Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          /eb/Isk+XVjmVPkDe3/iSMlNz8dAGFld8V/XGs6ymoo=
Subject key identifier:   F5:A4:A0:C7:47:61:DF:FD:71:FC:57:57:86:57:B2:38:73:3C:08:28
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019F9F5F9457628838CD7DF59B9B4402288C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          16C7
Signing time:             Sun 26 Jul 2026 17:01:08 +0000
Manifest this update:     Sun 26 Jul 2026 17:01:08 +0000
Manifest next update:     Mon 27 Jul 2026 17:01:08 +0000
Files and hashes:         1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=)
                          2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: Kxs7qVE8dMKghcvoDIa94QFbjB5Fzv35VKZBymzVUFE=)
                          3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=)
                          4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=)
                          5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=)
                          6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=)
                          7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=)
                          8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=)
                          9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=)
                          10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=)
                          11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=)
                          12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=)
                          13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=)
                          14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=)
                          15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=)
                          16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=)
                          17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=)
                          18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=)
                          19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=)
                          20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:94:57:62:88:38:cd:7d:f5:9b:9b:44:02:28:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jul 26 17:01:08 2026 GMT
            Not After : Jul 27 17:01:08 2026 GMT
        Subject: CN=f5a4a0c74761dffd71fc57578657b238733c0828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:f5:3e:f7:3a:ad:02:07:13:5a:1e:64:dc:
                    44:cb:1c:2e:0c:37:77:6d:cd:60:54:f0:0d:59:2c:
                    72:a3:34:69:49:f5:35:32:d0:ca:22:85:9a:31:40:
                    44:6b:c4:a0:19:04:1e:bf:9b:bb:df:2d:bc:30:70:
                    97:c5:06:bd:59:60:29:40:35:90:fa:ee:a1:53:8c:
                    37:44:15:b7:ee:23:be:1c:31:88:16:60:ed:09:bd:
                    46:ac:ac:3d:82:21:92:55:ce:b8:b6:c5:b4:d4:53:
                    07:5b:e8:7a:aa:57:9a:9d:06:fe:32:90:1b:dc:c8:
                    d3:a3:b7:f7:55:ef:b0:20:5a:5f:95:a8:0f:9b:66:
                    4b:8f:07:e0:0c:a2:f8:09:2a:cc:d1:fe:8e:46:7e:
                    a1:1c:d7:b6:61:55:59:85:0e:63:a7:05:c0:a0:be:
                    40:e0:88:3e:dd:d7:f3:fd:cb:5a:41:93:d3:c4:90:
                    d1:5e:be:f6:49:f8:7a:11:74:a9:de:24:0b:bd:38:
                    3b:be:da:f6:89:18:0c:da:fd:53:40:3f:99:4c:92:
                    68:b0:e9:a5:a7:e1:73:32:59:ca:98:df:0a:b3:5e:
                    df:14:dd:fe:a7:9a:d9:7a:d1:0e:d3:9c:02:e7:36:
                    ec:67:fe:37:22:b1:38:5f:d4:aa:69:32:b4:3c:f7:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:A0:C7:47:61:DF:FD:71:FC:57:57:86:57:B2:38:73:3C:08:28
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:d5:89:6b:ef:df:26:aa:32:19:67:de:66:b1:db:a9:06:
         4c:79:d5:4e:41:84:0e:12:34:06:cd:87:a8:ad:59:c1:ac:47:
         64:11:dd:3f:39:c6:cb:56:80:79:05:b8:e2:c5:15:f2:8f:f4:
         9a:bf:8c:f9:d2:6a:ea:96:28:41:e9:67:d7:06:4a:26:cb:b2:
         e5:fc:fe:2c:b1:1b:ce:16:2d:4a:22:e3:64:83:a0:6c:d6:37:
         4b:26:ad:8d:47:53:96:a7:33:e8:a9:d6:9f:20:1b:c8:9d:18:
         e9:4c:87:05:1d:16:5c:aa:ae:fe:56:cd:6a:aa:77:e2:3a:2b:
         59:a3:ee:e5:ae:25:cf:14:8a:24:48:d5:2b:2a:d7:8c:40:4a:
         2e:a5:9b:81:76:25:d2:b4:4e:b4:00:83:b9:ba:8a:4f:4c:65:
         7e:61:1d:04:17:98:2c:be:9f:8e:a1:52:49:24:d3:e0:81:24:
         8f:e4:a4:8f:5e:b5:a6:67:36:a4:c6:8b:5a:ea:2f:f3:fe:4d:
         25:61:21:37:30:25:b0:7d:85:48:59:a6:ab:3a:1c:ec:54:8a:
         eb:cf:24:7d:da:4a:be:4e:d6:23:86:4b:70:57:b0:51:25:a8:
         a6:49:f8:75:61:cc:e6:ce:4c:16:6a:a0:f4:ce:33:78:77:09:
         57:95:ec:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fX5RXYog4zX31m5tEAiiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjYwNzI2MTcwMTA4WhcNMjYwNzI3MTcwMTA4WjAzMTEwLwYDVQQD
EyhmNWE0YTBjNzQ3NjFkZmZkNzFmYzU3NTc4NjU3YjIzODczM2MwODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o71Pvc6rQIHE1oeZNxEyxwuDDd3
bc1gVPANWSxyozRpSfU1MtDKIoWaMUBEa8SgGQQev5u73y28MHCXxQa9WWApQDWQ
+u6hU4w3RBW37iO+HDGIFmDtCb1GrKw9giGSVc64tsW01FMHW+h6qleanQb+MpAb
3MjTo7f3Ve+wIFpflagPm2ZLjwfgDKL4CSrM0f6ORn6hHNe2YVVZhQ5jpwXAoL5A
4Ig+3dfz/ctaQZPTxJDRXr72Sfh6EXSp3iQLvTg7vtr2iRgM2v1TQD+ZTJJosOml
p+FzMlnKmN8Ks17fFN3+p5rZetEO05wC5zbsZ/43IrE4X9SqaTK0PPfGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWkoMdHYd/9cfxXV4ZXsjhzPAgoMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUvViWvv
3yaqMhln3max26kGTHnVTkGEDhI0Bs2HqK1ZwaxHZBHdPznGy1aAeQW44sUV8o/0
mr+M+dJq6pYoQeln1wZKJsuy5fz+LLEbzhYtSiLjZIOgbNY3SyatjUdTlqcz6KnW
nyAbyJ0Y6UyHBR0WXKqu/lbNaqp34jorWaPu5a4lzxSKJEjVKyrXjEBKLqWbgXYl
0rROtACDubqKT0xlfmEdBBeYLL6fjqFSSSTT4IEkj+Skj161pmc2pMaLWuov8/5N
JWEhNzAlsH2FSFmmqzoc7FSK688kfdpKvk7WI4ZLcFewUSWopkn4dWHM5s5MFmqg
9M4zeHcJV5XskQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:52 2026 by rpki-client