4ja92g=)
                          7: 5Alcs3xLFbCLu8QOWuRxWO1jhGo.roa (hash: F5Lji6NO7cOp4l2GriBUTEATlk37S8t4egro8JnMOVI=)
                          8: 5K1LIndqaP3Uk4dmkQpiRieWOXY.roa (hash: a56wo9Ud2WTU9l+kft8E82jH0fMq1YT8fPyyZek5Trc=)
                          9: 6s4kPzAq8cKYr7AGzVAlO81o_b8.roa (hash: mBC7QSBiyyjDGqiKtPNcf8ZZJZOmeZIXAoHi/i7/GoY=)
                          10: 8u-VD7FljxZvcLpnyXStSLCmbYQ.roa (hash: IHUQhM8LauFximAQjPWFusy8Syac3KxUX2JvRXQgSUY=)
                          11: 9V5qzCbNdujz5ayKh2LRHs1tRY0.roa (hash: npGS+vUjWZ0hARPhlsSe8NvJpnyP4zz3tILwZgRxJ20=)
                          12: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: AIwSQe6Evil4f6G9tLJxA7Z0N6kgT1GHe5PV/6yMZu0=)
                          13: CqbKq0tlZFvJKdZBJUrUaltiSaE.roa (hash: O/JKVqq6uAbS2s7yKFPv2yPkdIAZZBe4tloDtML8Bg0=)
                          14: DY5wKgT1aXkkcaivqVTUyLfJ8eE.roa (hash: s/XqSxs2Vj4tQEVnGu9l3PynIaNTPng+JgcbJn6lBz0=)
                          15: EA1kZUuCbIYx39rp7mxpFmQOmAY.roa (hash: Sd328B/ygLhD6KVHyMuZZnuhtap4Yhzr8PbZgu4JU4Q=)
                          16: EPmcA7-Kgg2xAu-Ah92UUeaVH6o.roa (hash: 8eokZGGS1NxJl4Ok1FtzJnZyFDunzJpv1gdPoPQOIRk=)
                          17: ETH45MfNpUaYU-eoe00DZk4rfio.roa (hash: ldAhrblzPHLNXjYprr84dx9daiTGIHf6/Pj4Sh5N8Tw=)
                          18: IBKxpAx_rOA4t3NpMOaaZmll4o0.roa (hash: ES8RVkhmypP6REC97QcFPigX79fugMh/oabdVtlVO5c=)
                          19: IObvRVgbo-BUxxYo4SEbVR1zvFM.roa (hash: 71Jed/rmV3TiDiXsOYPVGwM9ipx3YesHNMZ3EWwGuDk=)
                          20: JB7ZiriaFnMWoodPhgVw_fe6IfY.roa (hash: FMxUNsqZOu+8pEVx5FLpUncKW1LL8iubxwZyCFI5PuY=)
                          21: JrGtPpEAS_FAHD_pHwhMQ0bHc14.roa (hash: WBhzU0hCJwYZRznMemu13YsvTlq1anmzIonKq4Bq4Ow=)
                          22: MbvNjpjECyRcmKYQMhKvn2-cFXk.roa (hash: WtWJb8LrLp0RPiMsC1JWrlrKfuxYzc/X2LkXWsYnibQ=)
                          23: OXaM25AilOPaZ6FylobGv1RbWZY.roa (hash: GUzvFqzyqxeo4s3HjNKVJvkfcUgeMz8IFUPF2eR0Mxk=)
                          24: Q6_zaBmqZBskegMQhwlY3OXuSCU.roa (hash: NVQgTYuSY5K5LPfNquH9nTGQ+GPkuGtDzXs/gNoG3pM=)
                          25: QBFKLgi11NKJ5zU_rVsGKBgaPqU.roa (hash: s3k95x1VzUbbf2g6b3nFv6k0pr5SrChNuBIOJz+n4Fk=)
                          26: RXbfjGeuxZE0ZGrKziF-xPQf6qk.roa (hash: w7zXHdiOZPj9IaIJHnXvcvxBLRBUl7IacHCQVUlk/uY=)
                          27: SBkwHvt900-57kJpZ9RaSSUYx-4.roa (hash: 0SaNKcs6gs+27OHlgQunAnN46wU1fNd07yilD0h7eqI=)
                          28: Sm-bS9efIe3MgDk7DzPppKQwxP4.roa (hash: N08ndlnc7B6uajNmQYfpLafjJXxMfNpWen36PUlgB+A=)
                          29: TFZ1sEt0buQVZv0xw8uqfGHnQ6w.roa (hash: BOzZntSLvTeJh52IqUyyveCwSpOQsQebizbDk+vxg2E=)
                          30: TtaP6JfXDKbAy87VtT56iEAP4y0.roa (hash: WTyZjg5Ogn+1j9tDQoiFgmcnNDHHyAoH2gmIFizZkZg=)
                          31: UR4k7AaYQrNDm6u1dEblSYCG8-w.roa (hash: RX+1l+5/TUihX4bJO7UGPs7oEcDQuR9sGFW16/cWKUg=)
                          32: V7gikikDOwiL4xkF83MLtxn5IgY.roa (hash: 5JhEa4SyaX4DYyytu+IlxyVe2wMpCm7OZq1OaEKjsuA=)
                          33: _--bDRLpVJn5ESSyxJSpW0DOSUc.roa (hash: jjKzpCx4NtQk69fcR1J9Uzz4/4fgj31euBnzQ36sziM=)
                          34: _L59jecLjJ0uTotDkkIGCjIWXfU.roa (hash: cnj6QRI6ukwyxIkdQke5AkCgqz3p5nGLK26hHcls8m8=)
                          35: d3LLrnyzc3kTdxqhtsRs6n4x2Hw.roa (hash: o/Zw8TJR2zh3mjJErGKkYa89KXSO9Ary8cFUvzEN6JY=)
                          36: eKkqolXY2pyVZao7_XM83pmxfcI.roa (hash: W+Fqae1CC23FyZSUOU8LFw+yTFE21xDh60IW8rU7v6Q=)
                          37: eZ2QGHZwJr3NFE3DZF2XJpG7H4s.roa (hash: pioyKcdFHW0n1N9g3mX73oECby8JTLpEAVyY1WSAhRI=)
                          38: hMm1g6WmEatVanwLdPNAJjOfuFw.roa (hash: C+YMY5cANBjGv2vp0AL0f23JPUShhtTWhv6wBgRBui4=)
                          39: ijK8JvtMw7E_jx9Rd5D7P3_LQdw.roa (hash: 0mOLIetdSD7zyuLDan0HXxc4RpqzUwC8wuNmFvXMXuQ=)
                          40: k7Xb6pr3D4kMAA9I4N12JiGOGyc.roa (hash: /ImV+5RSKREhzZ0Wqgrx7D4RzBF0tag9U0OGST3aWOw=)
                          41: kpUSwA2owhRDQsiRkLkFCKzeDjY.roa (hash: twtnbiLdWRxoWIEkMo+bxkXNXgyJd8H1k69QIGS4cRk=)
                          42: lshjjAyxXNAYh4GQHIm34fsUvmc.roa (hash: cpWhiNvk1c9R04vvWyqBiqaxn02bs3t8GlzOqUFKw/Q=)
                          43: mHvontDFZrGJDv_gBEzMo3dLoD0.roa (hash: LKgxkeejG7TqlgAKWNSoKlNdSblMi4mLolyl3RXUvbM=)
                          44: mOejQXbwbPONRiL0KaKeS2M0D7Y.roa (hash: htFLosg3N7kJEBAHEjH7cOuJCW5LFWoKh1Se0YoxapE=)
                          45: nWo_YS4-rTEZWs2wQQ9JJ5C-KZc.roa (hash: /nP2//4kV2UZqdWHCWsR17cC6L3a1eWhQaGoT1PDAOM=)
                          46: nh-UyQ52cgwdzjf3IsqR5BWPNPU.roa (hash: H5AtLCqkIVbc/SJiW3fiQGirxM23oteJd1sFGRuHn5A=)
                          47: ni4S16S6UKOvrAf-kmxc3wD6hZM.roa (hash: d/44eKBhMgueE1bs1C0eNfSWvg/JgZGOkLyDO8UOnJA=)
                          48: oN6ul4rjkfcT6YeJXHuO3KN82jA.roa (hash: 8gk+bQkajGDu3gYXWrCLkcbfiRPjQd71BmhjPm7WOZE=)
                          49: pvb7fSB5rFxSWvQ-tdwQgxMHFpE.roa (hash: Sj510epVFKu+yOPX1Ecp1iRR/3MqL1flwgHipTJGf0o=)
                          50: qKwJ65bEBbzVkEbbmo3MSUV6CTI.roa (hash: OPVBEl0Rlw+nDfgKAGe+WyCqW4KurkQqR50ZHboGVgs=)
                          51: r8qCCvIMlIJga1tW0pg5E_VlYsc.roa (hash: 8/d868Y9tk1L4gtuTKfO2zc6sIo/t0ly5WZlYv+S/m8=)
                          52: s5yjUfaGSDtwnS0HGkvdpxAQlFY.roa (hash: 7UcsejFkmQZ6Y2bqiRrjB8dpik6mgi9yyW4Z199vG8E=)
                          53: sOku3N3KZszAOFumnTXtTbq-B-c.roa (hash: yLoxiYlnu++lQGhDSvrC57wgm5LZG/94BrnNBBtWbWM=)
                          54: uiCqR1DJaWijzdciFRFsaC3-m08.roa (hash: K/t9JyPo0H4cmtBoZ59wvhq6dFsSYu4p57Ko9X9g4Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:75:6e:df:e6:43:c5:72:98:85:94:9c:38:7d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jul 28 11:00:52 2026 GMT
            Not After : Jul 29 11:00:52 2026 GMT
        Subject: CN=e53d108b14585d6b42493b5f353f45cc3707f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:a0:4c:ee:bd:15:20:66:11:cb:b4:08:bc:
                    d1:9e:4c:43:7f:fd:e6:68:ee:ad:2a:e0:00:6f:14:
                    9a:7a:7e:42:22:49:b4:5c:37:05:e1:ab:34:b2:51:
                    c2:3d:fd:94:fe:8f:3f:a4:4b:13:4d:1b:e7:3e:cd:
                    4f:44:10:25:81:33:06:70:e5:77:32:71:ff:dd:39:
                    78:06:86:ac:46:e1:cb:75:9e:e0:25:4a:c6:aa:5a:
                    e3:db:b4:a7:af:3b:4d:9b:9a:c2:11:06:14:78:74:
                    c8:34:47:f7:bd:fb:0c:e5:dc:8f:22:6e:b2:8b:2f:
                    b2:42:33:78:4c:68:15:d4:f6:48:8a:d8:2e:90:e1:
                    02:4d:53:0b:9f:60:b8:a8:f8:00:16:53:27:7e:52:
                    24:d4:47:b9:ce:14:3d:8b:cf:63:6b:ae:62:2c:f7:
                    a3:af:c0:25:41:22:43:95:5b:90:7f:43:b8:68:30:
                    e6:cf:bd:c4:fc:bd:ce:4d:98:65:f9:15:fb:28:93:
                    bb:c3:07:67:55:5d:36:a1:62:ab:db:5c:b9:4a:bf:
                    29:ec:86:7c:10:d4:71:83:f6:85:a2:7a:28:cd:ad:
                    52:2a:93:58:3d:f4:52:1d:72:cd:ec:70:f5:71:f7:
                    4a:43:1e:58:9d:b7:27:28:8c:da:7c:35:82:ec:bc:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:10:8B:14:58:5D:6B:42:49:3B:5F:35:3F:45:CC:37:07:F5:C5
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f4:de:b8:7f:aa:53:13:92:86:72:9d:a3:c8:5e:c5:e0:f8:
         97:b5:47:7e:09:d5:32:f3:29:1f:63:18:d1:4d:71:60:3c:00:
         f3:71:89:6b:83:3d:61:fc:1a:20:b8:26:74:6d:75:a1:2f:10:
         a2:e0:fa:f8:4c:5e:1f:49:4e:d9:33:9a:88:6b:35:1e:53:fa:
         ce:ee:b7:33:3d:65:9c:f0:0d:97:47:12:d4:3a:45:c2:4e:50:
         8b:98:f4:f9:b4:cf:e8:db:57:82:0e:ed:cb:1a:93:e1:97:07:
         70:a1:59:4c:9d:9b:05:ae:72:11:53:aa:35:33:d5:cd:6a:22:
         a6:8f:ed:36:ae:65:d9:a7:f5:9e:e8:5a:02:ed:48:98:50:b4:
         59:47:b2:d6:2d:7a:fd:bf:27:16:c9:c5:4b:b9:6e:fe:ef:c9:
         13:db:7a:e2:0c:04:4c:a9:fa:38:86:0a:b7:40:e0:d7:88:43:
         46:7e:3a:04:05:44:81:a5:8d:07:29:94:fc:a9:03:c2:ae:0c:
         18:6e:c5:64:2a:61:5a:89:b4:03:14:e2:f5:8f:4f:06:e0:6f:
         d2:37:67:e4:b6:18:95:0d:c4:17:26:0d:eb:68:31:bd:2d:df:
         10:a2:ab:8c:07:27:12:8e:17:48:e9:9d:70:05:02:73:45:9b:
         5a:71:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:11 2026 by rpki-client