Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          7n4V4nh+TSba2EOG4Sy5C8VtHcLagJ0lzDP6sxIZVX8=
Subject key identifier:   39:D6:45:14:B7:21:B8:39:5F:B6:C9:3C:8C:7C:85:0E:B4:4F:CE:ED
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       01A060B4C8A410CD3F48B1EECE5D2FCF9B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0D2D
Signing time:             Wed 02 Sep 2026 06:00:55 +0000
Manifest this update:     Wed 02 Sep 2026 06:00:55 +0000
Manifest next update:     Thu 03 Sep 2026 06:00:55 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          6: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          7: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          8: INWrdhdC-7Lic4dDfIlU5kvWZV8.roa (hash: L0HLJtLf5AQYkU8AkhpCJLF1Aad/NZSaVA+c4yJl8hY=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: oXXrVdVtlM/mnIzrVi2jCMTXw+7bYF3kZ0sfUyPer2c=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:60:b4:c8:a4:10:cd:3f:48:b1:ee:ce:5d:2f:cf:9b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Sep  2 06:00:55 2026 GMT
            Not After : Sep  3 06:00:55 2026 GMT
        Subject: CN=39d64514b721b8395fb6c93c8c7c850eb44fceed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:07:50:06:8a:f1:18:77:42:61:2d:4f:ec:
                    76:a1:c9:f5:d6:8b:e4:e0:0d:50:6b:0e:23:b6:85:
                    2b:27:9b:fc:09:b7:bc:ee:b2:13:16:08:26:bd:94:
                    c5:01:fa:06:7d:2c:73:35:2d:4d:4a:f8:fe:e5:bc:
                    22:c4:58:fd:2c:de:0f:fd:c3:95:ea:a6:b2:01:3e:
                    b9:19:d5:e6:22:58:c6:e0:8f:b5:3c:31:b0:70:d2:
                    43:b5:d3:5d:be:ff:fd:b2:c4:74:ae:22:3e:7a:a7:
                    2f:08:eb:df:89:09:4a:c4:67:bb:83:8b:9e:8d:53:
                    09:c5:eb:8f:99:ae:91:63:85:a0:78:6f:da:44:7a:
                    41:a5:46:14:2b:0c:fa:dd:b0:04:02:87:b7:ae:8b:
                    38:6e:5b:33:28:83:35:e9:bd:8e:3f:0b:86:79:b5:
                    26:1b:05:07:7d:f1:aa:e7:ff:d2:02:22:1e:70:b6:
                    bb:59:84:98:c4:49:95:5f:73:da:81:d4:09:50:dd:
                    9e:16:8a:c7:5d:ef:24:5c:a3:66:56:c6:2f:32:4b:
                    68:c4:49:f8:2d:33:38:90:7a:d2:ca:50:d8:95:cc:
                    94:34:36:08:8e:50:33:39:e2:42:57:26:73:5c:3e:
                    f9:ae:3c:40:87:ba:dd:28:0a:4d:72:ca:b7:df:e4:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:45:14:B7:21:B8:39:5F:B6:C9:3C:8C:7C:85:0E:B4:4F:CE:ED
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:af:89:36:36:d4:5e:9b:e1:6c:3a:ec:e5:b0:e3:ac:f2:
         06:cb:36:39:d4:6e:a4:ce:18:75:4e:ee:0f:11:9a:40:5d:cf:
         bd:f5:95:cd:5e:89:6f:49:82:fe:5f:98:bd:8f:6f:e4:91:49:
         97:a1:44:30:34:41:dc:dd:39:d8:58:84:c9:4b:37:47:71:d0:
         55:29:51:85:34:85:30:c8:87:95:2e:ba:04:76:fc:bc:74:9c:
         ba:02:e7:8d:77:95:d0:65:11:27:1b:f7:a2:bd:26:af:c3:03:
         88:2d:87:c5:9e:24:5f:87:15:10:29:56:65:03:6c:64:7b:aa:
         36:73:1a:ab:27:20:67:35:40:4e:21:ac:92:ad:a8:d3:0b:c4:
         64:e7:ea:fb:b1:a7:46:a6:cf:42:73:5e:d7:d4:35:05:19:db:
         20:1b:72:5a:74:76:da:54:d1:3a:03:14:38:c2:36:4b:69:df:
         31:a8:09:ba:35:c8:5e:66:ba:69:fc:02:c2:8f:04:04:8a:98:
         d8:2c:5d:b3:f7:a9:85:f5:3e:72:73:ed:c6:8b:97:15:7a:7d:
         38:32:59:7b:19:a6:40:48:c5:6e:37:c5:01:8c:0d:ef:1c:21:
         06:e7:d6:db:08:c8:bf:38:35:e6:84:84:c2:d3:17:0f:48:84:
         80:d2:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 10:22:56 2026 by rpki-client