Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          /fwdyQnOwLL+YWJVubsPd5L9NZN5xRb+6BfeDO3j6DA=
Subject key identifier:   4A:2B:40:5E:98:AB:CE:BD:13:0E:6D:6B:1C:F9:DB:C2:0C:D1:83:2E
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       019FCA138D86EEF912A2FD2142613DDFD9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          1AAC
Signing time:             Tue 04 Aug 2026 00:01:46 +0000
Manifest this update:     Tue 04 Aug 2026 00:01:46 +0000
Manifest next update:     Wed 05 Aug 2026 00:01:46 +0000
Files and hashes:         1: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (hash: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=)
                          2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
                          3: 2KoAgZVTwnbWcixjMbqnJvf6xN0.roa (hash: p0gbt1YvA9hNbGitowNrqQTyinoOy92to8c/+jH2B7c=)
                          4: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=)
                          5: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
                          6: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
                          7: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
                          8: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
                          9: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
                          10: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
                          11: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
                          12: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
                          13: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
                          14: XtF6dx1K_-9E8G1QrrAN0rjOP2E.roa (hash: AEIk+UMFJZOy6fARFY4HiJljniS60LJkRzj37goEaUE=)
                          15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: lxfu8PY9vOIwXodk5+WTFc7YyhYSGGsVGpLnDHp3/Sc=)
                          16: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=)
                          17: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
                          18: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
                          19: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
                          20: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
                          21: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
                          22: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
                          23: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
                          24: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
                          25: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (hash: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=)
                          26: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=)
                          27: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
                          28: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=)
                          29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:13:8d:86:ee:f9:12:a2:fd:21:42:61:3d:df:d9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Aug  4 00:01:46 2026 GMT
            Not After : Aug  5 00:01:46 2026 GMT
        Subject: CN=4a2b405e98abcebd130e6d6b1cf9dbc20cd1832e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:88:da:e6:7a:86:21:4c:32:26:bc:2f:21:
                    a2:08:a4:21:7e:7c:4f:db:79:66:2b:b2:90:ad:65:
                    6e:2f:1a:6e:90:24:50:79:be:e2:c6:e7:f4:97:91:
                    11:51:83:06:d5:a0:ca:51:86:ae:72:35:a3:b4:71:
                    5d:7b:d0:1a:d2:28:bf:1f:1b:62:ae:e0:a5:c8:ea:
                    ba:b3:01:9c:ee:12:82:41:10:a8:91:fa:ac:fb:b3:
                    09:08:ae:f8:57:7d:1f:3f:e9:83:8a:ad:e2:76:62:
                    24:91:1a:07:ae:9d:13:f4:2b:d7:61:4f:2e:89:11:
                    3e:79:c1:7a:b3:2b:18:22:3d:10:c1:c0:7b:87:1e:
                    d4:f4:8f:d4:94:ef:18:13:24:c5:be:88:5f:51:d7:
                    a9:73:21:65:1c:b4:05:72:d5:74:48:3f:fa:f0:4b:
                    ae:c2:1a:73:4b:96:c7:60:6c:90:21:9f:a8:98:09:
                    46:37:7f:c6:58:10:d3:78:47:b2:da:3e:00:4c:cc:
                    df:ee:1a:57:a8:5e:72:3d:1b:11:c5:af:04:69:7d:
                    26:be:20:d6:88:76:80:29:d9:0d:80:45:aa:b3:d5:
                    d2:f5:93:9f:43:f2:13:c2:c9:37:8f:52:d7:8f:64:
                    40:8b:a9:63:21:51:b8:06:d0:85:21:26:bb:e2:38:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2B:40:5E:98:AB:CE:BD:13:0E:6D:6B:1C:F9:DB:C2:0C:D1:83:2E
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:7f:d1:cb:ef:6f:4b:ed:20:6e:da:99:3a:d3:ab:65:c9:
         6a:11:d9:31:8b:1c:71:fc:bd:21:12:af:61:94:8d:12:49:f0:
         17:0b:49:51:4d:d8:25:14:38:fc:34:f2:ab:cf:1b:7c:58:ac:
         85:1f:7b:4e:da:bc:7a:ed:6c:2d:d7:3f:9c:b1:cd:27:86:5f:
         c9:85:ee:68:4d:99:35:ae:77:7b:07:f4:bf:8c:e7:07:13:df:
         fa:7a:e7:b2:50:91:ef:2a:4c:b3:ae:81:1e:dc:11:20:2d:1e:
         20:65:fc:fb:ea:fa:32:ea:e2:eb:a2:fa:4b:e4:43:81:e7:3d:
         a5:0d:52:7b:c5:4d:d1:54:b3:b0:11:d7:82:42:21:84:0b:32:
         b1:1e:a7:4b:c2:f9:ef:80:90:07:b7:7d:57:f7:81:8d:02:56:
         89:c4:4f:79:41:92:a1:02:70:4d:2b:51:15:59:75:e7:ec:ba:
         17:eb:dc:21:eb:30:53:67:18:0e:72:56:27:53:40:39:e3:66:
         32:d3:f4:7b:15:32:8a:b1:ed:81:92:0b:a7:f4:c7:7e:0a:5f:
         24:15:b4:e0:fa:03:cf:8b:32:1c:15:1c:99:14:25:33:88:bd:
         f0:1d:b3:0e:4b:82:c7:50:99:bc:ba:f9:13:87:14:85:82:1a:
         0b:c1:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:46:38 2026 by rpki-client