Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
File:                     4wzJQptjOC6bFxTSGzyW0uXr4lc.mft (raw, json)
Hash identifier:          JSNmDyVZ/DTQJRy1T0awX69vK1xNac4Ng4TD/4Ll4CI=
Subject key identifier:   D0:6F:54:86:9C:8F:8D:09:7B:E5:FC:28:C5:D2:BB:64:D0:F1:31:96
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019F848C9B233AF1DA95B8B1F505AB349996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
Manifest number:          19D2
Signing time:             Tue 21 Jul 2026 12:00:34 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:34 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:34 +0000
Files and hashes:         1: 1hUS0dgYuOKagKuRYnGRSU6mdO4.roa (hash: wgVw1wbgU61hnugYMEVTiyojcBCYeUAd4AGAHpCyW28=)
                          2: 2hajvV8gK-m59BYU1-dZQrvoGOU.roa (hash: akWetgY85iiMSrn15VPNa6Tn/6+J6UK1hNE5J48ERz8=)
                          3: 4wzJQptjOC6bFxTSGzyW0uXr4lc.crl (hash: nbbjIpYPTvEbVDGZ5JwYTNMJ5L8bcSVk0RnU8TQDDZw=)
                          4: 5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa (hash: V6FRtdQair4Jd18FQhevQfbc1XrlHcZDfofcJOEH238=)
                          5: 5jRHAAz_hj8a7OP44v7mWLCpLIg.roa (hash: M9wN8baVpSc5b65dc6iAke2qV/7ywF4aCA4G87mYdOU=)
                          6: 7mNPzDQUy4TWk6yVcvwp5gn92PY.roa (hash: wX/s845m+j+aefEHx+Ug2JNMpDWqfvvDBGuvcQGJjF8=)
                          7: AdZzJXVjU4uhQNVuxwK1-7uDINw.roa (hash: WH7H7jpla88i3rn0oGPohqLaC7h+h5aP6N2rE4fb5+k=)
                          8: AkvQldLQY58hrMuy5JJUpN5DWNI.roa (hash: afG9+wD4QhYrt7Kw2LgpaOdHZKEw2Hl0r195C8kvfAc=)
                          9: BJazlwxqEmJsYMjVhmIaDtQC8e8.roa (hash: 2ZK9c4vofcWeUv3b/fecvK2nc6pClocYLtMjG/t3Axs=)
                          10: GwlPBnPafwNESxPOmYchrobp9kc.roa (hash: 2bg5Zps/9Nl20iDTOVJMixlxSv+z0s4P6wxJpe1+ojE=)
                          11: MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa (hash: rbtpAaAkeOS9IFdDYYmlnqwTq2cxGgERFnXxmCVRJEA=)
                          12: PlrUxGnUEiHdEwXChXkr73zDzkg.roa (hash: EMehwEJ8sMbKPMfB13BN85G2PxwvK02T0PjHEVbc+3c=)
                          13: RUpO7YzO4Q4u7emkeEttJ-upFss.roa (hash: 4gXmhPhFM6wlFrTW4TyF6zeN7qnZYJUp2trDabq3weE=)
                          14: TBBV9kVE8yxlnA5LtUYB4k1H7Ck.roa (hash: hSK+h3pQm5k7j10oe3W2NOK+/IyzkDBNICSGH9KMJ6s=)
                          15: UqWiGwSKWqyJRdGttOAL9pdFqF0.roa (hash: EcAPWWCFosb1c66v05znaxCwziIYlAJXvCZC4C9hAJM=)
                          16: WBrHOxJFEJMOD-RQR2LqsWU2gfU.roa (hash: 82EurPdNuP1c5NP1AAN5UKQ8eqhgLDwwseGx0U4immw=)
                          17: YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa (hash: 7y13WjFIQev9f7bZV98y9KEB0ps1yt+8qhRlRU3ZvPA=)
                          18: _pmSmEyGoFs3fpqzGtBjfXV-fa8.roa (hash: fW2hww6BoaOymLlW23CIMa7uBnEa/2LTaq/FpjqoNLI=)
                          19: eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa (hash: 3Az08ESnXLCW18L3NJVhsweQ1FstJelwkdv9JOzRZ3Y=)
                          20: m7iwatMXsXjWk65KbnwzYMYe9Jc.roa (hash: Pztt+Fk8+0WLZVKTeBTXG8cVsCcLHqrpi4CgocNceUI=)
                          21: vjlNS9sVhIyqiR3gMRLX2vUoWIA.roa (hash: wh/14x7K5xZ+wn7kq4tAZCLLRZIq3uwLoPywgg8maMw=)
                          22: vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa (hash: I6XTBHfwaQQIOTboVRUtz1BJpRM00zCr9ZjaQJkslfg=)
                          23: wcKXCZWW_WrMj-H0vskgHgbK58g.roa (hash: TD379ppG8Ut76tU11pZP2K3s8S4pqHUKncAJlr7fy8Q=)
                          24: yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa (hash: MAEY7tBraubtKoodWTH2DPA+SuxElYKFE3cdaGB9ZX4=)
                          25: zvVYEhGaUBI92FKcl0-d5m_pOTw.roa (hash: P4ADjECiLkZPgfWh/PQnaPWZWlCx25ucl7Lz3XB5G/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:9b:23:3a:f1:da:95:b8:b1:f5:05:ab:34:99:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jul 21 12:00:34 2026 GMT
            Not After : Jul 22 12:00:34 2026 GMT
        Subject: CN=d06f54869c8f8d097be5fc28c5d2bb64d0f13196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:0e:de:01:b5:49:14:8e:88:5e:4e:e0:2f:
                    1c:51:3f:ef:54:07:38:e2:b5:8b:8b:c7:2a:c8:1b:
                    de:9c:e5:27:ad:ea:12:c1:ce:91:d9:11:0d:05:cd:
                    93:01:0c:01:70:46:95:e1:23:f3:1c:7a:b3:65:f6:
                    20:f4:cd:e0:44:d7:8e:6f:5d:f5:27:d8:a8:08:f1:
                    35:f5:54:c0:92:c8:c1:f3:53:f4:ff:a0:cb:76:d8:
                    f1:7c:d2:b4:6b:c1:e3:cc:ea:a9:0c:a0:e7:5a:be:
                    72:a0:8f:5f:47:24:22:40:e9:a5:07:4f:ec:55:14:
                    90:13:d0:32:be:73:33:cf:f1:24:0b:e4:d3:63:81:
                    b1:cd:79:56:39:8c:d9:54:c4:dd:f6:46:21:84:53:
                    8a:30:05:d4:ee:19:7b:af:91:36:cb:2f:1d:32:aa:
                    70:34:a3:55:b5:ff:b7:08:cc:3a:b9:61:42:ef:bb:
                    a2:e1:14:ea:8d:c4:7f:5e:d7:60:e4:28:a7:b2:81:
                    d8:3d:43:8c:6e:b0:1b:07:93:53:ed:f8:ba:b4:35:
                    fa:f9:c2:9b:14:7d:fd:ce:11:e4:29:2a:2f:79:89:
                    6a:83:e4:2c:1b:34:03:cc:d2:ac:d2:11:05:3b:8e:
                    a4:4e:53:9e:de:86:e8:bd:e9:a7:3e:aa:68:d1:44:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6F:54:86:9C:8F:8D:09:7B:E5:FC:28:C5:D2:BB:64:D0:F1:31:96
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:d5:01:c4:a4:95:a1:07:d1:d1:9e:3b:57:71:92:43:5f:
         2e:7b:fd:9a:0a:09:9a:90:74:cc:22:72:1d:7d:1e:2f:2b:be:
         d3:51:e1:b0:b9:48:5e:57:b8:78:67:9d:d4:c9:0b:57:63:33:
         8e:28:32:c8:3c:c8:6e:51:e4:3d:0c:85:03:ea:73:a5:9e:f5:
         f1:0d:05:bb:ec:11:30:5f:f9:4f:f1:c5:64:db:6d:91:7b:a1:
         73:10:bc:c5:bd:79:9d:bd:9e:2b:86:fd:d1:55:3f:5d:70:6c:
         f3:05:28:27:bb:3a:a6:4b:40:d7:7c:b2:0a:50:c6:9c:7c:36:
         84:46:e3:8c:4c:b4:99:9b:f8:92:6d:2f:88:16:a5:0b:ac:81:
         d4:c6:65:10:fa:b3:6d:f6:c2:c2:7d:9d:19:7e:cf:c5:69:01:
         2f:c5:34:f3:97:d7:45:dd:16:e9:f4:f9:38:58:b0:a5:bc:14:
         27:f5:e4:ee:d3:6a:29:ac:0e:d4:fe:4a:ff:f8:8d:9c:f5:70:
         17:7e:70:ee:32:48:12:71:42:3e:ac:46:c1:c1:e0:c3:96:89:
         bd:20:04:86:bb:ed:21:33:e9:af:c5:52:28:2a:f3:f7:1f:e1:
         1c:ec:1f:f4:af:19:00:2e:75:f2:5c:7d:b7:bb:58:c5:59:6e:
         26:f3:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:49 2026 by rpki-client