Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          sSlsbNirk1Y0wiitRgBnURFQpjX+tjkj8UjQqhG0Rng=
Subject key identifier:   B4:D5:2F:3C:CA:15:16:9B:F7:54:A0:C9:83:C4:6D:74:2E:21:03:10
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       01A06DCC14E1D06454704229968AFA49661E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          180B
Signing time:             Fri 04 Sep 2026 19:01:26 +0000
Manifest this update:     Fri 04 Sep 2026 19:01:26 +0000
Manifest next update:     Sat 05 Sep 2026 19:01:26 +0000
Files and hashes:         1: 7HBVOpyCw1FOwYRer9QdAwGd80Q.roa (hash: CraZq3bKawliYQsBaYv52BC/At9GPyhy6bz4vqZGvrw=)
                          2: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=)
                          3: H5Q-dU0aoyrNiH9wqgnsn5H_Va4.roa (hash: wEl84A2iQtW2QlhvVrH7VKbflyCbD807z5pUIHPlOVY=)
                          4: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=)
                          5: MXxB8CNpDAIx8mwfrj7VeXKYpB8.roa (hash: EltR9XgNTj9jKy0CV+Z10iYbgpPCkgGBhTqaYwyJ1h0=)
                          6: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=)
                          7: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=)
                          8: RzhXZNN80rbDceIr7GWMP1BL2T4.roa (hash: XrAtOSS0kHYUbkxivUkP6A6DFY2BAUY1cH3y1xyfGzs=)
                          9: SL3Y_PpDcj5A_EO8-yB5j4l_450.roa (hash: V+XY6bDcmReJThpGKTQ7N8hjqMotaqMvVGr/3qy9MWo=)
                          10: XhWNq_03YO6idZVx8wSudiAf8Ak.roa (hash: jjd9Ntow5yuYQ1z+cFhSsqPXNrtdpbaOjcPj/8pmaOM=)
                          11: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=)
                          12: acrLlh2bffixlJwIk38uqcoaM3U.roa (hash: 8VJekl0fJNzL7/mrVZ7IvSwSX3xru+t1pg5R0/MlHXs=)
                          13: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: mKCkoC2pNg7zvtExTNpbawOxeQv2B1ctHFeHcl4o6os=)
                          14: i_QNXSEubOFTZEbHyeOmfAnx51Y.roa (hash: Ct+gnGpg7fCLzkedsqbQFmR3763ftmSsKtbnNI8iSuw=)
                          15: ihYg0cYS3IjGpvHqoGNoZQ5E0Rk.roa (hash: WqAbMWiTVqKl0l8/bg/FAXvQEDwuUTFFygVL/CNd5Zw=)
                          16: lzu4y4Q9shg3DRtmoqkB30BoyZg.roa (hash: 9Emdq207YisuGB08EG5mDj1cnqOhy/o2dL8p/ARvqCg=)
                          17: ngpONoHSTwoohoW5OGQa7adKegU.roa (hash: uejL2MnuBHCE3yZt1cUlPz5kgBigbbVinyw+wTmzynA=)
                          18: pPGIecinm7xqqyGr-l8cHaTpiLs.roa (hash: rN3hsflq3ynZ1Bl5WsXqqY0u5feHLl6WF/IYUZT77GM=)
                          19: pdqEw5iuF312Fx4Gh8FELse0F7U.roa (hash: 8o38Pb+iHo0bLN38JuwTjQeNKV2+jFf2jL93DcY8rhY=)
                          20: pvKn5P6W0geqPhRpqQoqoG2NcG4.roa (hash: jZ0UDbD+lL9KJLctKmX3BzyaqOoOU/LXfYVgwDGMH/8=)
                          21: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=)
                          22: ra7_KZEiDFEgBecljzzMSndphEo.roa (hash: mMCalNTgwgkZZuIBEJzs38izbqU0jTo1vgd1t6aK83U=)
                          23: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=)
                          24: wo7HMWTKzL4KQH_XmOyP9W3quYk.roa (hash: 6SRDl+MUI69wFuXIlfVF5E1JYaN4fy+QYftcn1Ok0k0=)
                          25: z4hVox_1YMjCdj0pv1ovoZhsMIM.roa (hash: 3WvqYw5JMN4YjvZ1NiX0P+kYI8s3F0qbFTABgvWybUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cc:14:e1:d0:64:54:70:42:29:96:8a:fa:49:66:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Sep  4 19:01:26 2026 GMT
            Not After : Sep  5 19:01:26 2026 GMT
        Subject: CN=b4d52f3cca15169bf754a0c983c46d742e210310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:82:a7:25:de:ae:13:da:e1:c3:08:a0:56:
                    c4:94:da:7e:33:ef:3d:95:2d:f6:9d:16:32:6f:b3:
                    e6:95:e2:e8:cc:c6:97:19:54:9b:31:39:f2:9e:e9:
                    94:d7:6e:b4:6e:28:4c:e2:00:40:c4:41:94:7a:d9:
                    cc:96:f9:8e:b3:52:29:d7:a0:c2:1a:98:c9:6d:e8:
                    0e:b4:97:9a:76:98:7c:28:0c:1f:ab:88:16:5a:24:
                    60:1c:62:11:cf:81:43:ba:cf:f3:6f:a8:f7:ea:9a:
                    17:f3:95:8d:6b:fc:56:de:9c:65:2d:40:e0:27:2c:
                    c3:34:f6:00:cd:14:d8:86:dc:ef:f7:df:e8:a6:89:
                    f5:1f:c4:c0:4f:d8:48:af:2a:ca:60:52:32:1a:d2:
                    20:07:aa:56:94:a3:a8:0f:54:37:72:1d:54:ca:0e:
                    a5:c4:e4:69:a1:1e:aa:b3:f8:b7:fc:28:45:7a:8f:
                    4b:43:9b:52:5d:99:0c:8f:9b:dd:9b:f1:bf:6e:cf:
                    bf:0c:e1:39:9a:d4:67:75:d0:64:28:a1:7f:30:58:
                    51:09:d8:60:dc:1a:12:50:2f:06:86:c1:3b:c8:00:
                    eb:1e:4c:6d:8e:35:23:7a:7f:03:4c:96:95:34:cd:
                    cf:0a:9d:68:cb:59:33:7d:df:fa:4a:d5:06:11:28:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:2F:3C:CA:15:16:9B:F7:54:A0:C9:83:C4:6D:74:2E:21:03:10
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:ee:86:57:b9:c3:c8:39:e8:79:84:39:c7:4e:36:2a:c1:
         61:04:11:cf:b6:08:a1:bf:82:8d:2e:8c:72:4f:92:7d:b2:de:
         16:02:06:23:d7:6f:9d:42:f7:f7:e9:b6:cb:d4:52:00:78:64:
         5e:ce:bc:e3:46:09:f9:e6:c7:82:59:46:a4:9c:81:77:51:e8:
         53:8f:82:ac:55:cd:c1:6e:3a:a7:3f:cd:6c:2f:48:b6:e4:d0:
         24:b9:19:3e:23:93:72:32:0c:12:45:8a:42:e0:e6:d9:fa:17:
         5d:08:2a:88:80:e6:5b:3a:5d:b7:00:6e:0d:0e:ec:9c:c4:5d:
         e9:ba:a6:35:66:6d:0b:6d:47:46:f9:ed:35:f9:e8:f8:7c:2f:
         08:79:1f:b0:dd:bd:55:e3:ed:a8:0e:b0:e5:ce:86:0a:8d:a2:
         f0:f9:63:79:bc:83:93:9a:c8:f2:dc:3b:49:ef:36:42:18:46:
         92:b4:81:b8:fc:e2:b1:bb:14:de:8e:56:07:4d:99:52:98:a4:
         10:8a:03:39:5c:51:55:9a:48:5f:bd:60:48:c6:4e:b3:60:97:
         ae:5f:0d:3a:60:8b:22:16:ba:ce:91:2e:99:53:9b:c2:7c:bd:
         4f:5b:77:7e:83:35:b4:8c:53:24:0d:f3:1c:84:e9:64:92:98:
         54:28:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:22:41 2026 by rpki-client