Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          UAZfcIfGu4ewe5t2n7O+tQ2fnj9ECxK333A3IKXCYnQ=
Subject key identifier:   43:1E:C4:F2:DC:E5:4B:9D:28:A9:73:D2:F8:0D:58:01:D8:63:A1:25
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019F9DDEEFAC0B648C5CD8DEFD059897CFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          1314
Signing time:             Sun 26 Jul 2026 10:01:00 +0000
Manifest this update:     Sun 26 Jul 2026 10:01:00 +0000
Manifest next update:     Mon 27 Jul 2026 10:01:00 +0000
Files and hashes:         1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
                          2: 0BgZTv7QXJlAZiTUHRagH3BQkp0.roa (hash: 1Mi6r34YcOgbA3mJxnRLp1QOHS59HC92Y/0BpqQFJkY=)
                          3: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
                          4: 5yanEvaCNGmxYIoFSwD5iS2g81s.roa (hash: aMWaHQ8wF/Y1htK9oNbLHRQFbe1aIxUDLSAfigLBhqk=)
                          5: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
                          6: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (hash: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=)
                          7: DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa (hash: INeru24dQtWv6aaG7GCU8qjGuCXwfkgwswLcSE0c5rM=)
                          8: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
                          9: N_eH9tP8sKwGQPcNm7GNoBELV-M.roa (hash: u35SZW/814bffQ/2bUCoM6NNXgrCPwx/svz9dyeDXMM=)
                          10: P979fSRbZB2qJAsaRL-Un7UziRU.roa (hash: 8yhPFAaSS82QNaTgnE/13ZmLFiKivRIrhPw6xm3ENmI=)
                          11: QAhoslHofszADcmZui-eOUMvrKU.roa (hash: 1XMldMRsg874vTqcGiQzaQlXR7XcVR1ojHBp2U217Pg=)
                          12: QErVVtuOwcB_yB0LqZmmy9fn_ak.roa (hash: FDpvep+63kI4zULI0Sfg5/w/pD8+A58oJ0Hyf+jbagg=)
                          13: Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa (hash: LC/otdFV7sxTd0BKKQkekKeoWRTU5X1nRWOWC62qdAw=)
                          14: XPqNLDSioTBbUphggaW_qiKHxQM.roa (hash: u77od1+BFXbLHFmFQ0ohdLmIQae78vCNTKOMpKBDO4A=)
                          15: ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa (hash: DY4bo++5JP9csslzTNXD8o/1EwFJpWmc6JHBfz5aBOU=)
                          16: _sxN__19ZJD-wDLf4-2wxc5ndzI.roa (hash: cDLlnQNW3AtBhQs73FYFH7LRcTVmcIP6AmZwXbvRoBQ=)
                          17: b8rph-cr35APSGmIzjlav9x-ibM.roa (hash: ewv4AA8yj9deK9EvneGfkLw6HKhasqrB49rsY1tooVU=)
                          18: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
                          19: g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa (hash: m+xGgcoyjZzC8OaS+PwG/1kW4RfwvvedJMhkcRHvmJw=)
                          20: jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa (hash: SIMXAPgCs88kIDrWS92r3YG0rKy8dHX8r7UiSduHK9s=)
                          21: nJWPR3ijpZMRJhibKnA2bqIBU-0.roa (hash: hkrTvd6KUmz1EfV2glZ262Azwm8Xx7aPhY3VGefvZcM=)
                          22: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: 4s/6p/f8sS0bUm+ilDo1ZH5rf4sttN0xYVAU6ogc+C0=)
                          23: vYpCuwM7rWjLKY_sErODVzSuRPQ.roa (hash: cKiFxlCvXlppFUZycLfczFtZWOx0j+yYfF3GWyjfGtk=)
                          24: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
                          25: xDSHSPDYqUST1yGDzj0hcab5JsA.roa (hash: ck+8f/Zhnhgy0hfrt8gda3b7LFRzqdXFoYHCpi0gwvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:de:ef:ac:0b:64:8c:5c:d8:de:fd:05:98:97:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Jul 26 10:01:00 2026 GMT
            Not After : Jul 27 10:01:00 2026 GMT
        Subject: CN=431ec4f2dce54b9d28a973d2f80d5801d863a125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:55:a5:fe:94:79:9c:f7:c1:68:cd:b9:69:
                    5d:a9:28:54:3d:28:6f:03:2c:7e:41:91:33:07:6e:
                    bc:b7:3d:bc:15:ec:4b:6b:e2:69:9b:85:d1:aa:57:
                    3f:2e:1b:96:10:87:46:45:df:2b:46:f3:18:63:37:
                    e5:a9:02:eb:4d:f2:82:e5:79:36:65:53:8e:57:4a:
                    df:ad:f2:52:fc:9f:95:6e:0d:c3:16:96:3f:70:fd:
                    95:76:bf:37:0c:01:5d:9f:49:a2:fa:24:b4:b3:97:
                    8b:6e:74:bf:ba:15:ba:de:54:a3:76:95:65:3c:75:
                    35:98:f5:43:c7:b0:de:d0:60:ce:f5:e3:56:38:83:
                    42:37:af:e0:81:ec:2d:56:24:42:2d:3a:c3:97:bf:
                    9e:ff:13:8a:6e:52:66:0f:cb:ca:66:bf:5d:78:17:
                    23:6b:c0:28:84:29:2e:c9:ff:99:3a:cc:e2:e5:dd:
                    da:9e:6e:0d:0a:4e:e3:9b:fe:a4:2b:db:0c:a6:07:
                    f8:ea:cb:b4:a5:3d:2b:fc:a4:8d:d7:55:79:a7:a6:
                    db:86:61:8f:d1:b7:c4:59:6f:3b:bb:f9:fb:62:b5:
                    28:a2:46:dd:98:5c:87:f0:b4:d1:82:09:72:bd:e5:
                    5f:c5:f1:d0:be:34:a3:32:e5:7e:55:c0:a3:2f:5b:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:C4:F2:DC:E5:4B:9D:28:A9:73:D2:F8:0D:58:01:D8:63:A1:25
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:61:a5:09:f2:3c:03:17:46:52:de:c2:7c:d4:7f:2a:a7:8a:
         c2:58:d5:b7:da:6f:02:34:9a:6f:89:de:19:26:17:02:1e:cd:
         8b:2f:b4:1b:a1:8d:fb:bb:9d:de:5c:86:95:98:16:5f:06:73:
         fd:ca:84:61:82:b4:89:5d:4c:1a:14:64:7a:15:51:0a:11:09:
         13:d9:bf:37:4d:2a:c5:4f:ac:a6:e3:d3:bf:6d:1b:cd:98:2b:
         9d:87:b6:e5:b6:a3:67:f6:95:5d:09:66:89:fc:24:36:d3:60:
         9a:a4:96:75:d2:a2:d1:50:13:ae:83:9e:bf:2c:51:de:6d:2a:
         4c:ab:85:22:66:0c:a8:27:0d:e1:13:dd:bf:9f:9a:77:f4:5b:
         b6:f1:1b:df:7b:5b:af:87:d4:84:8b:35:0a:06:f4:b3:49:68:
         b3:e4:4c:bc:7f:46:08:63:45:10:22:fc:f6:4c:de:9b:a1:b2:
         fb:61:36:2f:48:9b:6f:03:62:b9:9d:50:e9:f8:85:87:66:44:
         b5:f6:15:56:8c:5c:ce:fe:e8:b9:f9:4b:b9:0a:32:38:3a:0a:
         36:36:5a:59:0e:6b:71:8f:f4:f1:0c:fa:29:25:37:6e:0f:78:
         dd:6d:2f:f9:61:62:d1:e6:f7:6c:ac:a7:f0:b6:87:6b:4d:0d:
         f3:81:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:41 2026 by rpki-client