Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          KX9MpmDeJwEZTXbHohuW/RPUPvsY6kNe3odnsRo9d7w=
Subject key identifier:   30:48:AA:6E:1E:4A:E8:3F:2F:B5:47:2F:9C:15:0E:E7:00:90:E3:DF
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019F8568BC580D930301FCB0AA0102C2363F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          1A7F
Signing time:             Tue 21 Jul 2026 16:01:01 +0000
Manifest this update:     Tue 21 Jul 2026 16:01:01 +0000
Manifest next update:     Wed 22 Jul 2026 16:01:01 +0000
Files and hashes:         1: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (hash: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg=)
                          2: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (hash: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg=)
                          3: 1WLLhRLZsdKFXGW1MXvXPYX0z2M.roa (hash: O+Fzb9zKXg796VBQr6CJ3OQPpObddVnqLp7XDsmDRTA=)
                          4: 2KUTocOpAT7sBhebTwh3G4FESlk.roa (hash: qCXP7Gzh5WeYsyND7xGMNVQazeCbTW+xxU01dOva01I=)
                          5: 4l9EsCgzSHlVTtpywsbUUFtExTk.roa (hash: YL2VEKNHNIjwIMrHgQShXB+ezdUEHsuR+LX2D+OX3sQ=)
                          6: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (hash: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI=)
                          7: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (hash: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w=)
                          8: CnjhaBCYf7ZnMG3Es2D005bWWPI.roa (hash: vnu28EkHQSIG2pnIVVAMbjcgAHNSaPZ05++SiDjH6LA=)
                          9: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (hash: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc=)
                          10: EKuLwMJDazSSbggWLeeqY64f0qk.roa (hash: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE=)
                          11: F9UQlAebc29GSseukVGk2Ly4-ig.roa (hash: SXDWRzwFnYBqyLhZKjGPwwWVf1aIUUbUr34+3OpNV9g=)
                          12: Fm258hcKsjpIMI7amylXAkeBtU4.roa (hash: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY=)
                          13: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (hash: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM=)
                          14: Ip7B4awbZgfNeXA2x0V50-o-c9A.roa (hash: fF+qKa96LMcpcHr7gUx7PPq8EJWzQoCtAK5cioR9tRU=)
                          15: KmL9hUmZWVkaAtdmjfXfWJiHh-s.roa (hash: YDzujFQaz+G+jCdu6mA5zUHDiIZN9X1GHpvWadjwBgQ=)
                          16: L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (hash: v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=)
                          17: L1z4gAbmtBr6IFjxlRf2f6QkURo.roa (hash: wfR+HjJDOFvJipZLYW4jdBeVJSrQq986lvQU2WiKhq8=)
                          18: MS8Bv_7T3F3D_VAzb7WSaLcYpfc.roa (hash: lk0a4eNfHng0En9tKf/4Xz/4DH1EMESKWrpSRzXWN9g=)
                          19: N7A86p6PRImcj39W7i3dmRULO6M.roa (hash: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas=)
                          20: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (hash: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0=)
                          21: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (hash: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw=)
                          22: PuWhap-0muVvQV-0BrycJNZtn1s.roa (hash: cwkFpse9f5j5nHN/rRZOX3pPvRyqmiPVwVbzwBgvaHU=)
                          23: SrXqNvmuvQJBIjB0Di8xUFoZez0.roa (hash: SRA4RELyTLPR3imea02LrnsTj3Gu/dAsOF+7lBcjxe8=)
                          24: WSV7wDu_oOEWknqxauWPGgULCUo.roa (hash: cpJEa6OysfsH+SZFVKbmC8vCj4aMLj4mTs3CNrgU8T4=)
                          25: WgE1MGBGPR7k5rh3nE3hf7taSUw.roa (hash: tpDyS9JuhgZT9rKwZWlbjacZtc36iJXeis37wFMFBNY=)
                          26: XgyNYXwLhPSXrny8NDix9oprHDI.roa (hash: PWGs9rS5sBhLApUjUmFl5ISIFI1Oly8X3m/3XXPeS0g=)
                          27: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (hash: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o=)
                          28: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: YF7zmclSOvMc5PfexYThzn6j987SkKguU2ArtmCqKMc=)
                          29: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (hash: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs=)
                          30: eVUCZ2gkOg648kh9IahZkIBOJA8.roa (hash: vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=)
                          31: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (hash: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA=)
                          32: kRm---guYcInSUKq-QookHvNTuM.roa (hash: iGZFzrsQlmqEd4hUxjMucE/uvpD/1KA4uLxkKOBPLhA=)
                          33: kmtJGb31zTt_pJ6GCyTQ9LzmkzE.roa (hash: Q5L6eWKaIz5gBzH7B4mLua9KGWq+PLDJnwr9Kj6N+qo=)
                          34: msSEI6HlL5d64JwmuUz8Sr8pWG0.roa (hash: Te8OnG1Rs5zfBbzAKPB1q6JjnhlnmawlvBxGi0xWVuw=)
                          35: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (hash: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY=)
                          36: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (hash: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8=)
                          37: pNL3oico6rSRy7HI-qZpBv7USh8.roa (hash: nkMrE3yZ9+wbGR6nyZRKmZOaTcWk2iFc5i+D0HRUuvk=)
                          38: qWtbbMCk5LGMcw424X-_LWASovo.roa (hash: 3y9aT8FyDHUytNmZPUNaxxu5OwhxcFGGDKVIc9JWoyU=)
                          39: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (hash: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg=)
                          40: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (hash: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8=)
                          41: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (hash: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:bc:58:0d:93:03:01:fc:b0:aa:01:02:c2:36:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jul 21 16:01:01 2026 GMT
            Not After : Jul 22 16:01:01 2026 GMT
        Subject: CN=3048aa6e1e4ae83f2fb5472f9c150ee70090e3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:b9:26:f0:c2:d6:46:92:cd:22:c9:48:62:
                    22:a5:93:19:6e:53:78:26:3d:07:20:89:4e:62:d5:
                    e3:c6:95:ae:3d:91:48:cb:71:a3:66:83:e5:97:03:
                    06:71:a7:74:4e:a3:d8:c1:64:22:a0:47:15:cc:e9:
                    a0:ce:00:92:1f:f2:56:fb:d9:ab:2c:90:3f:36:a8:
                    6e:de:e8:9a:8e:c7:36:2c:dd:50:74:50:78:1e:7c:
                    63:67:ab:9e:33:08:2c:65:91:c3:04:12:9b:b1:18:
                    34:bb:9e:55:64:21:38:b3:2c:1e:71:33:07:1a:18:
                    90:ac:bc:99:55:67:69:97:f5:dc:19:0f:bc:d9:c3:
                    4c:4a:45:82:39:04:fa:7e:b4:16:b7:73:ed:8a:3a:
                    38:14:88:0b:41:be:2e:1b:bc:78:65:15:07:13:9e:
                    ab:75:eb:39:e9:e7:87:cf:d9:17:22:34:21:a2:ca:
                    7f:b5:aa:68:ed:c5:08:4d:68:24:9e:2b:53:71:7a:
                    34:ce:95:a9:79:c1:c2:10:fd:80:f0:0e:ed:14:71:
                    49:a6:28:ce:21:79:46:c1:a2:2d:1a:9a:33:0c:9d:
                    ca:b7:a1:27:e4:6a:d8:1e:ed:b1:49:e7:6a:d3:ab:
                    f8:d4:16:e3:c5:89:8c:22:ee:8d:9d:fe:6b:ce:3b:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:AA:6E:1E:4A:E8:3F:2F:B5:47:2F:9C:15:0E:E7:00:90:E3:DF
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:76:1e:d7:f7:b0:c0:87:1d:11:3e:9d:27:8b:3b:28:84:
         1d:d6:05:e3:54:44:de:9d:60:99:18:3a:43:e8:89:71:17:0d:
         c3:84:8c:46:d7:57:1d:9e:26:5a:34:2b:82:e2:d2:65:66:42:
         61:a4:41:f2:5a:28:02:8d:a5:ee:c6:a2:e4:68:fc:71:43:1c:
         e5:aa:8b:80:33:4e:f8:56:d9:38:7d:dc:90:9f:d5:4e:32:25:
         62:20:79:ba:5d:23:c2:54:28:ea:88:6d:98:ff:ac:65:03:72:
         52:30:ed:29:bf:b4:1a:34:e3:7e:68:0d:9d:7d:c1:e2:96:dc:
         0d:e0:c0:97:7e:15:f5:ca:c9:9a:a1:20:ba:70:8c:4f:72:a0:
         45:5c:ba:cf:65:56:79:5c:87:96:bb:b2:8e:94:c1:08:79:42:
         e1:2e:0c:5b:8c:d9:21:e0:52:a7:8a:6a:28:13:7d:1d:cf:d9:
         d3:af:e3:70:05:7e:c3:bf:2b:79:26:cc:14:ca:dc:7c:d2:7e:
         57:4d:41:64:71:4d:d4:e7:58:ae:0e:e3:ba:a9:d8:d6:2d:fc:
         39:fe:c2:b0:32:e2:e5:ee:94:82:47:67:eb:76:f8:cb:f8:dd:
         7c:95:7d:56:16:8f:8c:1f:74:d6:3c:2c:9c:fd:64:e0:d9:0b:
         4b:9b:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:25 2026 by rpki-client