Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File:                     rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier:          zAsA07gU5R9nUgPF7HEiEOSl80al5eyfiAzmM+EQQxE=
Subject key identifier:   16:12:EA:0C:87:8C:47:DC:B8:26:2F:BE:D5:E5:0D:3E:48:C8:EF:5C
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       019FAC7627D13B1C1251FAAA9C9E575FF969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number:          19E8
Signing time:             Wed 29 Jul 2026 06:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:52 +0000
Files and hashes:         1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=)
                          2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=)
                          3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=)
                          4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=)
                          5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=)
                          6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=)
                          7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=)
                          8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=)
                          9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=)
                          10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=)
                          11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=)
                          12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=)
                          13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=)
                          14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=)
                          15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: G7YC0bq4IsVbthuG3mWO3hDyo74ABqQHHWZIMhynC38=)
                          16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=)
                          17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=)
                          18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:27:d1:3b:1c:12:51:fa:aa:9c:9e:57:5f:f9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Jul 29 06:00:52 2026 GMT
            Not After : Jul 30 06:00:52 2026 GMT
        Subject: CN=1612ea0c878c47dcb8262fbed5e50d3e48c8ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:a7:af:a1:47:eb:b1:41:29:e9:59:c3:ec:
                    7b:11:73:e9:3b:58:38:4d:2e:71:af:c2:09:64:31:
                    b1:be:ee:b0:08:b7:4a:30:87:b6:ce:99:77:47:b8:
                    83:a9:e6:23:56:f7:fb:34:ef:82:41:02:9e:89:58:
                    62:83:09:6c:09:98:12:7b:21:3a:06:07:e2:99:d7:
                    9a:62:88:17:c7:6b:48:98:bf:d4:2a:ec:1c:5e:ff:
                    e7:8f:f6:de:a6:91:9e:f1:4b:82:52:77:83:d1:53:
                    04:1d:38:63:7f:e2:c6:36:db:55:0c:7d:5a:8d:e7:
                    14:3b:14:69:03:94:dd:15:94:d8:7b:74:bf:6e:80:
                    54:b2:40:e4:53:7a:de:d5:8e:54:ba:33:87:78:b8:
                    29:9f:48:ed:5c:b7:80:39:7d:41:a7:62:0e:5a:7b:
                    de:0f:72:32:21:1e:8b:69:19:a8:22:93:b7:3f:90:
                    20:ad:9f:87:ad:0f:93:6b:19:6d:9d:7e:3c:10:77:
                    fa:ce:98:8c:7c:cd:4d:db:d2:2b:9f:32:d0:1f:02:
                    e3:a5:c0:fa:6e:b9:aa:9a:0b:ee:c2:a6:e1:85:5a:
                    77:0c:d5:67:94:1c:37:9b:b5:ba:9a:a0:20:84:a8:
                    2d:b0:5e:0e:fb:0e:72:d6:f5:18:ec:13:bf:ca:d1:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:EA:0C:87:8C:47:DC:B8:26:2F:BE:D5:E5:0D:3E:48:C8:EF:5C
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:f5:f4:ad:ba:ae:b1:c0:df:05:28:b8:9a:06:53:6c:f9:
         0d:e5:bd:40:06:39:d8:61:a6:1e:36:18:05:e5:46:cb:61:26:
         5b:f8:33:b7:4d:90:3c:c3:da:c6:91:a6:d7:ab:8d:bd:ee:e5:
         d7:3c:4d:5a:56:7b:80:bb:b7:05:24:1f:21:91:6c:8c:22:71:
         03:3f:da:92:55:d3:5c:05:97:94:82:d7:66:c3:37:11:12:29:
         54:2f:4d:c9:01:34:10:e4:4d:b5:c9:cc:8f:f0:38:01:4f:7c:
         61:a0:06:cf:d3:1b:20:f0:b3:87:a3:6a:20:d8:17:38:7f:51:
         22:bd:cd:2f:1c:66:bd:db:db:88:f6:87:9c:94:f3:13:50:6b:
         1b:a2:a2:98:cb:6b:ac:c2:d0:33:ec:ce:62:fc:6c:ea:55:89:
         09:50:d6:ff:2d:4d:49:88:ab:37:ed:fc:9a:92:ef:18:50:41:
         4f:00:d7:84:36:e9:88:2e:60:2e:09:67:9f:7e:dc:68:a9:80:
         2f:a5:0a:95:2f:46:e8:51:12:82:83:18:14:33:eb:ee:87:cf:
         3c:13:8e:c8:9d:48:90:eb:ca:fe:03:d4:7d:bc:c3:12:31:c2:
         97:4c:f9:b1:bc:9f:93:dd:7d:73:90:a0:e0:70:6c:64:db:cf:
         19:ff:1c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdifROxwSUfqqnJ5XX/lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjYwNzI5MDYwMDUyWhcNMjYwNzMwMDYwMDUyWjAzMTEwLwYDVQQD
EygxNjEyZWEwYzg3OGM0N2RjYjgyNjJmYmVkNWU1MGQzZTQ4YzhlZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjenr6FH67FBKelZw+x7EXPpO1g4
TS5xr8IJZDGxvu6wCLdKMIe2zpl3R7iDqeYjVvf7NO+CQQKeiVhigwlsCZgSeyE6
BgfimdeaYogXx2tImL/UKuwcXv/nj/beppGe8UuCUneD0VMEHThjf+LGNttVDH1a
jecUOxRpA5TdFZTYe3S/boBUskDkU3re1Y5UujOHeLgpn0jtXLeAOX1Bp2IOWnve
D3IyIR6LaRmoIpO3P5AgrZ+HrQ+TaxltnX48EHf6zpiMfM1N29IrnzLQHwLjpcD6
brmqmgvuwqbhhVp3DNVnlBw3m7W6mqAghKgtsF4O+w5y1vUY7BO/ytGuGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYS6gyHjEfcuCYvvtXlDT5IyO9cMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKz19K26
rrHA3wUouJoGU2z5DeW9QAY52GGmHjYYBeVGy2EmW/gzt02QPMPaxpGm16uNve7l
1zxNWlZ7gLu3BSQfIZFsjCJxAz/aklXTXAWXlILXZsM3ERIpVC9NyQE0EORNtcnM
j/A4AU98YaAGz9MbIPCzh6NqINgXOH9RIr3NLxxmvdvbiPaHnJTzE1BrG6KimMtr
rMLQM+zOYvxs6lWJCVDW/y1NSYirN+38mpLvGFBBTwDXhDbpiC5gLglnn37caKmA
L6UKlS9G6FESgoMYFDPr7ofPPBOOyJ1IkOvK/gPUfbzDEjHCl0z5sbyfk919c5Cg
4HBsZNvPGf8cww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:40 2026 by rpki-client