Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          pS837cp0NZXjdAlGKOBYQW54CXZzdXr3mUTHH+3WOcc=
Subject key identifier:   EC:0C:EE:D6:44:43:22:EE:E7:8A:70:4A:3D:4E:75:DA:0A:FD:CD:71
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       019FA0E034E2F0BD3F268D949F89590F0F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          19EE
Signing time:             Mon 27 Jul 2026 00:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:15 +0000
Files and hashes:         1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=)
                          2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=)
                          3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=)
                          4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=)
                          5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=)
                          6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=)
                          7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=)
                          8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=)
                          9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=)
                          10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=)
                          11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=)
                          12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=)
                          13: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=)
                          14: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=)
                          15: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=)
                          16: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=)
                          17: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=)
                          18: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=)
                          19: c7r0L2ENZSmqzGht-gN0WK2wO-w.roa (hash: qscdcuXNHP5xr9NKr0pzszSsGawZRBL4L0aRxzbki3I=)
                          20: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=)
                          21: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=)
                          22: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=)
                          23: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=)
                          24: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=)
                          25: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=)
                          26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=)
                          27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=)
                          28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=)
                          29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=)
                          30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=)
                          31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=)
                          32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=)
                          33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=)
                          34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: TtzoudyhwBiSyBjdMGsmcsYb+2YhPbQQ+qAllQFCERo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:34:e2:f0:bd:3f:26:8d:94:9f:89:59:0f:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jul 27 00:01:15 2026 GMT
            Not After : Jul 28 00:01:15 2026 GMT
        Subject: CN=ec0ceed6444322eee78a704a3d4e75da0afdcd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:14:ff:73:fb:f4:0c:7f:35:fb:7d:34:e3:
                    95:d7:a5:99:cb:80:1b:15:64:b6:07:d5:93:27:7e:
                    88:25:b8:72:46:82:b6:08:82:6a:b1:d5:03:8d:be:
                    be:50:a6:eb:3b:76:e8:84:fc:06:d1:fc:cc:98:38:
                    f6:b0:b6:d3:9b:3a:e3:38:6a:0d:1b:73:93:91:ff:
                    2d:c5:5c:a2:54:c0:8a:ca:46:fd:a5:23:85:00:07:
                    9a:67:6a:2f:ce:03:51:93:32:96:ee:62:3f:f3:19:
                    23:ba:f6:8b:cd:fb:72:bd:e7:65:d6:ee:ae:1e:d5:
                    1d:66:96:e7:2b:68:aa:00:1d:38:91:c4:4e:b0:5d:
                    6a:48:71:68:cb:6f:f3:40:79:61:1d:08:b4:10:da:
                    a9:d0:19:d5:e2:74:04:58:0c:7a:37:14:3f:bd:72:
                    47:0a:e2:f0:94:d4:bd:07:58:f1:98:4b:ba:46:95:
                    d5:11:2d:1f:bb:b7:c3:6f:86:6f:31:1c:9d:8c:04:
                    18:d2:a8:28:d3:8a:eb:93:8c:dc:fc:69:30:9d:04:
                    33:cc:24:39:14:c5:5f:43:d8:8f:32:17:db:3d:10:
                    2a:46:a3:7d:e5:a4:1b:da:fd:98:76:78:3d:17:58:
                    83:69:36:22:4f:47:fa:a3:9c:3e:1f:ab:da:f7:46:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:EE:D6:44:43:22:EE:E7:8A:70:4A:3D:4E:75:DA:0A:FD:CD:71
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:21:7e:17:f8:84:24:bc:2a:d6:04:b6:02:df:cd:3b:90:
         00:f4:1a:7b:cf:32:2c:66:7e:72:9d:28:68:93:d8:dc:7b:30:
         8c:1f:18:49:ba:b2:07:21:a7:92:14:74:dc:01:50:b8:63:24:
         d0:99:30:b9:cd:68:b7:1d:e4:cc:0a:a7:ed:53:ab:f1:5f:47:
         67:7a:5c:e8:c3:bf:d0:83:5c:33:7a:c9:09:a4:83:e3:af:a8:
         64:2f:a3:dc:1e:ad:a0:86:c3:9e:60:a1:10:b8:a3:a3:58:ce:
         47:7b:7c:be:60:0a:fd:8f:17:47:b0:b5:66:b0:f6:fb:2a:df:
         b1:5e:64:db:97:9b:a4:dd:26:ab:e5:00:43:6c:91:70:56:c7:
         49:44:de:e9:86:83:f0:61:0c:fb:84:2e:62:de:d1:a2:f8:5b:
         2b:81:c7:69:e4:71:0a:60:0d:17:fb:ad:e6:ea:97:2a:7f:1c:
         06:58:3b:cf:09:00:55:2f:68:b3:25:8e:fd:87:c9:7a:05:1f:
         a0:f1:11:f6:8f:e3:5e:98:8c:33:32:82:79:99:21:93:3f:b1:
         84:a8:34:ff:57:0e:8f:91:c5:a1:06:fa:38:44:6a:4d:a4:d6:
         4c:d6:2c:79:ac:fb:bb:b7:7b:28:aa:86:a8:e6:2d:d2:58:24:
         6c:96:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:31 2026 by rpki-client