Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          NG90hopepQh9SmtWDmLaEsc3iHXtBvNzMPQpj/pNfC4=
Subject key identifier:   6A:E8:91:DF:30:66:F3:31:06:66:10:9F:25:C7:7F:31:49:B2:E2:B7
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019FAB2C2DA830ACAB9B5F1AA4F1047F0ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          042E
Signing time:             Wed 29 Jul 2026 00:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:26 +0000
Files and hashes:         1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          4: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          5: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          6: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          7: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
                          8: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          9: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          10: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
                          11: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
                          12: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          13: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=)
                          14: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: GE8e0t1miL3ptLbTuai1/1Qq5YKWXRFGS/nE/Sxvdh0=)
                          15: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          16: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
                          17: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
                          18: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:2d:a8:30:ac:ab:9b:5f:1a:a4:f1:04:7f:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Jul 29 00:00:26 2026 GMT
            Not After : Jul 30 00:00:26 2026 GMT
        Subject: CN=6ae891df3066f3310666109f25c77f3149b2e2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:dd:6c:c4:56:ba:a1:f8:67:44:bc:c0:dd:
                    c4:53:4b:fc:ea:f8:d9:9b:d2:96:96:83:98:ae:f2:
                    1f:70:09:8b:42:83:9e:6c:0d:70:e2:62:9c:19:55:
                    76:ab:3b:77:2f:22:99:46:ea:ce:79:0f:ae:28:6c:
                    ef:79:ef:ba:81:40:b7:3e:1a:d1:ac:98:24:bd:12:
                    80:9d:34:30:de:0e:62:94:9e:e2:e4:87:1a:85:e3:
                    d5:08:13:ab:f0:a1:59:48:9a:37:52:62:a6:73:f0:
                    f9:be:50:f4:6b:dd:11:3f:d5:89:40:45:8b:84:68:
                    7c:78:03:b0:50:29:27:8e:4c:d6:15:c5:0d:e4:5f:
                    2d:48:a1:89:79:2b:92:af:81:da:2a:1c:cf:8a:fd:
                    0a:57:54:e2:93:75:19:03:1e:c2:15:0e:d2:4f:27:
                    ac:74:95:b1:8f:e2:a9:09:1c:a2:4f:41:5d:6d:c5:
                    6d:3b:43:d5:0a:69:c9:35:5e:73:8c:eb:8e:30:b3:
                    62:20:df:76:92:59:c3:35:f8:79:f4:c0:8b:a1:3b:
                    13:03:84:4f:6f:73:61:b5:ff:a7:2b:da:48:ca:5b:
                    00:66:71:b8:23:ce:52:08:42:e9:72:c6:29:12:ee:
                    6a:89:83:48:78:7b:c9:a6:1e:b4:c5:7a:89:36:1c:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:91:DF:30:66:F3:31:06:66:10:9F:25:C7:7F:31:49:B2:E2:B7
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:b4:0f:c9:cf:3e:5e:32:6e:85:e7:bc:31:db:9f:00:42:
         52:33:43:9c:ac:ed:d7:c8:a9:71:5f:9b:43:ea:7e:74:69:c2:
         15:1c:d7:a4:a1:25:a7:fd:c2:c1:06:e4:79:3d:35:2b:a2:b2:
         b5:ad:cc:18:15:27:55:d1:b5:0e:4c:ba:e4:36:f8:26:5f:4c:
         04:25:cb:a6:bb:5a:5a:e2:06:29:26:0f:51:58:3e:76:a1:ac:
         5c:aa:7b:5d:8d:9e:3c:23:6d:02:f7:57:df:8e:19:37:fa:a1:
         30:91:56:a4:d0:ee:f7:5d:16:ac:21:40:00:e4:1b:e7:41:84:
         0f:dc:99:17:9b:0a:c6:6b:5d:33:4f:7a:8e:5d:86:80:0c:31:
         fe:84:b4:a4:8d:d2:4e:91:14:b9:ee:ac:a1:1e:d7:a1:b3:50:
         80:2f:4c:90:73:cc:6d:7e:e5:9c:7c:29:70:9a:ec:36:ef:65:
         94:53:0d:a8:5b:2e:35:8e:f3:85:f9:13:39:67:55:2f:7b:dd:
         05:ad:d2:0d:4f:0f:61:5d:ef:69:69:1a:48:4b:3e:86:b4:dc:
         a9:6a:a9:35:a0:e5:4a:15:a6:50:3e:6e:8b:2b:17:2b:0d:33:
         3d:8b:a9:17:45:ed:b2:de:e8:88:03:ad:90:9e:bf:30:c2:97:
         b9:da:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:57 2026 by rpki-client