Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          +6xYQo9xUyTpcZwKt5QTWUowC4VM+x50XeH8+8JHfKA=
Subject key identifier:   E4:08:2E:15:65:D8:77:C1:35:93:98:35:E9:CD:69:0A:AB:64:C0:2B
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019F9E15904144AE2F61E18774A1DD317F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          14FD
Signing time:             Sun 26 Jul 2026 11:00:41 +0000
Manifest this update:     Sun 26 Jul 2026 11:00:41 +0000
Manifest next update:     Mon 27 Jul 2026 11:00:41 +0000
Files and hashes:         1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
                          2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
                          3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
                          4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
                          5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
                          6: JFd9BHy0Nxa89upjrAgFVTR3EO4.roa (hash: Jkab6LW8tUPmu7eFr3Cbffo3EOm9TOdlDCvxF4uia6E=)
                          7: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
                          8: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
                          9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
                          10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
                          11: dS0fvHXBhFw8I4isU2XioLXpRxM.roa (hash: 5TqIfIhP/SO9ksAoUP3Ktq7aWt1McVI3y+SBhdLlUlQ=)
                          12: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
                          13: fJS637JzUY9ugv22p8_OUjWaiaw.roa (hash: 0k+9V5c/ReVam6mmzzfcrumGw60s8Iaw9s34MK/6hIU=)
                          14: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
                          15: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: SvYr/aMS951Tz2ujyaLJjKnyqtRkESnQDos1cmgs35M=)
                          16: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
                          17: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:15:90:41:44:ae:2f:61:e1:87:74:a1:dd:31:7f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Jul 26 11:00:41 2026 GMT
            Not After : Jul 27 11:00:41 2026 GMT
        Subject: CN=e4082e1565d877c135939835e9cd690aab64c02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:56:72:2c:c7:4f:61:97:ed:ba:51:0b:66:
                    6b:3a:be:98:5a:43:3c:d8:ff:d0:40:c7:2a:4e:9b:
                    8d:36:5b:cf:ca:0c:61:ba:49:46:1a:48:d5:24:fa:
                    90:50:6f:ce:13:e9:a6:7a:11:6f:f2:f4:93:23:36:
                    ff:fa:87:7c:a1:0d:84:ca:f8:f9:b1:39:dd:5d:14:
                    f2:e5:5a:59:fe:a1:03:2f:8b:0a:de:a3:90:e5:aa:
                    40:cd:d4:6e:ff:80:2e:10:63:a1:d1:7c:ca:3c:c9:
                    a8:41:00:52:8a:40:ff:2d:37:46:e6:c1:72:46:a8:
                    8d:03:17:b0:0a:10:4c:f2:d7:eb:5c:75:ea:ca:3f:
                    99:60:28:50:9d:1d:a4:b9:16:99:27:e8:2d:97:70:
                    1a:0a:7b:08:68:0f:4a:8e:49:2b:17:6f:f3:39:f4:
                    37:6e:70:94:59:59:6e:08:0c:13:6b:78:28:86:31:
                    23:1c:47:a4:8e:d3:7f:11:6c:1a:94:39:60:3c:65:
                    43:a0:af:43:f3:ca:ca:db:d2:f0:2d:06:d2:49:01:
                    f6:98:ca:d3:94:ff:35:7f:b8:c6:89:ec:40:61:d4:
                    e6:aa:7b:23:91:ad:5e:ef:5d:2a:fd:00:38:49:95:
                    4b:79:fb:4c:15:14:19:47:22:94:d2:a2:f9:39:f1:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:2E:15:65:D8:77:C1:35:93:98:35:E9:CD:69:0A:AB:64:C0:2B
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:1e:c7:fd:ad:de:57:3a:dc:f0:8d:d0:38:87:e8:e6:88:
         d1:bb:5c:c5:63:61:e6:4a:cc:2e:43:41:df:b9:9d:8b:73:7b:
         f0:de:41:31:5b:0a:45:b3:e6:52:53:8b:20:ff:05:03:c1:22:
         f5:ca:b1:2a:ac:28:b3:70:24:48:cc:dc:ea:c9:17:29:6d:fd:
         33:c8:70:4f:24:b0:f6:82:ba:6d:a6:65:ce:7f:d6:18:87:72:
         10:cc:02:42:11:c5:29:05:9f:62:6e:73:00:db:95:e2:96:1c:
         21:fb:09:55:d3:a7:47:36:98:b7:a3:11:ce:09:57:15:51:f3:
         ef:95:ec:d1:6a:b3:e8:93:f5:cf:3f:09:fc:c8:c7:84:55:56:
         22:a1:5c:82:be:98:99:6c:64:39:b6:6e:82:11:cc:90:30:9b:
         21:75:b2:a3:86:5c:68:aa:54:11:ce:cc:49:99:b6:1b:7d:3f:
         27:9d:12:b0:08:ef:58:20:83:6e:f2:7e:a4:55:2b:6e:51:84:
         ad:d1:67:24:44:07:6d:2c:04:00:38:88:17:46:08:e0:f2:af:
         fb:8a:68:74:c6:f4:fc:ff:14:02:df:7c:09:4d:03:ad:fe:b6:
         46:65:f3:dc:ec:2e:89:d5:f0:62:97:f0:b7:0a:c7:e7:cc:ee:
         2b:23:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:54 2026 by rpki-client