Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          AvKkER/Q4vXHXa7Jiwan9u8gf1gGPhXSoQmMm0wYO0w=
Subject key identifier:   8F:CF:93:8C:D5:EE:C1:AE:C6:3F:0A:2E:50:BF:02:FD:B6:C1:1C:8A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019F8455D401BA82486540933C57CE76726C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1A79
Signing time:             Tue 21 Jul 2026 11:00:44 +0000
Manifest this update:     Tue 21 Jul 2026 11:00:44 +0000
Manifest next update:     Wed 22 Jul 2026 11:00:44 +0000
Files and hashes:         1: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=)
                          2: 3v5keHAqK4zqhQB_uQznSph1Diw.roa (hash: jCOl+4ngxgebTeflrMMZ3kTPxa3cepM3MbMRipIrhQc=)
                          3: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=)
                          4: 5B318zH8NOu9OBi_TuoXg4_JM2k.roa (hash: KdWhEJLnniiRDILznsehxHC1zHSWP6KdhnB/WWL1Hi4=)
                          5: 6dJJQaLsf-pJV9GESFzivPI_ry0.roa (hash: m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=)
                          6: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          7: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          8: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=)
                          9: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: RgF0Ih/iMOMOkAx4eUfskMV5csWYp+SRMlTnCilG8HI=)
                          10: J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa (hash: fA4gjnSI4d76aMPIiYbqAlxasjqqD9PxHceAqm4716Q=)
                          11: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
                          12: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          13: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          14: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=)
                          15: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          16: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=)
                          17: VGL6GimIkrNlEBBiW4ncMBzPKWg.roa (hash: 2aErGWrOjketUDd8CWFjnoyEM3sWzcLcOD9CYbPzuro=)
                          18: VfwbSpRC8dNKpWiDZg8hxvtewBw.roa (hash: vDuZGm7+4eIX8NaKSeVIn0MtJeBkNNV+BeLlugAVQXU=)
                          19: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          20: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          21: dxo24NAWy8p1m5MAZSvGymiEUY4.roa (hash: 7VqVZBdxevM4HgdNCCGnVCUjB06a91AHxuxhr9+MQqM=)
                          22: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
                          23: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=)
                          24: mrh0y_ObvDXVw_6YS_au-VzRPaA.roa (hash: doqouYnXlAtVY/2YlaJMN33MBRnapyWoXbfp5rb59mU=)
                          25: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          26: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          27: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          28: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          29: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          30: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
                          31: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          32: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=)
                          33: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:55:d4:01:ba:82:48:65:40:93:3c:57:ce:76:72:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jul 21 11:00:44 2026 GMT
            Not After : Jul 22 11:00:44 2026 GMT
        Subject: CN=8fcf938cd5eec1aec63f0a2e50bf02fdb6c11c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:14:00:23:60:21:7d:3a:a8:ca:9c:63:fb:
                    6a:1c:41:30:86:39:06:d1:68:10:fc:8d:5e:08:df:
                    ea:7d:3f:92:8d:6e:8d:96:02:9e:d6:41:bd:3c:db:
                    b6:f0:05:c4:91:35:8c:3b:67:36:91:39:30:2f:ef:
                    03:69:4f:38:cc:63:b0:5f:9e:18:f6:e8:23:c4:7a:
                    e8:14:a5:e7:3d:19:e7:0b:0e:4f:e3:3c:56:b1:ce:
                    60:1b:47:6c:79:73:e5:02:35:d1:8a:80:df:de:76:
                    4c:32:d9:48:3d:37:e0:9d:04:71:d1:4a:dd:98:32:
                    fd:9f:99:77:9e:0f:96:89:5a:03:20:48:d9:bc:4e:
                    69:07:e5:86:63:d9:57:70:0b:8f:7c:09:27:a4:e5:
                    f4:9f:f1:60:bf:44:92:2c:a7:43:8c:41:b0:06:fc:
                    35:cd:07:67:ce:8b:d0:88:26:3b:cb:25:77:48:d1:
                    1c:56:df:6b:96:3d:4a:b5:b8:ed:a7:d0:b0:e5:da:
                    19:a8:ad:4d:e2:53:20:09:2a:7a:a6:e8:34:8c:73:
                    fb:f0:52:83:25:ac:81:48:f0:d1:3f:10:3b:6b:3f:
                    21:8e:67:29:0b:6c:b8:8e:80:b4:58:f7:44:2a:ec:
                    4f:c3:42:ea:be:89:b6:c1:c2:ff:c4:10:e0:04:cd:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:93:8C:D5:EE:C1:AE:C6:3F:0A:2E:50:BF:02:FD:B6:C1:1C:8A
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:79:66:da:91:24:5d:c8:25:be:42:8a:55:85:78:bd:33:
         c2:bd:db:d3:c1:0d:4c:82:e2:22:83:94:44:aa:0e:e9:b2:d1:
         44:be:58:5a:27:7e:9e:1b:49:54:72:85:5f:5f:5a:16:c1:8a:
         bd:d3:e6:79:9e:4c:7c:6a:6d:72:7e:fe:43:66:3f:44:b7:82:
         c3:a5:9b:e9:70:24:cd:59:07:03:94:99:19:df:61:d7:03:f9:
         12:ec:d3:63:4f:16:d0:5c:84:9f:b7:71:5c:e0:48:a7:b6:02:
         cf:25:83:63:6d:0c:cf:74:12:60:31:5b:0a:af:ce:b3:b0:b4:
         a6:08:e8:40:d2:84:b0:b1:1a:3f:8d:77:45:8f:39:0d:00:67:
         e5:0e:76:bd:89:0a:22:d3:c0:97:ba:3b:f6:b4:e0:96:2e:48:
         16:3b:5b:d8:db:9e:8d:e4:17:b6:d8:92:b7:b8:f7:d5:2a:a3:
         2e:58:d3:cb:fc:8c:7a:8a:6c:ec:89:8d:3c:cd:a8:34:d3:3f:
         b3:4a:ba:8f:8b:c2:7e:f5:40:60:0d:cf:e6:e1:fc:ea:e2:62:
         8e:1e:a7:82:5f:e2:62:ef:92:4b:f6:aa:b2:b9:b3:da:6f:35:
         19:20:13:98:7d:ef:f4:06:da:8c:b4:bb:4b:62:3f:39:f1:c0:
         87:02:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:12 2026 by rpki-client