Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          gwQwPPpkTPsqQqajyPSg5SFJkeSRjSBlFDgXp2UjJDA=
Subject key identifier:   36:80:02:04:A1:4F:D5:EF:35:39:99:AD:1C:E2:2B:E1:0F:14:F9:6A
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019CAC7E131FAE8178C0B6C50B634DA3EA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0B41
Signing time:             Mon 02 Mar 2026 03:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:09 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=)
                          6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: kGWSSh25tiRG1ESrHRFKn3P/BsGSsgUKcw3DdOiMftE=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
                          32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:13:1f:ae:81:78:c0:b6:c5:0b:63:4d:a3:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Mar  2 03:01:09 2026 GMT
            Not After : Mar  3 03:01:09 2026 GMT
        Subject: CN=36800204a14fd5ef353999ad1ce22be10f14f96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:c6:55:da:e9:9e:10:cd:28:1b:1b:cc:a9:
                    aa:9c:d4:0b:91:27:6b:bb:ab:eb:9e:56:86:46:d3:
                    ea:51:13:1a:bc:af:9d:28:f6:b2:fe:f1:ef:3f:a3:
                    aa:0a:77:d2:f4:6c:2c:1a:c1:cd:cc:cd:48:c1:13:
                    92:c8:e1:6c:66:e2:05:8e:40:dd:ab:f1:46:6d:4b:
                    c2:3e:23:7e:47:4c:e5:8e:83:48:c7:36:f3:60:39:
                    aa:ca:b5:04:38:21:db:f5:f2:78:55:73:bd:45:ee:
                    22:4d:6b:3d:14:36:e5:20:51:50:2c:2a:d1:da:89:
                    0b:34:6c:65:12:a4:61:f5:96:b6:37:80:f0:d2:82:
                    90:33:0e:89:8b:d1:e6:84:b3:de:49:77:d8:6e:20:
                    d6:ee:b6:fb:84:3f:7a:8f:16:40:da:bb:49:0a:20:
                    ae:06:d2:90:45:5f:69:f4:80:69:f9:af:31:38:0f:
                    bd:3a:76:89:a6:05:b4:ed:6a:c7:7b:8a:24:14:d5:
                    34:a6:20:c4:b8:83:7f:d6:d2:82:61:25:25:7a:9a:
                    46:05:08:03:3e:f0:9e:b6:22:c6:b8:4f:25:86:f4:
                    7f:cd:67:2c:19:75:55:bb:1a:01:d2:df:34:5c:90:
                    91:ba:ad:11:a5:7f:e3:f5:8a:a3:3f:5c:b7:e7:90:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:80:02:04:A1:4F:D5:EF:35:39:99:AD:1C:E2:2B:E1:0F:14:F9:6A
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:38:3d:29:91:79:84:c2:d4:90:ab:7d:f5:37:f9:32:d6:
         22:c6:c6:73:61:42:b5:4a:f3:81:dc:c2:0d:e6:ac:e0:85:2b:
         db:3f:2c:d6:18:5e:2a:cb:3a:c2:0f:c7:8a:72:ab:23:3b:52:
         7e:fe:15:50:3c:91:ac:d3:06:c7:9b:da:d5:99:50:17:de:87:
         34:11:52:e7:57:89:70:b5:8f:78:7b:51:80:6f:b3:5e:b5:a3:
         b8:3c:65:18:3a:3e:71:0c:64:8d:54:f9:1d:70:fd:66:e6:5f:
         b2:64:70:2f:91:54:62:c3:a0:37:03:13:c1:8b:45:e7:6f:ae:
         4c:70:2e:b9:64:dd:01:1d:6d:0c:b7:83:90:27:d9:15:d3:6a:
         64:00:58:7a:d6:94:10:bd:54:1c:ba:18:b0:2c:38:0d:f0:40:
         e4:d9:34:06:d8:a6:ec:5f:08:20:3e:12:c8:8d:6b:6f:51:a3:
         38:81:1f:ac:8e:3f:cf:10:69:aa:62:84:b3:f5:1c:a9:c0:14:
         09:ba:5e:7a:ae:da:44:a1:24:50:81:b1:f7:dc:c7:5a:46:87:
         fa:69:e6:bb:ae:e0:21:03:4e:0c:8c:f4:34:84:78:98:5b:4d:
         ad:ed:52:03:e4:73:c1:87:76:fc:18:3f:d2:0a:47:d7:dd:cc:
         b8:bf:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:50 2026 by rpki-client