Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          agoLWa3DTN2VMeIInNFUZrYjlugIMCAAECJTi7a+rCI=
Subject key identifier:   59:70:92:DA:39:EC:82:F5:7D:D8:1E:35:60:12:C5:62:DC:16:2A:10
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       019F95B79E2C58CC39AC75C83152C708C0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1A40
Signing time:             Fri 24 Jul 2026 20:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:06 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          13: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          14: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          15: J68_9Qnogqu4jKJivniTi4srlPw.roa (hash: ByPXDVPbgAkUrv0lsY2eYA3GFGZu05MRA9WYa9fH2qw=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: M9anYHQf8H/BXjccN9IRev6cr9J9UgQV124/HyOpX1o=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:9e:2c:58:cc:39:ac:75:c8:31:52:c7:08:c0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Jul 24 20:01:06 2026 GMT
            Not After : Jul 25 20:01:06 2026 GMT
        Subject: CN=597092da39ec82f57dd81e356012c562dc162a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:24:57:9c:26:84:f9:97:92:42:b7:90:04:
                    fc:40:e1:e6:eb:26:85:9d:21:13:03:2a:49:14:b2:
                    66:5f:4f:64:9e:cb:4f:d6:62:b7:ae:ec:9b:f3:06:
                    98:69:09:d4:41:8a:b6:32:ee:90:f5:67:69:28:82:
                    f3:61:51:de:dc:d1:f9:bd:48:bb:83:1a:c1:ab:46:
                    2c:f7:d8:77:18:b2:38:4f:72:0c:f4:60:ae:06:99:
                    22:59:28:b9:67:f9:ab:96:be:eb:5c:a0:fd:2b:6a:
                    c9:af:aa:7c:0a:5b:ca:35:8f:44:12:79:23:75:4c:
                    84:a8:76:e7:45:58:80:ff:67:fc:6f:a5:44:bc:31:
                    e4:20:15:69:a5:20:48:9d:52:be:66:f6:3b:c5:30:
                    03:90:cd:d3:b7:5d:31:3e:13:92:bd:a4:82:81:6f:
                    f6:7f:73:d8:40:94:f0:a4:3c:54:a7:b6:9b:d9:c0:
                    e2:53:b5:5b:52:b3:62:dc:58:a7:d7:d4:d8:fd:55:
                    50:00:f1:b1:f4:ec:ac:b6:76:59:fb:9a:b9:11:cd:
                    79:74:36:e0:38:1d:a9:36:ea:c3:bb:91:4d:95:90:
                    d2:78:4b:46:c4:45:92:3c:99:a5:7c:04:19:e5:0b:
                    82:78:81:3a:01:13:79:c6:1f:ad:0a:b3:dc:79:b0:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:92:DA:39:EC:82:F5:7D:D8:1E:35:60:12:C5:62:DC:16:2A:10
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:45:e8:3e:a3:90:c3:61:7f:d7:ac:fa:be:7d:4f:7d:50:
         0b:14:66:35:a5:14:97:68:64:a3:c8:47:87:6f:4d:db:71:b9:
         ea:92:aa:b2:f7:c1:91:a7:01:55:4f:98:24:ac:c4:4d:05:af:
         15:16:b8:fc:93:66:b4:6a:ba:fd:28:9d:5e:ba:52:d6:9a:50:
         80:3a:b6:cb:72:ab:62:8a:96:1b:27:85:0f:29:0e:ba:00:a7:
         77:d9:16:de:7b:76:77:33:3a:af:ec:21:89:5a:e5:32:32:b9:
         03:dc:44:43:08:35:28:e6:7c:0a:93:fe:24:c2:64:07:5a:ac:
         33:23:cc:7b:91:ee:47:39:6a:08:84:ba:96:47:c2:26:78:0f:
         b9:e6:27:fa:56:eb:98:2f:ee:4a:3e:65:ab:9a:54:a4:8e:8c:
         25:ca:49:d1:a1:7d:20:ec:06:b9:b3:0d:6d:08:db:5a:bf:d7:
         ad:6d:1d:cd:a5:9e:2f:18:f1:98:a4:3e:15:7b:d4:f6:97:36:
         86:3b:2c:b0:50:29:9b:16:ef:12:19:a2:bb:c1:d8:59:03:2a:
         a5:d7:df:ab:96:ef:3e:1b:b5:79:aa:ea:5f:4c:4c:4c:59:33:
         d4:f7:e8:3b:32:ed:09:43:e9:77:ec:d0:db:b5:09:f6:c5:d6:
         36:07:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:09:28 2026 by rpki-client