Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          KLWBDQC9/R8kf1W+2nasK7eUQ8zeEV4Pa39lao3gRDg=
Subject key identifier:   85:BF:FB:C2:8A:F1:19:1F:9A:78:81:47:8A:55:0A:ED:5B:65:C4:64
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019F831D2A535E15AB88990306598FA302C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          0418
Signing time:             Tue 21 Jul 2026 05:19:14 +0000
Manifest this update:     Tue 21 Jul 2026 05:19:14 +0000
Manifest next update:     Wed 22 Jul 2026 05:19:14 +0000
Files and hashes:         1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          4: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          5: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          6: KZi8STSDP6vvx7Kpqw6Ge3WBVoM.roa (hash: tQyZ1Rw3/a95g9YOod4kljPDOGij47kLSXlL5CrRy1w=)
                          7: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          8: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
                          9: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          10: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          11: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
                          12: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
                          13: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          14: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: Y/B1ikaqwcybFdjhY30WRVHgSBlPqDmMZCqLt7uyM4w=)
                          15: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          16: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
                          17: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
                          18: zfKx00s8GmNdr-gpOV4uSxk2_RY.roa (hash: 1Py/XVwmGf8udcwbvhAsqk0CSdAhRehMyDOi6+cco/E=)
                          19: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:1d:2a:53:5e:15:ab:88:99:03:06:59:8f:a3:02:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Jul 21 05:19:14 2026 GMT
            Not After : Jul 22 05:19:14 2026 GMT
        Subject: CN=85bffbc28af1191f9a7881478a550aed5b65c464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:9a:09:fd:0e:fa:42:dd:b3:47:5f:3d:60:
                    86:c4:77:9b:bd:aa:ad:58:88:49:6a:24:a0:00:13:
                    db:62:9d:dd:ef:0d:0e:1c:de:92:6e:c9:87:fa:5b:
                    94:c9:1c:7d:fd:b8:5b:8e:a9:59:95:40:53:5b:4b:
                    c3:40:fa:a8:c0:b2:6b:70:41:51:81:d9:bb:ee:dc:
                    1e:9a:a5:59:b6:6c:af:fd:30:7a:c7:1b:f7:cd:d0:
                    7f:b2:38:d6:e4:cc:27:18:0d:ea:2b:43:3f:6d:40:
                    88:aa:c3:97:4a:30:3d:e5:7b:80:7d:f7:ac:d2:87:
                    58:9d:1d:05:a6:67:03:16:15:c7:b4:77:65:46:bf:
                    ef:d2:43:21:53:4f:12:05:cf:54:42:27:1c:1a:19:
                    49:5d:6b:2d:38:c0:df:d6:4d:9b:36:a9:3c:59:04:
                    14:b4:c9:08:58:41:33:31:dc:dc:c7:d7:72:a7:65:
                    cc:24:ea:34:79:4c:b2:84:51:8a:09:41:fe:bc:62:
                    e7:d9:30:bf:aa:59:1d:d5:07:8c:20:0a:26:85:bb:
                    ec:0c:80:96:10:78:17:55:ed:69:6a:65:4f:77:ee:
                    c0:be:bd:2c:a1:8e:9f:aa:00:4b:4a:b8:da:8a:fa:
                    8c:48:09:64:6e:c1:1c:e6:0d:46:6d:15:57:3b:21:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:FB:C2:8A:F1:19:1F:9A:78:81:47:8A:55:0A:ED:5B:65:C4:64
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:8c:56:e1:af:6f:59:f2:77:c0:cb:28:fb:7d:7e:5b:70:
         70:e7:7f:f1:8c:d1:ea:9e:fc:0e:df:8c:52:ae:79:cf:e1:c1:
         48:6d:59:c6:0b:5f:30:6d:3c:9b:fc:bd:7e:8d:fb:a1:02:2b:
         dd:ec:36:a6:77:8c:ea:e2:51:84:e9:f4:85:99:82:84:91:ff:
         1c:91:7c:81:79:b4:c7:d5:0a:02:80:c2:80:fc:a2:70:06:b9:
         59:69:ed:19:3b:3c:db:7d:f3:54:d1:24:e4:d4:ba:10:34:37:
         33:5c:3b:63:b3:af:d3:6d:f6:5e:8b:24:6f:60:ab:cf:ad:e5:
         1f:3b:7a:15:fe:b6:7b:0c:19:62:dc:f3:5d:c0:e0:09:33:96:
         2e:02:89:3c:30:2a:0f:a5:f5:31:cb:12:25:31:e0:6e:74:d2:
         e4:eb:5b:b9:6b:ee:ad:c1:4f:08:2e:ad:80:5d:85:a1:34:c6:
         3c:2c:57:9f:92:4a:7c:3b:18:d0:af:26:db:e6:21:d8:62:cc:
         1e:51:e1:d6:47:6d:e0:f9:60:97:41:8c:21:dd:4e:05:b5:a5:
         20:ea:27:96:3d:6e:c9:f5:61:42:c4:53:40:bb:ce:2c:6d:04:
         96:21:12:1e:31:98:81:8c:60:24:9f:54:e8:f0:82:7c:c6:b4:
         b3:41:11:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DHSpTXhWriJkDBlmPowLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwNzIxMDUxOTE0WhcNMjYwNzIyMDUxOTE0WjAzMTEwLwYDVQQD
Eyg4NWJmZmJjMjhhZjExOTFmOWE3ODgxNDc4YTU1MGFlZDViNjVjNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ECaCf0O+kLds0dfPWCGxHebvaqt
WIhJaiSgABPbYp3d7w0OHN6SbsmH+luUyRx9/bhbjqlZlUBTW0vDQPqowLJrcEFR
gdm77twemqVZtmyv/TB6xxv3zdB/sjjW5MwnGA3qK0M/bUCIqsOXSjA95XuAffes
0odYnR0FpmcDFhXHtHdlRr/v0kMhU08SBc9UQiccGhlJXWstOMDf1k2bNqk8WQQU
tMkIWEEzMdzcx9dyp2XMJOo0eUyyhFGKCUH+vGLn2TC/qlkd1QeMIAomhbvsDICW
EHgXVe1pamVPd+7Avr0soY6fqgBLSrjaivqMSAlkbsEc5g1GbRVXOyEdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW/+8KK8RkfmniBR4pVCu1bZcRkMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLKMVuGv
b1nyd8DLKPt9fltwcOd/8YzR6p78Dt+MUq55z+HBSG1ZxgtfMG08m/y9fo37oQIr
3ew2pneM6uJRhOn0hZmChJH/HJF8gXm0x9UKAoDCgPyicAa5WWntGTs8233zVNEk
5NS6EDQ3M1w7Y7Ov0232Xoskb2Crz63lHzt6Ff62ewwZYtzzXcDgCTOWLgKJPDAq
D6X1McsSJTHgbnTS5OtbuWvurcFPCC6tgF2FoTTGPCxXn5JKfDsY0K8m2+Yh2GLM
HlHh1kdt4Plgl0GMId1OBbWlIOonlj1uyfVhQsRTQLvOLG0EliESHjGYgYxgJJ9U
6PCCfMa0s0ERZw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:55 2026 by rpki-client