Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          loIOwlbktkj7PRqnc+2X4rKQV2frkJn2upY/xaACIHc=
Subject key identifier:   9B:A1:DC:FD:58:59:B1:F7:1C:4D:A8:CF:53:97:3D:9F:69:6F:86:2B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019F1B324D518D153F5D264204487D9594CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          120C
Signing time:             Wed 01 Jul 2026 01:01:48 +0000
Manifest this update:     Wed 01 Jul 2026 01:01:48 +0000
Manifest next update:     Thu 02 Jul 2026 01:01:48 +0000
Files and hashes:         1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
                          2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
                          3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
                          4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
                          5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
                          6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
                          7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
                          8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
                          9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
                          10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
                          11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
                          12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
                          13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
                          14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
                          15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
                          16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
                          17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
                          18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
                          19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
                          20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
                          21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
                          22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
                          23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
                          24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
                          25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
                          26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
                          27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
                          28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
                          29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
                          30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
                          31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
                          32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: o7j/svZL5uXN2r4OycetuZ8wRa/ZFfQARlqlsmEjIDk=)
                          33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
                          34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
                          35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
                          36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:32:4d:51:8d:15:3f:5d:26:42:04:48:7d:95:94:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jul  1 01:01:48 2026 GMT
            Not After : Jul  2 01:01:48 2026 GMT
        Subject: CN=9ba1dcfd5859b1f71c4da8cf53973d9f696f862b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:3a:0e:76:a7:df:4f:5b:cd:bc:34:fc:7f:
                    16:87:eb:eb:c3:c6:b9:75:7c:bb:10:82:bd:8b:67:
                    7c:8d:dc:f9:e6:2e:6f:82:ba:4c:e4:e6:e4:3c:82:
                    f6:f4:f3:00:76:1c:89:4a:23:2f:9b:54:8f:99:d1:
                    fc:1e:ab:90:a2:80:f2:ef:06:b5:cb:15:71:e6:f6:
                    70:b1:4f:14:c1:3f:b6:47:82:54:5c:41:41:16:4c:
                    39:ee:49:01:be:86:47:25:de:94:bb:44:c3:a4:e8:
                    9e:83:b7:a8:5d:80:42:8b:64:3a:29:2a:b8:48:42:
                    67:17:4c:cb:3c:9c:74:fd:f4:3a:b0:59:6c:0f:24:
                    71:df:c6:5a:f3:63:ab:fb:cd:f5:bc:df:d9:11:e6:
                    27:7c:1a:05:9d:da:01:70:7d:de:6f:d0:23:1b:ef:
                    8d:67:88:b1:0c:b7:48:ed:8e:5f:26:05:bc:41:07:
                    7e:25:00:9d:8a:87:95:18:21:18:41:77:be:1a:0f:
                    e9:b5:87:b8:79:cf:06:9e:4b:ab:e9:b4:6a:96:b9:
                    c2:7a:d8:88:b8:c0:49:68:37:43:01:9a:4a:d6:9d:
                    cf:8a:3e:55:be:db:c5:c5:e4:b9:84:95:5f:c9:a9:
                    e4:a4:b9:91:62:d3:e9:f2:ca:ec:2f:ab:29:6a:a4:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A1:DC:FD:58:59:B1:F7:1C:4D:A8:CF:53:97:3D:9F:69:6F:86:2B
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:b0:fc:2c:fe:d6:87:75:44:c9:47:e8:ef:8c:88:81:b9:
         3b:86:b2:8a:1e:3c:b9:9b:ce:34:78:cb:e6:52:84:63:1f:9f:
         68:ab:eb:af:5d:ea:aa:bf:70:41:09:7a:b7:87:31:66:d2:91:
         e1:18:d8:08:d7:a0:f7:e7:b0:68:3b:06:0c:18:a8:d0:3c:e3:
         6f:68:26:6d:40:48:ad:e5:f3:e4:d9:2a:32:9e:22:a8:6b:80:
         d5:f0:68:98:d0:77:f4:e3:04:50:18:c4:cc:37:1a:40:b5:95:
         13:72:1e:ec:7e:91:d5:d0:06:ab:05:93:2a:4f:97:ab:dd:b4:
         91:d2:72:49:9a:2d:e1:9d:69:26:65:3d:e7:a5:62:71:a9:86:
         41:00:b0:f1:70:82:37:d4:df:c9:2a:ae:2e:7a:2a:72:95:f2:
         63:55:04:73:7e:95:d8:34:0b:b2:f5:47:9d:c3:bd:78:35:10:
         b6:b5:2e:d2:33:5b:63:dc:2e:39:9c:03:aa:94:0b:20:c6:3c:
         42:14:c1:13:e7:41:fa:c7:12:94:2a:1e:af:55:28:c3:ed:b9:
         a8:86:c1:f0:5b:a1:c3:33:3f:80:42:34:36:28:b9:32:d9:72:
         7d:3b:e4:23:48:24:a1:17:f2:42:45:58:a4:a0:64:b3:22:83:
         5a:d7:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:30:54 2026 by rpki-client