Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          VbE2oo9QldbG19e7bf2sdFqkYVaVBCffw7O/b+TrObM=
Subject key identifier:   F7:BC:8D:D4:ED:AC:8F:D3:2B:38:70:9D:D3:E1:8E:27:DD:05:92:57
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       019FA003E568E1A9B941CF36A0E3A6691DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          11C4
Signing time:             Sun 26 Jul 2026 20:00:37 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:37 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:37 +0000
Files and hashes:         1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
                          2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
                          3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
                          4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
                          5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
                          6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
                          7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
                          8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
                          9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
                          10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
                          11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
                          12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
                          13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
                          14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
                          15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
                          16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
                          17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
                          18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
                          19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
                          20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
                          21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
                          22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
                          23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
                          24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
                          25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
                          26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
                          27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=)
                          28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=)
                          29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: zhTI8TyAwOifN7/BYGM5PFYFOhnhTRFwbwbLJsAkthI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:e5:68:e1:a9:b9:41:cf:36:a0:e3:a6:69:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Jul 26 20:00:37 2026 GMT
            Not After : Jul 27 20:00:37 2026 GMT
        Subject: CN=f7bc8dd4edac8fd32b38709dd3e18e27dd059257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:e0:f3:69:88:71:14:c7:c6:21:f4:e9:0a:
                    8a:d3:92:3b:d2:4b:61:c7:d7:15:06:b9:db:11:95:
                    a6:91:2b:91:b5:5e:c7:dd:83:fa:ef:6b:3b:7b:cf:
                    48:53:23:c4:0b:43:f0:74:c0:d0:60:6d:2f:6f:73:
                    57:64:7f:80:95:65:af:c4:00:9f:ee:24:33:a0:c9:
                    78:87:a9:e8:55:f3:dd:5c:ee:a4:01:8c:d1:a7:c4:
                    50:f6:80:2d:48:bb:24:c1:e6:b4:5e:8a:12:25:19:
                    5d:c7:68:ae:28:ad:49:a6:61:8d:9c:37:de:88:6f:
                    97:98:f1:af:fb:96:f1:02:70:b2:fe:f3:02:0e:7f:
                    85:c8:dc:6a:b1:89:71:95:eb:f6:69:b2:b3:9b:f0:
                    a0:ef:dd:1f:61:ed:2a:04:e8:01:73:93:58:08:65:
                    a0:9f:6b:bd:d5:23:7b:fc:a7:50:14:f3:df:9d:dc:
                    84:2e:a0:52:08:27:da:f6:6e:d0:71:e0:2f:12:d4:
                    99:8f:2a:64:7a:fd:e8:87:44:ee:2b:23:d0:24:56:
                    ba:cf:8c:db:a7:c4:46:2a:a3:07:2e:65:3e:0c:76:
                    1a:4c:45:8d:00:63:3b:c5:9c:c2:c4:b3:72:b4:5d:
                    73:5d:20:64:e7:57:7d:ed:9b:10:05:0f:fe:75:7e:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BC:8D:D4:ED:AC:8F:D3:2B:38:70:9D:D3:E1:8E:27:DD:05:92:57
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:0e:61:f2:37:5b:e5:d3:46:5b:0a:31:42:83:8b:c4:5b:
         29:c2:db:34:6e:d7:13:f8:36:e7:1a:e0:3b:20:4a:8f:54:11:
         30:a2:f6:f5:d5:08:60:4b:bc:df:31:c5:ad:92:bf:1f:25:28:
         d6:4a:d5:4f:46:63:1c:9d:2c:38:b8:de:0f:d5:14:93:bb:29:
         7d:27:0d:d3:96:3c:31:13:19:1b:56:f5:bd:bb:95:38:15:d3:
         b5:e3:97:82:85:ca:e4:de:25:de:3a:83:93:b1:e6:91:c9:5e:
         34:83:1f:34:29:8d:54:16:32:bd:d5:5c:07:9b:18:bd:7a:d3:
         16:79:db:b0:d7:2b:58:c9:87:d9:35:fc:5c:04:0b:4a:41:87:
         90:31:07:9d:a0:1a:e2:09:7c:f9:32:a8:f5:07:7f:cf:3a:b4:
         3c:63:c0:14:aa:ff:9d:54:8e:a9:e1:9a:c5:5f:8d:54:68:f3:
         f3:8e:0c:b6:d6:98:b8:c0:87:30:2c:6d:f1:17:71:6a:ea:79:
         af:51:1a:a2:e9:ae:4d:53:85:b1:73:f8:dd:8a:f0:9d:68:4c:
         b0:32:4d:db:71:59:ce:f7:df:38:47:e5:aa:96:e9:b8:ff:7b:
         05:96:7c:8c:c0:48:d9:d9:64:d5:e2:40:dc:0a:fc:ba:fe:09:
         a4:0c:a6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gA+Vo4am5Qc82oOOmaR3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjYwNzI2MjAwMDM3WhcNMjYwNzI3MjAwMDM3WjAzMTEwLwYDVQQD
EyhmN2JjOGRkNGVkYWM4ZmQzMmIzODcwOWRkM2UxOGUyN2RkMDU5MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3g82mIcRTHxiH06QqK05I70kth
x9cVBrnbEZWmkSuRtV7H3YP672s7e89IUyPEC0PwdMDQYG0vb3NXZH+AlWWvxACf
7iQzoMl4h6noVfPdXO6kAYzRp8RQ9oAtSLskwea0XooSJRldx2iuKK1JpmGNnDfe
iG+XmPGv+5bxAnCy/vMCDn+FyNxqsYlxlev2abKzm/Cg790fYe0qBOgBc5NYCGWg
n2u91SN7/KdQFPPfndyELqBSCCfa9m7QceAvEtSZjypkev3oh0TuKyPQJFa6z4zb
p8RGKqMHLmU+DHYaTEWNAGM7xZzCxLNytF1zXSBk51d97ZsQBQ/+dX68swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe8jdTtrI/TKzhwndPhjifdBZJXMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2EOYfI3
W+XTRlsKMUKDi8RbKcLbNG7XE/g25xrgOyBKj1QRMKL29dUIYEu83zHFrZK/HyUo
1krVT0ZjHJ0sOLjeD9UUk7spfScN05Y8MRMZG1b1vbuVOBXTteOXgoXK5N4l3jqD
k7HmkcleNIMfNCmNVBYyvdVcB5sYvXrTFnnbsNcrWMmH2TX8XAQLSkGHkDEHnaAa
4gl8+TKo9Qd/zzq0PGPAFKr/nVSOqeGaxV+NVGjz844MttaYuMCHMCxt8Rdxaup5
r1EaoumuTVOFsXP43YrwnWhMsDJN23FZzvffOEflqpbpuP97BZZ8jMBI2dlk1eJA
3Ar8uv4JpAymrg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:58 2026 by rpki-client