Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          5TySh4YgsD2iwHSGHCyMsu8iFMnxJny4ydNbf/e817I=
Subject key identifier:   36:BA:26:C7:CB:56:50:D2:66:46:C2:20:0D:C9:89:1E:C8:4B:F7:53
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019FF2A17A6CBB8354CFBBD4225F6A61053F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0CF4
Signing time:             Tue 11 Aug 2026 21:01:36 +0000
Manifest this update:     Tue 11 Aug 2026 21:01:36 +0000
Manifest next update:     Wed 12 Aug 2026 21:01:36 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          6: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          7: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          8: INWrdhdC-7Lic4dDfIlU5kvWZV8.roa (hash: L0HLJtLf5AQYkU8AkhpCJLF1Aad/NZSaVA+c4yJl8hY=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: cjASx+8fGu6+O7eKsSvCpsrUcZn2EAt+9lgo/gLXPO4=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f2:a1:7a:6c:bb:83:54:cf:bb:d4:22:5f:6a:61:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Aug 11 21:01:36 2026 GMT
            Not After : Aug 12 21:01:36 2026 GMT
        Subject: CN=36ba26c7cb5650d26646c2200dc9891ec84bf753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:e7:5c:3d:36:19:7c:a4:7b:0a:38:de:78:
                    d4:12:84:e5:3b:c8:d6:60:b4:aa:44:9f:d1:eb:70:
                    32:36:a9:04:3c:09:c3:43:5d:8a:ee:79:5d:98:42:
                    38:73:54:97:2f:a0:e8:b7:fb:5f:fb:7f:9a:93:0a:
                    69:16:0c:32:a0:53:b9:7c:d3:5c:7b:f0:bc:fd:5e:
                    0d:61:81:a8:f2:94:83:64:6c:90:47:58:0d:20:66:
                    b7:2f:ca:c9:3f:29:ea:e0:a1:29:3e:60:05:79:ec:
                    fe:1e:83:49:d9:56:7a:3d:0c:26:77:b5:0a:62:8c:
                    45:0d:d2:07:d8:05:2e:20:34:4c:f1:2f:68:4c:65:
                    44:f2:97:6a:1c:26:00:2b:70:6d:08:88:15:6f:73:
                    8e:08:e9:0d:ae:b6:1c:b5:4c:5a:2d:de:50:3b:03:
                    d9:1c:fc:ac:54:ca:da:64:c6:c4:ca:24:a4:06:2d:
                    8f:9d:ac:06:62:02:28:a6:a4:aa:59:6c:4b:e1:d9:
                    c2:ae:38:22:ae:b8:46:68:ee:b6:2a:c7:64:cd:ed:
                    d3:d7:de:03:ee:4e:42:1c:c4:88:f9:2c:a3:82:74:
                    54:48:05:27:88:b8:f3:38:69:d4:97:2d:0a:c4:79:
                    57:e1:7a:3a:16:c2:4d:bd:f9:9f:7d:79:66:19:39:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:26:C7:CB:56:50:D2:66:46:C2:20:0D:C9:89:1E:C8:4B:F7:53
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:c5:21:9d:f3:b2:27:49:12:1f:30:37:de:b2:d6:71:eb:
         65:9d:7d:22:d7:9b:43:2c:a1:eb:35:79:7f:e8:09:25:3c:fa:
         0e:37:a6:09:32:42:e6:c9:52:00:24:25:7f:5a:a7:84:f8:18:
         bd:a9:e3:08:c8:ca:8c:f7:83:82:ea:81:84:8a:5f:31:8d:e4:
         39:72:8a:28:e4:55:d9:f4:67:87:d4:c1:83:5e:2d:e4:de:60:
         b2:10:5e:4a:4c:18:49:9d:7d:42:48:93:53:ce:80:b1:f1:d8:
         58:44:ed:18:62:82:43:fa:9a:36:3c:0e:63:39:aa:10:21:3d:
         83:d3:55:d0:b5:63:09:28:88:22:be:d0:06:1b:c9:07:33:21:
         fa:a9:19:50:2b:d7:4e:0e:41:dc:8b:43:a8:b0:de:58:32:8e:
         88:5b:bd:0a:7a:8d:76:a1:aa:f1:be:70:09:05:2f:4c:cf:5e:
         76:52:d2:e9:07:c5:e9:b8:7f:4f:fc:a0:d7:6c:9f:90:04:dd:
         16:51:ee:17:42:a6:c8:0d:ee:af:62:0f:f3:ed:d4:17:87:28:
         d7:1a:07:bc:2d:67:5d:83:9f:f0:c9:86:17:9f:c1:52:09:4c:
         bc:a3:7d:cc:05:d1:34:ad:47:2b:23:a4:1a:29:d6:17:de:e1:
         64:61:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:46:52 2026 by rpki-client