Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          yZThFFjsTSIr0qom2UXzSBhXdXzC3ClFlp5m+ghHQBU=
Subject key identifier:   9B:4A:5E:59:33:10:02:90:4E:26:B1:8F:35:AF:B1:66:F7:D1:E6:2E
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       01A06E39A3B280C9D2FC1DE8C96490BCC34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0E71
Signing time:             Fri 04 Sep 2026 21:01:06 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:06 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:06 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: nO1XEp4AOWC4pm9JwaRFrmk6D7db60k62i6IEl1SlMQ=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: oqvVF5ro_xcfYZX0L91psrz4scE.roa (hash: 9GXkVLe3LroEDzobGbILI6BVJmNa1NCl51cSlpSEpww=)
                          20: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          21: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          22: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          23: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          24: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:a3:b2:80:c9:d2:fc:1d:e8:c9:64:90:bc:c3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Sep  4 21:01:06 2026 GMT
            Not After : Sep  5 21:01:06 2026 GMT
        Subject: CN=9b4a5e59331002904e26b18f35afb166f7d1e62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:a4:63:48:59:82:31:49:f8:e5:f3:d6:f5:
                    76:90:93:cf:bb:9e:b9:28:0f:bf:e5:52:5f:87:54:
                    2b:51:fb:0d:84:32:60:e6:a0:f9:15:10:a7:fb:35:
                    e2:23:50:a0:8b:aa:ca:89:20:92:1e:5e:39:89:c1:
                    63:81:ca:8b:be:53:cd:70:7d:13:a6:b0:4d:32:66:
                    1d:52:fb:aa:96:5c:69:c4:96:18:d1:90:1a:8c:d9:
                    97:4f:11:81:af:c7:ac:ac:f1:e8:00:aa:10:bb:1f:
                    73:9f:f2:5e:50:9c:dc:72:63:5f:bd:39:85:72:a7:
                    fb:68:45:44:a6:50:02:e5:8a:93:2b:f2:08:d4:71:
                    ef:db:26:79:d7:38:6e:12:05:7e:35:fa:12:a3:4e:
                    d9:a6:e4:95:2a:ad:c6:c6:99:c5:ce:4c:51:0d:b8:
                    03:e1:f4:00:54:b7:37:f7:8c:e6:64:e1:c4:d1:3b:
                    21:87:0e:b8:27:2e:6f:d0:04:e6:57:70:38:c4:20:
                    ab:9b:d1:d8:c3:99:e7:aa:4a:ea:a2:a5:30:0f:ad:
                    70:5d:06:36:97:8d:d3:a8:b3:cc:b2:67:c3:30:40:
                    5e:74:e9:90:1a:fc:40:b4:a3:33:b1:a2:c8:79:e4:
                    76:93:7a:f7:87:5e:b2:f2:89:ea:0b:98:a1:44:2e:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:5E:59:33:10:02:90:4E:26:B1:8F:35:AF:B1:66:F7:D1:E6:2E
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:c9:83:4d:d0:c5:9c:51:17:27:69:5f:f5:16:f2:88:29:
         b4:0d:fc:b9:31:a5:87:65:84:af:83:7a:b9:31:d5:91:7b:a1:
         1a:ce:ca:97:73:36:6c:62:fb:5d:bc:b4:ff:a6:15:9a:91:f8:
         e2:76:06:62:40:3f:91:0d:60:ca:01:47:ef:33:b3:cc:6e:30:
         11:79:91:d7:3d:27:b5:9c:a6:85:f4:03:2a:c0:e5:da:9d:c9:
         fa:ee:5b:2b:ca:40:38:83:01:8e:65:68:06:1f:e7:bc:0a:7e:
         c6:72:c3:94:9b:b0:a7:02:3c:71:b5:a7:d1:a6:56:05:22:50:
         f7:90:45:b4:f1:f2:05:6e:66:01:55:3d:65:c5:44:ec:be:be:
         4f:f7:82:9f:a2:61:a8:60:25:c3:ab:a2:ec:d0:9d:e2:53:ee:
         36:4f:10:5b:a2:fe:62:c7:c1:5b:f9:3a:b2:98:c5:a3:c8:57:
         b5:48:df:1b:26:56:65:49:3d:db:fe:a1:49:b1:8d:4d:98:1a:
         fc:98:86:48:64:44:d4:c6:a5:c2:b8:64:9d:73:eb:88:84:12:
         dc:9c:65:b3:f7:65:43:e6:8f:6c:ef:4e:44:0b:f2:f4:58:b2:
         f5:5b:a8:c3:25:9c:fc:d6:8f:c5:77:ae:90:2b:78:62:ac:7c:
         29:a0:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:41 2026 by rpki-client