Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          TekmqHSW6xhE4I56o3hAR4ufTsDgy5ucOzI2fJn7sjg=
Subject key identifier:   D8:D8:D8:DB:9C:DB:B6:19:AC:A9:77:70:C5:E4:D7:11:B6:A2:14:FD
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019FD04C6A793B34E25B25E687386A2F6F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0B1C
Signing time:             Wed 05 Aug 2026 05:01:36 +0000
Manifest this update:     Wed 05 Aug 2026 05:01:36 +0000
Manifest next update:     Thu 06 Aug 2026 05:01:36 +0000
Files and hashes:         1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
                          4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=)
                          7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          9: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=)
                          10: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          11: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: XbDigxbK0R6jf9ktlcBHEEXsM0iHAmGVU8tea0l8G0c=)
                          12: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          13: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          14: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=)
                          15: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          16: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=)
                          17: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          18: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=)
                          19: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
                          20: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          21: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d0:4c:6a:79:3b:34:e2:5b:25:e6:87:38:6a:2f:6f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Aug  5 05:01:36 2026 GMT
            Not After : Aug  6 05:01:36 2026 GMT
        Subject: CN=d8d8d8db9cdbb619aca97770c5e4d711b6a214fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:fb:2b:ee:93:d3:30:0a:ec:10:f2:ed:68:
                    73:b7:f0:4d:fe:d1:ed:78:d4:b2:44:b1:c4:10:4e:
                    d5:c8:6c:ca:6d:0d:be:2f:a3:f2:56:08:5d:97:80:
                    ca:7f:9d:c5:d1:3a:8a:5d:7a:2f:66:a4:5f:7d:9e:
                    4b:24:b8:ba:c2:7e:50:ba:09:7a:c5:9d:22:47:fb:
                    38:c8:6e:ba:e3:d5:48:9a:da:63:d0:ab:13:67:93:
                    99:a5:7b:a1:e4:03:03:81:ad:a5:25:ad:fc:8b:8c:
                    8d:b7:3d:e4:73:94:af:eb:95:af:d3:c4:90:48:fa:
                    85:6a:fd:a2:8c:8e:de:8c:39:d3:bb:d4:e5:52:ca:
                    a1:09:a6:14:3a:11:36:64:a9:a9:31:27:b8:ae:67:
                    e6:71:30:6b:bf:c5:1e:6f:07:ba:68:72:cd:8f:39:
                    ad:f2:4f:ca:0f:71:e2:a0:a5:7b:f8:13:62:97:b7:
                    92:51:2d:12:12:31:5a:a2:63:24:fd:54:a1:9f:85:
                    b2:fd:d9:98:9c:16:67:1e:e1:d3:4e:aa:37:07:5e:
                    a1:35:3f:25:49:5d:36:19:9d:41:e7:0d:25:cc:1e:
                    fc:fa:cb:b5:ab:90:b4:b8:ca:0e:e9:a3:ae:8e:91:
                    8e:4e:a7:89:53:7c:10:85:0e:1c:ed:cc:c9:03:f9:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:D8:DB:9C:DB:B6:19:AC:A9:77:70:C5:E4:D7:11:B6:A2:14:FD
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:f6:79:c7:ef:d3:7b:0d:06:91:af:5c:47:5e:c5:8a:b9:
         0b:7f:91:3d:f8:27:f6:db:4d:05:06:cb:02:77:93:83:62:5c:
         c0:4e:bc:ee:8a:d9:41:de:f6:0c:0f:50:17:eb:37:60:3a:9e:
         7d:cd:40:da:3d:63:c1:17:f8:3c:cf:9b:ef:07:6c:d0:6a:0e:
         81:b8:2a:ed:84:6e:4c:ef:37:04:e1:f1:44:93:23:e3:8a:c6:
         c6:37:e8:7a:0a:65:08:67:00:a5:c4:6c:36:18:e0:c4:48:ca:
         87:49:88:7c:a0:13:d3:46:35:f3:66:29:31:57:39:eb:3e:05:
         0d:ba:f3:06:bf:41:55:78:00:59:1a:ed:be:e5:3e:8a:df:c2:
         41:2a:fb:d2:8b:56:d8:c9:1f:c6:06:ce:4a:5e:4d:23:64:2c:
         3d:ad:9d:4c:3b:9d:44:f8:22:63:66:1e:43:f0:a0:3a:81:10:
         2c:8e:d7:bc:83:9c:3c:b7:38:60:8b:ff:49:04:3d:9a:c2:ba:
         88:26:d1:6c:4c:b4:57:4d:c2:70:0d:9a:bd:6b:7b:8c:3b:66:
         ea:f6:cd:60:ec:98:b6:97:50:d4:56:e0:60:8f:a1:df:20:3a:
         44:34:0e:79:8e:cd:ae:c8:0e:ed:76:e7:1a:58:4e:95:c4:fc:
         76:f9:bc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 11:29:30 2026 by rpki-client