Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File:                     ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier:          PyBzvojfQYSs/L11u3pF47KRO+SrcUX28DzcoGFV7N0=
Subject key identifier:   D7:25:AD:5A:D9:73:91:9A:08:69:3B:BC:D7:2B:8C:96:F9:C8:01:41
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       019F72183328CF1A460F9A719DCD244A3679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number:          1171
Signing time:             Fri 17 Jul 2026 22:00:16 +0000
Manifest this update:     Fri 17 Jul 2026 22:00:16 +0000
Manifest next update:     Sat 18 Jul 2026 22:00:16 +0000
Files and hashes:         1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=)
                          2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=)
                          3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=)
                          4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
                          5: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=)
                          6: Rq_6E29y9FzzDAL1ZxfTgVmFkZs.asa (hash: yI85oGl8VeF8e1P6DlU+1YJp0A0saEK2LwjW5ZnVXF8=)
                          7: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
                          8: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=)
                          9: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=)
                          10: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
                          11: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=)
                          12: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=)
                          13: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: T2GzkLFmhDC4Pow29L+6s5rPc3fieiJirwqGYuN017c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:18:33:28:cf:1a:46:0f:9a:71:9d:cd:24:4a:36:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Jul 17 22:00:16 2026 GMT
            Not After : Jul 18 22:00:16 2026 GMT
        Subject: CN=d725ad5ad973919a08693bbcd72b8c96f9c80141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:d3:55:6f:1f:26:ae:9b:8b:5e:80:bf:72:
                    63:d9:6b:fd:9b:46:89:87:52:c1:b2:b7:05:68:a7:
                    f8:ad:08:9f:ab:5c:ba:f3:ff:ac:13:c1:66:9b:b6:
                    52:b5:f3:a8:18:ae:7f:e0:46:99:5e:91:92:c7:ac:
                    61:d6:ec:27:fb:27:0c:00:d0:8d:42:39:47:f8:cd:
                    c0:d8:b3:34:91:6a:94:43:5c:5a:4e:58:36:45:c0:
                    9b:0f:b2:59:e2:e2:01:d5:d9:b7:e9:1d:64:f1:7f:
                    64:b6:92:cb:f0:ad:fe:f5:9e:1d:43:91:ee:2c:5d:
                    bf:de:a2:99:68:83:9a:20:49:a6:81:1e:89:cf:b6:
                    61:0a:38:59:74:a0:f8:eb:b9:84:05:3c:d5:1b:09:
                    e5:82:71:71:e9:a1:db:d6:66:0b:97:9b:dd:bd:02:
                    70:0a:47:68:c0:01:7f:1b:08:a7:f3:f5:90:65:86:
                    15:51:50:f0:11:ea:f6:02:4d:b2:13:a9:39:63:94:
                    13:24:c8:26:e9:2a:24:5f:16:16:55:b4:c2:c2:61:
                    1c:1f:48:e6:27:91:04:64:fb:50:ce:37:9d:ab:1c:
                    15:9a:c5:89:22:13:04:6d:60:b2:45:d1:17:da:14:
                    aa:05:59:29:e1:00:c9:88:fb:b0:2f:30:8a:45:fb:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:AD:5A:D9:73:91:9A:08:69:3B:BC:D7:2B:8C:96:F9:C8:01:41
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:f0:1c:04:e9:4c:eb:c3:34:c0:20:5c:e5:12:7f:93:3c:
         c5:d3:3e:db:bd:bd:5e:83:b9:bb:ad:61:49:5c:da:2e:b1:37:
         72:8e:f0:12:f2:58:f7:56:75:da:81:b4:af:9e:a5:45:e9:9e:
         a2:c8:99:32:95:44:21:a7:54:d4:98:a1:2b:69:1c:fa:37:28:
         e6:fc:9e:a6:65:36:12:59:c7:2c:7d:52:23:cb:d6:98:91:76:
         47:a8:6c:7c:ec:45:c4:70:d4:16:28:13:c1:6c:8b:c8:e1:08:
         b0:45:42:6c:97:55:1e:28:c4:bf:a0:34:d7:54:fe:f2:9a:43:
         f1:f5:c0:59:39:d5:d6:a0:9b:f5:a6:37:37:84:92:8e:f5:1b:
         86:90:c9:73:11:c5:82:e9:9d:99:2b:fa:f2:a0:c5:12:ac:7b:
         5f:b3:32:86:a7:58:9a:25:87:48:88:65:cc:7a:05:02:a9:13:
         74:d7:e2:c6:be:cf:ae:9f:6e:85:be:59:01:a9:7e:01:51:d8:
         1b:e1:26:c7:4a:f5:69:7a:ad:ca:23:ed:aa:7f:72:fe:9c:bf:
         e4:29:35:55:c4:46:f6:a4:13:8a:74:c5:2b:33:6a:72:e3:40:
         b8:e8:86:55:09:ab:26:52:aa:01:94:c5:a1:db:b6:36:cd:e4:
         50:73:48:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9yGDMozxpGD5pxnc0kSjZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjYwNzE3MjIwMDE2WhcNMjYwNzE4MjIwMDE2WjAzMTEwLwYDVQQD
EyhkNzI1YWQ1YWQ5NzM5MTlhMDg2OTNiYmNkNzJiOGM5NmY5YzgwMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifTVW8fJq6bi16Av3Jj2Wv9m0aJ
h1LBsrcFaKf4rQifq1y68/+sE8Fmm7ZStfOoGK5/4EaZXpGSx6xh1uwn+ycMANCN
QjlH+M3A2LM0kWqUQ1xaTlg2RcCbD7JZ4uIB1dm36R1k8X9ktpLL8K3+9Z4dQ5Hu
LF2/3qKZaIOaIEmmgR6Jz7ZhCjhZdKD467mEBTzVGwnlgnFx6aHb1mYLl5vdvQJw
CkdowAF/Gwin8/WQZYYVUVDwEer2Ak2yE6k5Y5QTJMgm6SokXxYWVbTCwmEcH0jm
J5EEZPtQzjedqxwVmsWJIhMEbWCyRdEX2hSqBVkp4QDJiPuwLzCKRfu/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNclrVrZc5GaCGk7vNcrjJb5yAFBMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKnwHATp
TOvDNMAgXOUSf5M8xdM+2729XoO5u61hSVzaLrE3co7wEvJY91Z12oG0r56lReme
osiZMpVEIadU1JihK2kc+jco5vyepmU2ElnHLH1SI8vWmJF2R6hsfOxFxHDUFigT
wWyLyOEIsEVCbJdVHijEv6A011T+8ppD8fXAWTnV1qCb9aY3N4SSjvUbhpDJcxHF
gumdmSv68qDFEqx7X7MyhqdYmiWHSIhlzHoFAqkTdNfixr7Prp9uhb5ZAal+AVHY
G+Emx0r1aXqtyiPtqn9y/py/5Ck1VcRG9qQTinTFKzNqcuNAuOiGVQmrJlKqAZTF
odu2Ns3kUHNIGg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:03 2026 by rpki-client