Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          3Fk+OBTBdAOQyPE+/xpQLVGwHU9/dTMVxh4cucvl15w=
Subject key identifier:   FD:3F:2C:40:42:E2:9F:70:97:93:37:01:A8:31:78:34:E7:F1:31:21
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019CAC46F86C52D865C8AE844ABABE8510F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          0242
Signing time:             Mon 02 Mar 2026 02:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:58 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: 9cbl8zFoqW+6N8S8mcY1kVvxuNsBE+kXOk2ggnRxDNE=)
                          22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:f8:6c:52:d8:65:c8:ae:84:4a:ba:be:85:10:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Mar  2 02:00:58 2026 GMT
            Not After : Mar  3 02:00:58 2026 GMT
        Subject: CN=fd3f2c4042e29f7097933701a8317834e7f13121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:a0:97:d0:63:35:60:af:7a:55:f7:b4:a3:
                    80:2b:af:78:8f:08:ae:48:13:87:03:69:c3:ad:be:
                    4b:e6:8a:9c:04:f0:55:18:94:b3:3b:3e:a7:0d:42:
                    da:ab:cc:86:5b:f8:ca:79:a8:0c:c4:f1:c6:36:15:
                    62:9b:81:3e:65:fd:f9:71:9f:49:6e:42:e1:76:00:
                    04:29:bf:36:d4:b2:82:d6:cf:77:56:3f:47:3a:d2:
                    98:25:a5:de:b2:9d:bf:17:5a:8c:b3:f6:f6:df:8f:
                    73:b6:f8:05:56:5e:25:8e:ec:eb:be:ec:cb:ae:78:
                    56:62:ee:56:2d:78:f9:d6:8d:d3:65:80:2b:3d:24:
                    e9:aa:62:58:d9:c9:40:16:f6:84:22:8d:90:94:d6:
                    50:0e:85:21:7f:90:4e:e6:b7:c3:29:94:9f:89:c3:
                    77:ac:6e:0d:90:ff:34:38:63:a1:2d:06:93:7e:49:
                    6e:77:2a:19:59:1e:ae:d0:a8:a4:92:ce:b1:8f:fe:
                    6e:5d:44:42:b6:79:4b:01:f4:7d:a9:a7:d1:1b:f4:
                    93:a0:47:35:9a:99:8a:a2:87:79:b0:f5:ba:25:39:
                    d5:48:41:83:5f:48:38:98:61:30:83:93:05:01:52:
                    51:dd:83:bb:dc:72:c5:0b:62:b2:7f:6d:d3:f5:69:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:2C:40:42:E2:9F:70:97:93:37:01:A8:31:78:34:E7:F1:31:21
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:61:5f:d7:63:6f:b3:08:87:3f:72:9c:3a:94:1a:5e:d0:
         b4:54:f7:5b:16:4c:fb:43:57:78:86:10:c1:f4:00:a8:76:73:
         27:15:7f:8c:34:b8:14:fd:e4:aa:af:3b:c9:47:91:45:27:58:
         3f:49:92:75:01:e7:f9:6e:41:1e:3d:f3:81:e2:91:22:2b:ff:
         34:39:0e:6b:76:f2:aa:d8:60:9d:2b:cb:6e:05:9b:84:a7:d0:
         64:ee:ae:25:68:44:c6:82:5d:aa:e2:42:7d:da:8b:fc:75:90:
         c9:50:dd:12:da:33:bd:bb:1b:4d:96:f9:b8:cd:3c:27:55:49:
         90:d7:44:4d:e0:f8:2c:5f:5f:4b:71:5d:8b:e8:a6:7b:36:62:
         cd:24:1b:f2:d0:a0:0f:1e:3b:15:b1:c0:39:4a:11:e9:0e:c4:
         c8:ee:07:b2:e1:6f:1c:f7:ea:c1:ba:23:59:39:f8:39:44:eb:
         26:0d:17:73:80:a2:c2:46:a3:27:83:89:e0:a3:ea:c6:35:db:
         8d:04:2f:01:6f:df:a2:f7:61:a6:d9:50:01:11:bc:70:26:e7:
         80:45:6f:c5:ad:19:46:46:5f:5c:66:58:72:bc:c1:96:d6:ed:
         b5:7f:a3:f6:1a:54:0e:1f:87:c1:08:ce:98:e5:7d:00:34:8a:
         28:02:f9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRvhsUthlyK6ESrq+hRDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjYwMzAyMDIwMDU4WhcNMjYwMzAzMDIwMDU4WjAzMTEwLwYDVQQD
EyhmZDNmMmM0MDQyZTI5ZjcwOTc5MzM3MDFhODMxNzgzNGU3ZjEzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxygl9BjNWCvelX3tKOAK694jwiu
SBOHA2nDrb5L5oqcBPBVGJSzOz6nDULaq8yGW/jKeagMxPHGNhVim4E+Zf35cZ9J
bkLhdgAEKb821LKC1s93Vj9HOtKYJaXesp2/F1qMs/b2349ztvgFVl4ljuzrvuzL
rnhWYu5WLXj51o3TZYArPSTpqmJY2clAFvaEIo2QlNZQDoUhf5BO5rfDKZSficN3
rG4NkP80OGOhLQaTfkludyoZWR6u0Kikks6xj/5uXURCtnlLAfR9qafRG/SToEc1
mpmKood5sPW6JTnVSEGDX0g4mGEwg5MFAVJR3YO73HLFC2Kyf23T9WkpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0/LEBC4p9wl5M3AagxeDTn8TEhMB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafVhX9dj
b7MIhz9ynDqUGl7QtFT3WxZM+0NXeIYQwfQAqHZzJxV/jDS4FP3kqq87yUeRRSdY
P0mSdQHn+W5BHj3zgeKRIiv/NDkOa3byqthgnSvLbgWbhKfQZO6uJWhExoJdquJC
fdqL/HWQyVDdEtozvbsbTZb5uM08J1VJkNdETeD4LF9fS3Fdi+imezZizSQb8tCg
Dx47FbHAOUoR6Q7EyO4HsuFvHPfqwbojWTn4OUTrJg0Xc4CiwkajJ4OJ4KPqxjXb
jQQvAW/fovdhptlQARG8cCbngEVvxa0ZRkZfXGZYcrzBltbttX+j9hpUDh+HwQjO
mOV9ADSKKAL5nA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:40 2026 by rpki-client