Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          6NgN194pzTuCr81afljB+GPSn4w8G0Q59q+nRthKcWo=
Subject key identifier:   12:A4:27:10:B2:72:3E:D1:EC:BD:6D:14:5E:90:78:BD:1C:9C:25:79
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       019FA0A87AC4DB2955E0AC1835A9BF20B514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          1367
Signing time:             Sun 26 Jul 2026 23:00:23 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:23 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:23 +0000
Files and hashes:         1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
                          2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
                          3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
                          4: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=)
                          5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
                          6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
                          7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=)
                          8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=)
                          9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
                          10: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
                          11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: vnQ9e2u8N2qR7wFTNlJyfxxjP7h3qxNwqJ1T5zvx5CM=)
                          12: hlXzXwqfKevRV0ZOYD4xuZeyv68.roa (hash: ILiVM3fgCJT+94jYQT8N5fmuGvDZmGhhJIkkPyMYJ8o=)
                          13: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:7a:c4:db:29:55:e0:ac:18:35:a9:bf:20:b5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jul 26 23:00:23 2026 GMT
            Not After : Jul 27 23:00:23 2026 GMT
        Subject: CN=12a42710b2723ed1ecbd6d145e9078bd1c9c2579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:71:46:d3:0b:5a:41:2d:f7:ff:0a:93:ad:
                    23:06:c5:3f:87:ef:35:74:4d:d1:ed:1e:ca:cf:dd:
                    34:16:7d:13:c2:37:ac:23:71:bf:e6:fe:c2:c2:c2:
                    8a:75:35:80:3b:d9:7f:ab:44:63:7a:26:28:17:bf:
                    3d:4d:85:29:f2:c4:1b:6b:e3:40:2a:ea:6f:d3:b0:
                    fc:d7:73:9a:77:6a:33:1b:8e:f3:d2:38:7b:7c:e4:
                    06:24:5e:d7:94:3a:8b:5e:17:13:fa:06:41:a7:77:
                    d3:70:29:e7:2d:92:a8:61:b6:76:75:41:ea:81:72:
                    35:19:ba:6e:72:0b:74:f9:5f:22:09:c0:f6:03:80:
                    4d:52:0d:a3:7e:0e:6e:00:05:53:de:41:87:45:57:
                    f4:b9:b8:88:4a:11:a5:7e:58:be:36:15:b9:a8:3f:
                    40:be:fb:0d:4f:6b:35:95:09:f9:42:33:37:74:8a:
                    16:18:83:4e:d9:51:1a:93:23:93:15:d1:79:59:23:
                    4e:62:0a:e4:5d:ed:f9:db:c6:95:90:ea:70:c3:9c:
                    8d:ca:c0:44:33:dc:06:38:20:ae:91:b9:a4:5f:cf:
                    6c:34:db:cf:f3:db:89:75:05:f8:6a:34:24:3b:39:
                    9d:ed:c3:6d:b2:1c:61:5e:7e:a8:58:72:67:12:d6:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:27:10:B2:72:3E:D1:EC:BD:6D:14:5E:90:78:BD:1C:9C:25:79
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:0b:48:3b:74:ba:de:59:b7:2e:25:1b:e4:8b:cb:76:12:
         14:88:9e:1d:32:2c:b6:ba:62:03:bf:c8:ae:36:79:9a:ee:15:
         3f:51:4d:5e:cb:7b:95:ce:65:35:91:b1:e9:6c:d3:fd:52:d4:
         1b:a7:ac:f7:22:bc:62:f7:73:bb:1a:90:3f:af:90:7f:e5:6f:
         17:a8:38:46:ec:d5:4b:92:40:59:8a:e6:c2:bd:a3:61:34:a9:
         04:71:a0:0c:29:75:69:3e:d0:8d:ff:d4:7d:ec:cd:09:61:42:
         85:55:31:21:36:d4:c0:69:f2:51:d5:40:fb:f0:a3:64:d8:46:
         54:d3:00:86:63:fb:f1:9c:3e:03:a5:49:5c:b7:6b:12:56:14:
         47:1f:c7:aa:45:dc:bc:16:5f:04:22:c6:f8:40:dd:03:d6:ad:
         92:ee:ff:6c:01:a5:31:58:f1:c2:24:d2:70:4f:a8:cf:63:bf:
         8f:17:94:a1:7f:84:7f:1b:09:c4:a3:62:f9:bd:8c:18:33:83:
         a5:16:6f:02:e3:ce:12:f1:aa:d2:d6:98:02:39:e5:1d:34:4f:
         71:02:89:52:8b:5d:9b:6b:9f:df:50:4d:ea:73:0d:eb:6c:f4:
         35:95:d6:b4:cf:59:8c:80:ec:3d:95:bf:0e:e5:2d:ca:75:58:
         53:3b:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:07 2026 by rpki-client