Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          i3zlTitxQXJAIxbU7Fa8j3azfv6M0RFdP+yUBBw8pqY=
Subject key identifier:   57:57:D4:24:9E:95:79:F8:0C:A5:07:C6:9F:C8:3B:C5:90:DA:4F:37
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019F83D446C5FA75EA387F01F03B2C1B3759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          15D4
Signing time:             Tue 21 Jul 2026 08:39:14 +0000
Manifest this update:     Tue 21 Jul 2026 08:39:14 +0000
Manifest next update:     Wed 22 Jul 2026 08:39:14 +0000
Files and hashes:         1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=)
                          2: 1akN65A8hrxHdJ_zpsI1rV1iEnU.roa (hash: hTcWUIpoIT+Nw4S9m0zdCGaIlBehIs5hXDPto9MDXj0=)
                          3: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=)
                          4: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=)
                          5: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=)
                          6: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=)
                          7: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=)
                          8: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=)
                          9: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=)
                          10: BMGXf9f_qbhuRwiQytVnDKfHkI0.roa (hash: VIXtdHebQiEiTinZZZ7tIYsh2GMyBEQsf5A/5lQNbng=)
                          11: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=)
                          12: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=)
                          13: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=)
                          14: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=)
                          15: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=)
                          16: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=)
                          17: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=)
                          18: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: gST3W2iQFeXHvLr8w4xBU9xWOIAqspiiRbe62micfh4=)
                          19: fvP8_8TU48J6IMiREwiDhO3tYLk.roa (hash: 3D1JK3jjDZ3dw6xUSf+wo+DL5MerbJPcmtMrr884SG8=)
                          20: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=)
                          21: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=)
                          22: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=)
                          23: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=)
                          24: o2LsDsR-WYb7YwjqLk6jjcuW-uM.roa (hash: 5xE4UpV7AA8kmN1vq7J02kiiLM8rThgxAL2+lujvPnE=)
                          25: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=)
                          26: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=)
                          27: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=)
                          28: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=)
                          29: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=)
                          30: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:d4:46:c5:fa:75:ea:38:7f:01:f0:3b:2c:1b:37:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Jul 21 08:39:14 2026 GMT
            Not After : Jul 22 08:39:14 2026 GMT
        Subject: CN=5757d4249e9579f80ca507c69fc83bc590da4f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:ba:a0:a2:b8:36:b4:6b:40:f0:1e:04:0c:
                    09:67:00:39:a9:82:e1:96:4c:87:a6:67:a3:18:93:
                    4b:e2:71:ae:5b:81:48:8f:91:da:74:e1:5a:bf:eb:
                    1c:66:54:e5:27:90:0a:bd:3e:73:65:2a:a8:fd:aa:
                    a3:45:fe:94:16:a1:c8:dc:06:48:33:7a:b4:80:dd:
                    03:80:b9:79:de:14:b3:f4:0b:d4:41:4e:5c:0c:e1:
                    57:d7:6e:3f:c3:85:5c:b6:57:d1:6b:19:c4:65:0c:
                    3a:c6:fe:85:4c:8d:67:86:ec:ec:f9:2f:fa:ee:32:
                    c8:a6:5c:7e:48:5b:e8:41:1a:5a:12:e4:be:da:74:
                    50:71:27:b4:a9:57:74:06:ed:52:4b:12:14:6c:bf:
                    5a:a3:8e:63:41:e3:db:65:55:8a:29:49:c7:97:3d:
                    52:63:9d:0e:2b:83:b0:55:e1:4b:76:91:21:88:77:
                    a1:ba:28:14:64:77:d8:c1:dc:6d:9c:d8:57:08:7b:
                    d4:60:04:ea:f1:b0:f1:1d:7f:9e:07:e1:f0:3a:2d:
                    e8:bf:b1:59:e5:12:34:63:0b:2b:23:03:bd:fd:12:
                    35:52:52:83:d9:30:af:19:37:c0:67:1e:00:54:07:
                    a8:6b:5d:ed:15:96:b9:88:2a:7f:c9:85:18:85:c9:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:D4:24:9E:95:79:F8:0C:A5:07:C6:9F:C8:3B:C5:90:DA:4F:37
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:29:62:94:b4:e3:59:9d:99:93:2a:8b:b2:29:c6:05:30:
         f7:d8:c7:21:ec:34:17:44:57:d2:e4:6f:9c:e5:14:32:0b:04:
         dd:21:36:46:19:ca:92:1b:a5:63:84:f3:d9:75:8a:76:69:82:
         0b:7e:94:86:8a:a5:50:17:15:ac:00:fb:52:b2:10:a8:92:21:
         30:dc:2f:1a:4f:e2:99:85:2f:7a:95:4c:58:2d:4b:66:2c:b8:
         b9:39:41:d7:8b:12:57:ba:d6:9d:06:ca:d9:1d:1b:82:24:0b:
         fd:8c:98:f6:f7:e5:88:60:8c:78:06:46:d6:e7:18:42:ae:47:
         a1:6f:a6:76:7d:2f:e4:11:3e:b9:a9:5b:80:a9:4d:de:8b:c4:
         24:fd:52:36:e4:97:bf:6d:1c:2f:93:ae:65:54:f2:87:f2:e8:
         c0:c9:71:89:c8:5f:d6:c5:8e:55:1c:39:41:e6:90:34:35:7f:
         41:e3:55:f5:f4:48:59:39:f2:d3:85:c5:fc:74:b3:d6:6a:65:
         11:e8:ae:03:85:29:e6:f2:db:1d:90:2e:2b:ce:92:e6:59:17:
         a4:7f:8f:58:0f:6c:50:82:12:0a:72:47:2a:22:dd:bb:03:76:
         3e:8c:ce:64:c3:37:45:39:3a:7f:c2:70:d6:d6:c1:26:4c:21:
         ff:a2:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:01:47 2026 by rpki-client