Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          a+UyzJ3RMkuLEy8VcrirguOOozsPd8cq2BR5BxEfrtE=
Subject key identifier:   EE:D8:7D:81:31:D0:8D:28:94:8F:9A:04:E0:97:C5:F4:1F:45:2A:96
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019F9F96744588E401AA52BF4BA64CFCD54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          0DEB
Signing time:             Sun 26 Jul 2026 18:01:04 +0000
Manifest this update:     Sun 26 Jul 2026 18:01:04 +0000
Manifest next update:     Mon 27 Jul 2026 18:01:04 +0000
Files and hashes:         1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=)
                          2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=)
                          3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=)
                          4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=)
                          5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=)
                          6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=)
                          7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=)
                          8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=)
                          9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=)
                          10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=)
                          11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=)
                          12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=)
                          13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=)
                          14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=)
                          15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=)
                          16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=)
                          17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=)
                          18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: I6ofPm8tG6TE2bL/40YO4fhaEyAZLaHb0qJ1v3NMTBQ=)
                          19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=)
                          20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:74:45:88:e4:01:aa:52:bf:4b:a6:4c:fc:d5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jul 26 18:01:04 2026 GMT
            Not After : Jul 27 18:01:04 2026 GMT
        Subject: CN=eed87d8131d08d28948f9a04e097c5f41f452a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:2b:eb:09:46:45:72:62:36:9f:03:8a:4a:
                    f0:2f:4c:1f:6f:cc:88:55:ee:39:4f:cc:5a:d1:8b:
                    63:55:8d:a2:6b:ce:68:47:0e:22:50:7c:f9:0f:f1:
                    3c:af:1e:c6:e4:6b:5d:26:b7:eb:bb:2e:09:9d:84:
                    c4:00:44:d7:8f:53:28:65:35:72:34:a3:b4:bf:58:
                    a7:22:21:f8:3b:b9:c0:92:4e:e7:cf:38:cc:8c:64:
                    bd:02:26:b6:88:0e:9a:70:94:93:2f:91:6b:5d:d3:
                    2b:e6:a3:c9:15:d5:f4:09:84:ff:17:fd:84:dd:85:
                    97:63:ea:f7:eb:81:c3:a2:0a:4d:b6:66:f4:61:a9:
                    2b:93:ec:bf:41:7a:39:71:3f:04:35:6e:91:e3:98:
                    bc:63:f4:7a:39:0d:2a:29:21:d8:95:95:28:ba:b5:
                    d3:5f:c5:92:0b:9e:ed:e9:1e:97:bc:17:34:f8:31:
                    1b:14:23:b6:46:08:24:50:82:3d:59:c6:33:2c:0b:
                    1b:e9:b1:06:45:4b:c9:4e:49:4e:bc:06:d6:09:37:
                    cc:af:2c:8d:0a:15:63:a6:83:d0:4e:cc:fa:a6:f4:
                    a7:0d:a7:33:16:7a:ce:0d:05:41:13:68:38:af:6e:
                    ac:b6:6f:d5:60:4a:d8:85:34:db:6f:ce:f7:6b:36:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:7D:81:31:D0:8D:28:94:8F:9A:04:E0:97:C5:F4:1F:45:2A:96
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ee:4f:db:3f:9e:a8:e2:db:05:06:98:f7:38:c4:a6:af:9e:
         d9:a9:96:bc:b4:f4:da:13:bf:85:d2:41:1c:70:37:5e:1f:2e:
         65:d9:1a:08:02:91:6b:54:a0:41:56:90:f0:fa:68:24:38:33:
         e2:16:39:f2:5c:c7:ac:68:e5:3f:c4:cf:0a:73:a8:80:36:03:
         ad:c1:19:9e:ab:80:20:ed:a2:e7:d1:74:70:bd:0c:9f:c1:12:
         bb:6d:29:d7:03:be:6f:62:50:4c:41:4b:c7:57:e8:a1:1a:60:
         b8:18:4d:43:2c:56:53:c6:63:4c:92:66:bc:f9:b1:60:3e:18:
         7c:f7:2b:b1:5b:54:6e:7e:1a:6c:26:75:f6:9f:b5:4b:d7:de:
         a5:ba:75:1a:44:9f:ec:83:d0:63:8c:40:eb:14:fa:8a:a4:c8:
         ba:89:01:12:74:93:9a:d1:cd:05:72:d4:f0:52:69:f5:3a:f0:
         a0:1d:1c:b4:98:dd:ae:8f:98:d7:df:33:a4:2f:f1:64:af:fa:
         02:ef:5a:51:68:10:ec:c4:10:e0:2e:a4:5b:46:6e:74:34:c2:
         b8:5f:b8:36:26:67:c0:56:e9:6c:4a:90:86:d7:87:06:c5:86:
         1d:d9:3f:97:65:df:93:5f:1f:12:9b:a8:50:a7:b1:f3:fb:3d:
         9b:ef:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:16:19 2026 by rpki-client