Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          AkJtN4GotheM2UJtir1OBgrEb834UXVYbInvh2lpvPM=
Subject key identifier:   EA:43:9E:EA:6A:36:E1:64:7B:16:65:7C:C2:1D:47:D1:8A:83:FD:FA
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       019E9BBBF40B09A75DEBA9476CB9F9D17716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          16DA
Signing time:             Sat 06 Jun 2026 07:00:46 +0000
Manifest this update:     Sat 06 Jun 2026 07:00:46 +0000
Manifest next update:     Sun 07 Jun 2026 07:00:46 +0000
Files and hashes:         1: 3UvEih8-gDgZZkcxbDbZU_-xI6E.roa (hash: VuzKrkhER2kIA+fzK85yXqMS//LI0xMOk1j2vnId0Ds=)
                          2: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=)
                          3: 5o5yOlT5KWJLrkgldZ97edML4GU.roa (hash: +3UdFZfWiCIe+RhRbxox53Z+4srFMvwoePbRQm25M3w=)
                          4: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=)
                          5: BQ0RNeEd2nooqfArADd8yM6I_Io.roa (hash: ZaT427CaBzYZ0RQvh3ehzT3L35vHp5zYW9kBnpxxtjQ=)
                          6: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=)
                          7: FhskbKXZIncjnAG2H1L_9TxK6BE.roa (hash: Sragfkj84y+IUdSKaepdgmlgjMpXL9BU37PIaA7Ug9k=)
                          8: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=)
                          9: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=)
                          10: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=)
                          11: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=)
                          12: acrLlh2bffixlJwIk38uqcoaM3U.roa (hash: 8VJekl0fJNzL7/mrVZ7IvSwSX3xru+t1pg5R0/MlHXs=)
                          13: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=)
                          14: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: bQNkvw5YEBCqk3faBnb0V1zsoAVJJf/4ckRsFrZsjaA=)
                          15: enacwQjrHGHbnpi7_-gwQ7mFufI.roa (hash: Hal2kcsISX9CHUGZ6KCu3tfmEsKWVwE7hN1Orwz+fBM=)
                          16: lzu4y4Q9shg3DRtmoqkB30BoyZg.roa (hash: 9Emdq207YisuGB08EG5mDj1cnqOhy/o2dL8p/ARvqCg=)
                          17: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=)
                          18: ra7_KZEiDFEgBecljzzMSndphEo.roa (hash: mMCalNTgwgkZZuIBEJzs38izbqU0jTo1vgd1t6aK83U=)
                          19: staIgaNBCfGwXzlkjUO0p9RMsoA.roa (hash: H/W95iy+jwLHlEPU4DUHGctsr9ImiAncq5rcWCzt2m4=)
                          20: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=)
                          21: wo7HMWTKzL4KQH_XmOyP9W3quYk.roa (hash: 6SRDl+MUI69wFuXIlfVF5E1JYaN4fy+QYftcn1Ok0k0=)
                          22: yGCnvxgCyXwx49hD9VXIdTQinr4.roa (hash: R0GWLFctuLdH9pM10rtgW4/R6oZFjcxyRhEiFyXt+X0=)
                          23: z4hVox_1YMjCdj0pv1ovoZhsMIM.roa (hash: 3WvqYw5JMN4YjvZ1NiX0P+kYI8s3F0qbFTABgvWybUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bb:f4:0b:09:a7:5d:eb:a9:47:6c:b9:f9:d1:77:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Jun  6 07:00:46 2026 GMT
            Not After : Jun  7 07:00:46 2026 GMT
        Subject: CN=ea439eea6a36e1647b16657cc21d47d18a83fdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:9d:d8:08:9b:70:81:ee:7f:36:bb:ae:24:
                    09:37:a7:c1:99:fc:23:45:5b:96:ac:8d:a8:0a:b5:
                    b9:74:f8:70:31:de:bb:33:dd:1f:e1:0e:38:95:0d:
                    e9:e1:0a:e8:3d:1a:05:53:34:84:05:7a:c5:86:ce:
                    14:9d:89:eb:b3:47:6d:57:33:7e:56:26:74:14:a2:
                    ce:1c:f9:e1:be:57:a2:fd:93:63:3f:72:c7:39:cd:
                    60:62:e2:f6:16:82:13:d9:03:43:eb:c7:12:50:ac:
                    85:d0:3c:55:b5:c6:ff:09:02:9d:63:19:68:e4:76:
                    66:8b:03:75:17:98:f4:02:4f:3f:22:97:7d:a7:2b:
                    44:85:b0:18:40:4f:5d:3c:ac:b1:38:a4:79:7a:14:
                    5e:40:ec:aa:5f:1f:7a:cb:a1:95:91:6d:d8:4a:03:
                    da:7f:8e:7e:a1:29:b7:9c:4c:90:11:94:b9:3a:d4:
                    31:f5:af:dc:1f:0d:4f:73:a2:d3:95:63:f1:cc:ab:
                    2f:5f:8b:83:13:3f:f3:84:05:0b:2d:0f:d1:80:58:
                    df:d3:5e:d5:29:51:5c:3c:d7:16:99:72:d4:7b:0a:
                    a3:46:d6:32:ec:8f:c2:ea:98:00:d6:d4:80:42:62:
                    ef:3f:fe:a7:d0:e6:13:c7:07:4d:c6:e5:3f:3b:bb:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:9E:EA:6A:36:E1:64:7B:16:65:7C:C2:1D:47:D1:8A:83:FD:FA
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:15:a4:00:4a:fa:f5:f6:a8:40:c4:17:4f:45:29:a4:bc:6d:
         89:a0:df:40:06:4a:34:fd:c5:de:b8:d9:c7:25:50:4f:13:e5:
         04:6b:69:29:9c:be:e4:4f:d7:1b:58:15:d7:98:61:4e:62:bc:
         32:2b:60:48:17:4a:e1:e2:2b:23:35:02:12:fe:24:41:e5:bd:
         a6:48:6d:3f:a7:92:03:04:90:b8:4c:64:36:01:60:ff:3e:0f:
         6e:47:90:cf:fe:8d:a9:f5:a8:d0:f5:c3:40:14:d2:be:c0:cf:
         e8:6a:b3:7a:a1:83:19:2b:07:2c:46:3b:b1:de:c9:79:f3:fe:
         9b:d0:b4:2f:de:40:86:c5:93:9d:40:ef:73:b8:cf:d1:92:c7:
         b7:a4:d2:fe:1e:64:a3:b4:b9:5a:25:34:4e:72:b8:df:af:a2:
         8a:94:93:ed:35:fb:82:4b:5c:e9:47:10:5b:7c:6d:02:5a:67:
         54:e6:88:fb:a1:c6:bf:c3:5a:41:ab:be:2b:ca:74:8d:ad:76:
         e8:a8:e2:37:a4:af:33:e9:cb:2c:56:ff:fe:32:96:3c:e5:5a:
         92:a7:a1:82:4c:5b:88:df:53:8c:57:0a:36:e6:9b:75:13:aa:
         f8:e4:be:4b:2f:80:e4:a2:cd:db:f4:e3:57:8e:6d:a8:a7:52:
         20:3a:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:13 2026 by rpki-client