Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          Clnz44ipT3j1RxhCUjzb2sow3o1YcOAQrK7pmSF38sk=
Subject key identifier:   D6:6D:D3:69:22:15:55:90:B6:F4:24:72:93:8E:1D:C3:2D:6D:C4:23
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       019FA0E131BA0807B49B3ED71BD1C35956FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          19E0
Signing time:             Mon 27 Jul 2026 00:02:20 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:20 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:20 +0000
Files and hashes:         1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
                          2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
                          3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
                          4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
                          5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
                          6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
                          7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
                          8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
                          9: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
                          10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
                          11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
                          12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
                          13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
                          14: dh0HxZTX0gUx4atQo9tXgidUMLc.roa (hash: C/NbxOhBDbuOgCOrG7xkr9yc1xlWN7ZS9mwZEOk3C7w=)
                          15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
                          16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
                          17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
                          18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
                          19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
                          20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
                          21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
                          22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
                          23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
                          24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
                          25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
                          26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: NaISTn6Bo5Z8F4AI7BMJ4v8nss+SNsv7MfdZHauNMQY=)
                          27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
                          28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 00:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:31:ba:08:07:b4:9b:3e:d7:1b:d1:c3:59:56:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jul 27 00:02:20 2026 GMT
            Not After : Jul 28 00:02:20 2026 GMT
        Subject: CN=d66dd36922155590b6f42472938e1dc32d6dc423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e7:d0:06:23:9a:d8:e5:48:0d:be:a6:2a:ad:
                    b5:28:81:ca:24:63:4f:f1:98:f2:e7:2e:34:14:01:
                    f7:97:fd:2f:0d:4c:7f:9b:cc:bf:86:7c:94:ea:41:
                    b2:d9:2e:8b:ca:96:c2:be:85:65:c2:cd:51:71:3f:
                    3d:ed:44:3d:48:2d:98:2d:cd:73:41:12:d5:18:85:
                    be:c1:ab:28:49:b6:89:3f:09:df:86:96:cd:6f:f2:
                    96:d9:20:90:c6:1d:9d:32:b5:67:03:ea:33:c7:51:
                    2d:bd:e4:9f:fb:a7:04:21:09:eb:b2:fb:97:2f:61:
                    dd:89:67:1a:2d:1b:f6:85:65:b6:7a:e6:c2:71:4b:
                    9f:23:21:f8:da:7f:7f:36:d1:b7:af:f4:49:f8:db:
                    df:eb:d8:36:85:47:8e:64:9d:7e:cf:dd:3d:dc:11:
                    c9:1a:3d:06:4e:ab:73:bf:c6:2e:3a:ca:95:43:f4:
                    e9:c2:18:2b:f0:f5:7c:5e:02:76:05:a4:5a:a0:70:
                    24:60:4b:22:4c:e2:16:9f:61:94:d2:59:b6:bf:4c:
                    18:0d:a6:4b:d3:9d:ac:9d:5c:89:bd:2c:ab:6a:e8:
                    4f:fc:0f:ed:8d:1d:ea:b1:aa:45:16:dc:98:84:4c:
                    e7:5d:48:06:e9:a0:ff:af:48:df:c2:de:a5:e7:40:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:D3:69:22:15:55:90:B6:F4:24:72:93:8E:1D:C3:2D:6D:C4:23
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:ff:4d:38:e0:98:32:e4:e6:4a:84:3a:e5:55:59:4f:65:
         76:e6:b0:e5:41:45:ed:d1:48:a7:25:8a:9c:f0:23:8d:ed:9a:
         fb:32:d1:49:4e:b4:d4:91:93:2f:c2:98:c7:ad:f1:86:d9:d8:
         c2:14:8c:62:b8:7e:1a:37:8f:1e:cd:cc:36:e2:01:0c:44:f3:
         73:4e:ac:3d:72:1f:1b:70:46:05:e0:a2:de:25:f6:66:70:0a:
         81:53:c0:23:1b:27:fa:5c:6e:dd:61:a8:01:24:ca:a6:55:28:
         ef:fc:fa:79:59:b2:47:1b:c9:18:86:d2:5c:53:d6:32:23:9c:
         f5:0b:e3:e7:fe:ef:62:e3:a9:8d:79:4f:e2:7f:01:38:2e:86:
         fb:72:4a:0d:39:71:4d:6f:5b:25:19:6e:59:a3:e3:36:c2:80:
         61:bc:ee:37:5c:d3:be:80:15:52:0d:1f:f4:31:f8:5e:e1:ab:
         48:d5:93:2f:c8:7b:fb:c6:85:7d:3e:19:d6:a5:97:5f:a8:5d:
         54:b9:43:73:38:cf:3d:00:6e:01:80:93:4e:34:45:3e:4b:77:
         8d:2c:f0:43:d3:75:1c:b5:36:18:c8:84:dd:4c:c4:d1:32:6b:
         99:ea:65:9e:1c:9c:2a:06:73:af:2a:b9:1a:f7:2d:d6:2f:d9:
         35:dd:ee:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4TG6CAe0mz7XG9HDWVb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjYwNzI3MDAwMjIwWhcNMjYwNzI4MDAwMjIwWjAzMTEwLwYDVQQD
EyhkNjZkZDM2OTIyMTU1NTkwYjZmNDI0NzI5MzhlMWRjMzJkNmRjNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ufQBiOa2OVIDb6mKq21KIHKJGNP
8Zjy5y40FAH3l/0vDUx/m8y/hnyU6kGy2S6LypbCvoVlws1RcT897UQ9SC2YLc1z
QRLVGIW+wasoSbaJPwnfhpbNb/KW2SCQxh2dMrVnA+ozx1EtveSf+6cEIQnrsvuX
L2HdiWcaLRv2hWW2eubCcUufIyH42n9/NtG3r/RJ+Nvf69g2hUeOZJ1+z9093BHJ
Gj0GTqtzv8YuOsqVQ/Tpwhgr8PV8XgJ2BaRaoHAkYEsiTOIWn2GU0lm2v0wYDaZL
052snVyJvSyrauhP/A/tjR3qsapFFtyYhEznXUgG6aD/r0jfwt6l50Dv+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZt02kiFVWQtvQkcpOOHcMtbcQjMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZv/TTjg
mDLk5kqEOuVVWU9lduaw5UFF7dFIpyWKnPAjje2a+zLRSU601JGTL8KYx63xhtnY
whSMYrh+GjePHs3MNuIBDETzc06sPXIfG3BGBeCi3iX2ZnAKgVPAIxsn+lxu3WGo
ASTKplUo7/z6eVmyRxvJGIbSXFPWMiOc9Qvj5/7vYuOpjXlP4n8BOC6G+3JKDTlx
TW9bJRluWaPjNsKAYbzuN1zTvoAVUg0f9DH4XuGrSNWTL8h7+8aFfT4Z1qWXX6hd
VLlDczjPPQBuAYCTTjRFPkt3jSzwQ9N1HLU2GMiE3UzE0TJrmeplnhycKgZzryq5
Gvct1i/ZNd3u8A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:05:11 2026 by rpki-client