Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          Bf0lvoscWzIW24tVvH4ExfeolBZEnniXY1MaLugHcY4=
Subject key identifier:   8D:6B:7E:E2:F8:7A:BD:3E:D6:7F:66:6B:7B:D9:DF:22:98:B8:13:B0
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       019EB733540B1C15DD523AAF9F20CD1C4DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          1961
Signing time:             Thu 11 Jun 2026 15:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:54 +0000
Files and hashes:         1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=)
                          2: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=)
                          3: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=)
                          4: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=)
                          5: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=)
                          6: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=)
                          7: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=)
                          8: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=)
                          9: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=)
                          10: Q_GDlNF7cK8B95qZojWcrc4afdU.roa (hash: LjEzjQgJhMLQIyhzGC77T1fGxckoIM3+ZyoGULP6VX0=)
                          11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=)
                          12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: NpiGz0djHmhH0mjgSfe0TclJhyH1ZeE/tsdd0pLSGew=)
                          13: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=)
                          14: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=)
                          15: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=)
                          16: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=)
                          17: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (hash: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=)
                          18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=)
                          19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=)
                          20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=)
                          21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=)
                          22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=)
                          23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=)
                          24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=)
                          25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=)
                          26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:54:0b:1c:15:dd:52:3a:af:9f:20:cd:1c:4d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Jun 11 15:00:54 2026 GMT
            Not After : Jun 12 15:00:54 2026 GMT
        Subject: CN=8d6b7ee2f87abd3ed67f666b7bd9df2298b813b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:d3:49:49:f6:2e:88:0f:05:b2:6a:3a:8f:
                    79:08:83:8c:62:5f:5f:3c:78:b1:a7:78:47:ef:1a:
                    af:6b:8e:ff:91:3f:1c:18:99:5b:97:d5:25:20:e1:
                    24:80:b1:42:20:c6:d9:64:44:b5:0f:fc:6e:97:b3:
                    26:bf:42:16:95:15:a2:2b:e8:9f:51:60:15:b3:6a:
                    19:ab:b4:ef:47:2f:81:2e:59:32:59:59:cf:91:9d:
                    87:28:a8:e7:cc:24:a5:fb:3d:33:44:6e:79:fc:d6:
                    95:c8:a4:79:95:4e:23:9d:50:17:8f:49:63:1d:92:
                    05:71:0b:cd:90:a8:a3:5c:42:3d:c4:b9:cd:e1:06:
                    c0:7b:82:45:08:b4:6c:c9:cc:a7:a9:37:14:be:d4:
                    c7:47:5b:74:80:33:66:f3:6f:05:b5:07:f7:27:71:
                    03:0d:0a:ea:50:e4:2b:c6:7d:26:27:dc:47:bc:4d:
                    ae:30:ad:ec:5d:e1:98:63:32:7b:f3:50:60:ab:ae:
                    75:35:44:a8:9b:89:1e:6c:78:b5:f0:e3:73:d2:62:
                    8f:32:d7:98:2f:10:d6:50:26:d2:9e:87:0e:12:e9:
                    7c:2e:bb:6c:88:1d:5e:01:82:ce:ba:6b:cb:58:0c:
                    bd:9e:3a:c4:cd:f3:05:ea:3e:8e:7c:a0:9e:b9:4e:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6B:7E:E2:F8:7A:BD:3E:D6:7F:66:6B:7B:D9:DF:22:98:B8:13:B0
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7b:76:4b:21:6a:89:d1:4c:ab:af:d2:08:5f:84:fd:d6:05:
         4c:6f:d9:64:da:8f:cb:22:ce:a7:48:9b:d3:17:1c:d6:ae:7c:
         21:96:92:74:1e:b6:ba:a5:72:1f:75:23:73:49:5d:0c:46:be:
         6d:a7:6f:75:f6:2f:96:38:74:59:90:f1:b7:1a:99:6c:63:4b:
         2f:66:bc:32:7c:db:83:cb:e4:06:9b:33:7c:b6:13:7a:d1:2b:
         b6:fe:29:a6:7e:3e:dc:a0:f7:7d:82:d8:7a:f5:36:db:88:64:
         a1:7f:68:9a:f0:45:18:45:bb:a8:10:06:2a:27:6b:5f:d1:1a:
         ef:ce:79:50:a7:cb:56:1e:91:ff:48:8c:4d:d9:dd:51:0e:24:
         6f:11:21:79:8f:07:19:2f:58:02:af:50:27:8d:98:eb:c7:87:
         7b:a7:3e:f2:86:42:42:a2:bc:85:1f:ab:8a:b1:be:fc:2e:13:
         d4:78:42:45:49:d6:1f:1a:9b:8d:18:89:2d:fb:6c:19:5c:ea:
         ac:d7:d6:93:66:87:5a:3e:99:be:ff:02:e0:0e:ca:dd:24:ec:
         1b:8b:1d:84:19:d5:d2:a3:6e:ad:70:0d:84:a2:b1:c0:23:30:
         58:d7:b1:3d:b0:0f:d0:9a:bb:25:62:93:56:75:c3:69:66:2a:
         34:f5:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:11 2026 by rpki-client