Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          e2wnDfVs0vY6RNFyP8n7WZ36MCxu07seq/XWqnQqbWc=
Subject key identifier:   9A:4C:0B:C8:39:41:C4:E0:61:1E:7D:CB:97:08:20:41:7C:03:81:B9
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       019FA0E0C1D7378EE71F9ED166E03A5B9E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          19DA
Signing time:             Mon 27 Jul 2026 00:01:51 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:51 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:51 +0000
Files and hashes:         1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=)
                          2: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=)
                          3: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=)
                          4: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=)
                          5: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=)
                          6: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=)
                          7: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=)
                          8: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=)
                          9: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=)
                          10: Q_GDlNF7cK8B95qZojWcrc4afdU.roa (hash: LjEzjQgJhMLQIyhzGC77T1fGxckoIM3+ZyoGULP6VX0=)
                          11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=)
                          12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: uehqEJVMqLvP1pvYdYJCYDidgSzDw/26rMWD4tZ4U5o=)
                          13: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=)
                          14: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=)
                          15: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=)
                          16: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=)
                          17: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (hash: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=)
                          18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=)
                          19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=)
                          20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=)
                          21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=)
                          22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=)
                          23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=)
                          24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=)
                          25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=)
                          26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:c1:d7:37:8e:e7:1f:9e:d1:66:e0:3a:5b:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Jul 27 00:01:51 2026 GMT
            Not After : Jul 28 00:01:51 2026 GMT
        Subject: CN=9a4c0bc83941c4e0611e7dcb970820417c0381b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:75:89:ef:34:d7:ba:eb:5d:e2:a8:00:c8:
                    f1:2d:e0:f1:8f:c3:61:cc:b0:16:ff:19:77:8a:23:
                    a9:5d:75:cb:f5:fb:0a:53:14:18:e5:b3:49:cf:b0:
                    2d:75:d7:b8:d6:6c:be:08:98:80:12:ef:06:15:37:
                    b4:58:aa:51:b9:d1:84:42:44:91:6b:2a:8c:57:77:
                    be:87:f1:42:fa:01:e8:c0:bd:54:c9:03:b2:0c:db:
                    16:0d:a6:bf:c9:f7:09:00:7e:c7:b5:c3:e9:a4:1b:
                    37:85:d1:40:04:87:7f:2d:b7:a6:c5:05:22:74:4d:
                    51:79:32:a9:c8:b5:7e:df:a3:d5:c8:6a:f8:9d:f0:
                    b8:1e:37:ca:53:64:ab:4d:fa:b6:62:42:69:6b:10:
                    1e:c2:28:0b:8a:f6:35:89:a3:6a:55:fc:2f:53:65:
                    50:22:41:be:2d:9c:d2:fa:84:f2:a0:bb:99:46:bc:
                    a4:3a:88:6c:df:e9:4c:82:44:6b:41:0a:a6:68:a0:
                    08:71:c3:c6:bf:6e:d9:81:8c:7b:69:7b:08:98:64:
                    ba:81:0b:10:52:37:d6:03:64:f8:49:57:60:8c:c1:
                    3d:e9:1e:fb:c0:47:04:eb:20:68:21:82:14:82:61:
                    ef:42:18:e3:74:56:13:b7:24:76:cd:41:76:68:2c:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:0B:C8:39:41:C4:E0:61:1E:7D:CB:97:08:20:41:7C:03:81:B9
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:7b:97:c8:36:7d:4d:37:a2:e4:bd:d3:22:d6:0f:ee:3c:
         d2:04:18:bc:ee:e3:7a:6d:97:30:3f:ec:75:77:92:69:5c:b7:
         cf:ac:1a:d1:7a:43:81:fa:4d:4f:3e:b2:a8:ac:d5:50:b5:7c:
         fe:24:b6:22:39:0c:24:1e:bd:1e:ea:f7:d8:5a:c9:fb:d4:99:
         e8:85:08:1a:90:6c:5d:2d:0c:c0:e3:70:fb:f1:73:ff:a7:62:
         67:de:f6:af:e0:1a:1e:4a:62:e0:2e:26:ca:6a:08:a6:fb:84:
         e9:18:39:ef:e2:7e:26:12:7a:10:b9:40:ad:22:28:ad:81:5c:
         a1:91:29:66:aa:33:09:55:4b:ca:d4:f4:1e:12:98:8c:23:bd:
         52:9f:a0:82:dd:70:65:fe:68:0f:77:1f:e7:72:79:5b:6d:89:
         97:ab:4e:b1:b0:03:c5:85:17:b5:8a:cb:11:9c:98:60:94:da:
         5c:7e:c9:69:53:4b:b3:a8:82:c7:f9:24:1a:46:b8:da:fb:95:
         97:7d:c5:51:bc:d6:42:48:a4:1d:54:51:c2:14:52:0b:83:88:
         c5:06:1d:71:8a:f9:8d:58:3c:5a:0d:e0:16:b1:22:1a:9f:94:
         7c:8a:25:b4:33:84:dc:9a:65:d5:66:c3:04:e8:e5:06:6c:54:
         1f:23:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:11 2026 by rpki-client