Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          Ra41dRiOrU5LpWiblcXR2l0xRkbCifP6azz/GU8tXYA=
Subject key identifier:   C5:9F:B7:7C:15:46:FF:F8:CC:F8:39:86:A4:C9:02:08:0E:40:19:83
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       019EDC53DBCB0DAC2B927957843767DAA691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          14FA
Signing time:             Thu 18 Jun 2026 20:02:23 +0000
Manifest this update:     Thu 18 Jun 2026 20:02:23 +0000
Manifest next update:     Fri 19 Jun 2026 20:02:23 +0000
Files and hashes:         1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
                          2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
                          3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
                          4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
                          5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
                          6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
                          7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
                          8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
                          9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
                          10: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
                          11: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
                          12: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
                          13: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
                          14: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
                          15: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
                          16: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: ikrh3Mx55Pc8kfhOpfU/l+0qjJaygcVvZU4Xy5ZKq+g=)
                          17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
                          18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
                          19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
                          20: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
                          21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:53:db:cb:0d:ac:2b:92:79:57:84:37:67:da:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: Jun 18 20:02:23 2026 GMT
            Not After : Jun 19 20:02:23 2026 GMT
        Subject: CN=c59fb77c1546fff8ccf83986a4c902080e401983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:7c:fd:78:ec:93:4e:ae:8b:dc:c4:cf:77:
                    34:ca:d2:24:ba:cf:29:09:31:50:9c:4b:d3:5c:4a:
                    e1:68:27:5d:be:10:90:bf:7b:fc:97:17:bc:83:86:
                    f0:f6:2d:11:fd:00:98:30:55:84:bb:3a:aa:b6:6e:
                    f0:33:aa:e2:20:9b:44:f9:63:53:36:40:5e:9c:b7:
                    09:6e:a1:67:d0:aa:40:f7:2b:00:9b:0f:56:f5:b5:
                    cc:47:27:8d:7f:e4:5b:cb:f2:67:55:cb:00:da:30:
                    08:5d:0b:6d:2e:af:16:32:94:0f:d2:f8:8f:bd:07:
                    65:07:dd:33:03:7b:26:ab:e1:54:4c:c2:7c:cf:00:
                    eb:1e:cd:e8:c6:eb:a5:b4:d5:ed:ae:30:e7:0d:f2:
                    d2:cb:47:13:ca:b7:c3:b7:40:aa:01:2c:78:81:ff:
                    aa:70:cb:44:dd:3b:10:65:83:13:43:aa:3b:37:25:
                    76:3b:6b:3a:ce:bd:49:ee:7e:3c:3d:27:30:32:4b:
                    1e:d2:60:6e:51:bf:f2:ce:72:f8:14:f8:b3:01:1a:
                    d8:e5:b3:1e:4d:28:ac:85:21:53:5d:4c:e0:a4:5b:
                    00:36:5f:71:91:b9:76:f1:94:e5:45:bf:a1:4a:1a:
                    32:c5:35:4e:59:73:a0:10:14:34:1c:6a:e3:20:19:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:B7:7C:15:46:FF:F8:CC:F8:39:86:A4:C9:02:08:0E:40:19:83
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:5e:bb:54:22:44:4d:e8:8b:2a:7b:4b:c3:d7:7c:fc:45:
         bc:a6:1c:1b:0c:a4:5d:b3:4f:45:b7:d0:59:dd:c9:11:27:2b:
         4b:6e:d1:ea:90:92:86:5a:42:b0:58:e0:0f:8d:77:06:f9:de:
         26:24:34:ed:6e:22:1e:06:4e:de:c7:2f:a5:5b:ec:c5:db:b1:
         33:0c:72:06:bd:ad:2e:2e:71:af:e3:2b:eb:0f:17:27:3a:5a:
         10:dc:4a:a3:2b:bd:20:a8:67:a8:da:a1:95:c5:1e:4d:d8:52:
         bb:96:fa:dc:23:0e:b5:1f:e2:69:a4:e5:ed:09:b7:d5:0c:2d:
         a1:7f:58:b2:1a:f5:b8:98:62:32:3d:d6:7e:b3:72:df:6a:42:
         be:b7:45:87:da:55:e7:75:d1:4e:a2:aa:0e:a6:f9:04:f2:a1:
         1d:01:97:13:cd:45:27:f3:67:2b:1a:e4:ce:55:ae:6a:5a:d1:
         97:54:e6:0b:6b:86:e5:4b:d5:e4:83:75:75:ef:4b:9a:de:21:
         36:2a:e0:f0:bb:ab:7b:49:68:29:f3:6e:ed:1d:0f:cf:0d:4c:
         7f:ca:15:bc:78:7b:54:82:4b:b8:78:e1:70:16:15:38:f4:54:
         67:ac:33:49:ff:bc:85:74:1c:e2:11:25:fa:04:81:1e:9d:d0:
         cf:9d:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 07:38:47 2026 by rpki-client