Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          Sz6qH0Tnk+ZbH+EQyFnohhXMxRtVRbd75yHdHrf6PoE=
Subject key identifier:   B8:10:B3:E2:14:6F:5F:A6:44:A8:EC:83:40:98:A0:1E:60:1F:BF:5C
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019FAA506C9877CCB141A931FB90156647C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0648
Signing time:             Tue 28 Jul 2026 20:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:25 +0000
Files and hashes:         1: 1XOVFtdJcgt7Jzeb_Cx2E1cQki0.roa (hash: V3/JIwKQ8T7G7dLTEO2APuASZDQkBNIcmYWWkSqMFa0=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 3NYKAVMXxVgf7TsAiwdPWywZQKs.roa (hash: g8rK7SnoDVJphE9pbIeGL2s6IpfHenSTeQYH+yMvx+E=)
                          6: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          7: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          8: 7pth_lTZD9gsICPhQEW97xKIM6k.roa (hash: se10HW0vAKpZ/FyK6hpEkEmCRTmIFPVzCSzDZc5rBOU=)
                          9: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          10: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          11: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          12: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          13: DYTxErCnEMTTEM07deYL9OTZj2s.roa (hash: 3nh1MYG2w1UUT4lKUmSiAJfITKZmSXnTTY1vGqzp+TE=)
                          14: F7WYsIxqqzriF50vyErOo4yduxs.roa (hash: UzLANsa4cvItOv2fxNqau8ra2px2e8RIpMmdipONeLg=)
                          15: GCyqvuoIZajxaCMA5AGnKxXrf44.roa (hash: 7+IYj0mwkXD09LidnWg7fLKgRz56zO9scadgs8zfXsQ=)
                          16: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          17: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: G21+CCHTQzuX0e8hY+okwvijeq8atw5053zjNEHDArM=)
                          18: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          19: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          20: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          21: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          22: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          23: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          24: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          25: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          26: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          27: SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa (hash: 7HIKEr6ciachQ4AIa6q8fnCWBYbi7WLje3/zszJmxks=)
                          28: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          29: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          30: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          31: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          32: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          33: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          34: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          35: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          36: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          37: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          38: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          39: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          40: kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa (hash: AOdYhnaRy3xhsfOQ1QXZVlRft2TeKdQsihBblXVoCrw=)
                          41: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          42: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          43: kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa (hash: wJrT2BB12mn5gXQveAogodqeQtpxZp1yzX5xTILo2ys=)
                          44: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          45: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          46: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          47: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          48: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          49: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:6c:98:77:cc:b1:41:a9:31:fb:90:15:66:47:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jul 28 20:00:25 2026 GMT
            Not After : Jul 29 20:00:25 2026 GMT
        Subject: CN=b810b3e2146f5fa644a8ec834098a01e601fbf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:80:b1:43:8d:99:d1:db:0f:21:f9:e0:11:
                    27:02:1f:cb:a7:2b:a7:f8:7a:40:38:ae:e3:0b:2c:
                    20:a8:45:bf:96:48:ca:40:ae:38:b2:29:1a:4c:88:
                    d1:48:84:2f:b0:5b:af:e4:f9:fb:62:5e:0c:b0:b1:
                    04:43:41:bd:af:2a:b4:85:bf:12:1f:35:be:f7:23:
                    9a:ac:30:ef:54:4b:01:e0:ac:b6:25:9d:82:fa:ef:
                    43:1c:dd:b3:6b:7a:21:70:a3:ac:4e:6b:d8:a4:33:
                    42:8a:7f:19:fb:db:f4:46:fe:89:9d:72:b0:27:b1:
                    28:2b:a6:9d:1c:31:c3:18:23:49:b6:af:92:fd:ae:
                    c8:74:02:9a:16:4f:3b:2f:3a:5e:ad:d2:6e:ed:e0:
                    1b:1f:7d:f5:6a:b5:65:79:32:8f:28:ca:2d:24:b1:
                    6f:4d:77:d3:91:06:bc:49:3c:b4:b5:ea:fd:81:44:
                    7b:42:7f:3e:b3:01:ac:40:28:c9:61:bc:b5:2a:9e:
                    b7:87:2a:e9:13:70:02:e1:79:2b:97:a6:3f:27:4b:
                    08:bd:e3:66:8b:2d:f2:02:ea:8a:a7:54:ff:d8:90:
                    2e:87:95:c9:20:f7:24:11:b4:32:a8:fe:b4:9f:7f:
                    a5:30:7c:9f:7f:ad:50:6c:e0:10:5b:35:0b:61:24:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:10:B3:E2:14:6F:5F:A6:44:A8:EC:83:40:98:A0:1E:60:1F:BF:5C
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:92:0f:d9:38:5b:e5:b9:ef:55:c3:7a:b9:28:7d:88:e0:
         b6:c2:87:83:8e:1b:55:61:4e:8d:77:1d:a8:c9:02:ca:d1:7d:
         39:96:74:09:64:36:04:fe:31:e8:0e:f1:7b:e7:3d:dd:a1:49:
         09:f3:b6:97:c1:1e:d1:88:65:78:2e:8f:8c:6c:8e:99:d5:5b:
         bd:14:0f:12:f6:14:e0:a0:ce:20:10:58:17:ce:88:32:e5:2a:
         00:19:b4:cb:19:38:84:22:3e:d2:9c:2e:6b:59:f8:79:fc:e4:
         e4:34:78:39:c4:b4:8e:a2:4f:91:52:0f:67:0d:df:c0:22:a3:
         6f:03:f9:88:88:ce:c3:f1:e4:d5:f3:07:9e:d8:67:d4:52:6c:
         97:64:c8:37:7d:dd:ba:06:9d:57:99:51:12:b6:40:a5:43:33:
         ff:8d:d6:6a:1c:ab:52:30:ee:fe:7a:04:9c:72:cc:ea:63:ce:
         d3:c7:b7:c5:57:d9:d1:57:82:f3:64:ab:bc:50:d8:b3:53:5b:
         7d:19:4f:d6:7f:c9:dc:5e:49:36:51:71:4e:8e:17:63:4d:e7:
         2c:91:bc:90:9f:2d:81:6f:03:c2:0b:b4:9f:3e:bc:41:83:7b:
         50:85:45:64:86:9b:13:cc:bc:c3:9a:e9:33:25:b4:45:14:01:
         95:05:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:14 2026 by rpki-client