Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          Zgu/UWkxsQhx+Q4+wODSz2iNjqSZJNEtwJXyrNdfyRQ=
Subject key identifier:   70:87:FB:AA:7D:17:F3:B9:1F:AA:DF:D7:31:98:17:DA:22:4C:D1:33
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019FA7BD3307AA0F30A8123BD22AD2F1A82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          19E5
Signing time:             Tue 28 Jul 2026 08:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:22 +0000
Files and hashes:         1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
                          2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=)
                          3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
                          4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
                          5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
                          6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=)
                          7: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=)
                          8: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
                          9: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
                          10: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
                          11: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
                          12: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
                          13: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=)
                          14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
                          15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
                          16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=)
                          17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: qKye93LKwWHfWX3NsjmAPUT88t2tAltDg4ekyYgpY78=)
                          18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:33:07:aa:0f:30:a8:12:3b:d2:2a:d2:f1:a8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jul 28 08:00:22 2026 GMT
            Not After : Jul 29 08:00:22 2026 GMT
        Subject: CN=7087fbaa7d17f3b91faadfd7319817da224cd133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:92:52:10:01:99:29:1c:c4:81:b0:06:74:
                    4b:2d:11:1e:d5:7b:95:10:ed:ca:16:1b:23:89:37:
                    bf:d8:55:77:a4:1a:67:b1:8f:c0:20:02:c5:a3:0e:
                    ce:07:f3:fc:f9:e3:bb:ce:1d:e0:d5:3a:9c:11:e2:
                    8e:fc:0a:ee:6f:97:84:71:fe:69:ba:87:65:e5:bf:
                    41:86:67:a4:32:c7:c4:17:e5:df:da:d2:be:28:4b:
                    d1:ed:a4:f4:07:71:c5:30:59:63:4b:cf:a4:34:f5:
                    74:86:c1:9d:12:ce:1e:42:43:dd:48:9e:30:d2:32:
                    2b:4e:4a:a8:98:ea:48:89:cb:cb:2b:a7:05:54:73:
                    ab:93:5a:26:73:9b:43:3e:dc:b8:cd:cd:94:c9:61:
                    1d:7b:7e:92:7e:ff:84:65:d6:83:50:ed:a7:d3:db:
                    a5:13:ed:26:d5:4b:7a:b0:71:27:0d:75:e7:70:7d:
                    1b:96:df:5d:03:07:33:8c:03:73:06:f6:57:6d:3c:
                    10:ed:31:f9:d7:6b:1f:bf:e5:76:97:2b:f0:4f:e8:
                    49:4c:23:04:b3:24:c4:44:76:03:c5:94:06:09:a6:
                    d7:b1:f3:43:af:65:1d:4b:58:6c:71:65:83:ec:c4:
                    55:b4:68:4e:20:b6:5a:19:e0:fe:1a:4f:84:ff:6f:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:87:FB:AA:7D:17:F3:B9:1F:AA:DF:D7:31:98:17:DA:22:4C:D1:33
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:d6:e4:eb:4b:21:54:30:8b:b4:fc:2d:46:01:e6:01:36:
         59:d2:70:99:4b:3b:81:b5:80:9c:d6:63:e9:93:b2:59:c4:9a:
         80:74:5e:9e:bf:89:cb:52:f3:58:e0:4c:2b:fd:a3:14:ee:46:
         50:a6:76:94:14:1b:be:f4:1c:2f:77:53:a7:46:7a:c1:ee:ed:
         c2:2a:8f:45:34:79:c1:98:97:5b:51:a4:a7:f3:2d:4c:f7:02:
         16:39:36:cf:21:45:bd:e8:71:ac:66:bd:81:22:17:ad:91:cb:
         36:69:89:e8:73:83:c6:a0:66:f9:de:f7:ef:6d:39:f5:a5:87:
         dd:ca:5b:0b:3b:fb:06:b3:9f:47:09:8d:29:b7:fb:ff:dd:60:
         45:53:44:58:11:20:b7:a1:bc:9e:1b:87:07:0f:8f:0f:02:da:
         3b:ed:7c:2a:e4:f0:96:a0:0b:cb:6c:4c:30:b3:69:1e:3d:19:
         e0:97:ec:c7:e0:65:d2:e2:f6:1f:1a:64:38:be:03:68:15:62:
         4e:17:82:60:70:73:83:09:3d:e0:b5:5f:db:48:f0:b1:d8:2d:
         34:47:20:ba:e4:ff:a0:8e:bf:c3:54:12:50:56:a0:4a:ef:44:
         70:e5:12:34:0e:e8:07:99:19:a1:87:91:0c:1e:15:c4:59:52:
         47:cd:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:04 2026 by rpki-client