Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          NLdQdYLCoQLR1K8qIKJENjpnUGK79e4gouATA1UB81w=
Subject key identifier:   6D:49:E6:19:7E:4D:BF:0A:05:72:58:5C:5C:7E:1E:A2:B8:DD:4D:54
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019CAB345256E41992151C8C6FB75B64CA85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          137F
Signing time:             Sun 01 Mar 2026 21:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:58 +0000
Files and hashes:         1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
                          2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=)
                          3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
                          4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
                          5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
                          6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
                          7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
                          8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
                          9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
                          10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
                          11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=)
                          12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
                          13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
                          14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
                          15: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=)
                          16: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
                          17: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
                          18: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
                          19: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: CkWx3qpaeUHISyGGASI1dugxxlftQMjQzI3AJJ4Olio=)
                          21: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:52:56:e4:19:92:15:1c:8c:6f:b7:5b:64:ca:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Mar  1 21:00:58 2026 GMT
            Not After : Mar  2 21:00:58 2026 GMT
        Subject: CN=6d49e6197e4dbf0a0572585c5c7e1ea2b8dd4d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:c0:23:b8:f5:af:b1:4d:56:04:f2:47:28:
                    8e:4f:ec:2b:1e:97:79:99:b3:83:04:bb:27:2e:01:
                    f0:bc:a9:d9:2f:09:29:92:2c:b6:59:85:81:fe:96:
                    7a:d0:ab:8d:cb:d5:24:1f:0d:7f:9a:73:69:77:78:
                    8a:82:75:1c:6e:c6:9e:6b:bd:a1:96:db:20:92:5f:
                    e1:ea:99:da:8f:52:a1:59:4a:f4:9c:eb:e6:de:ea:
                    db:af:07:74:7c:a8:58:74:b8:4c:ae:2f:a0:7d:44:
                    f0:6f:dc:e0:e6:2f:cf:ca:5a:42:71:9e:9a:95:89:
                    aa:0a:5b:3f:dc:fa:49:0d:29:e9:8f:ba:9f:f4:94:
                    c8:a3:2e:84:3c:bd:eb:c4:26:e5:d1:b9:c2:89:7b:
                    11:17:84:07:3e:93:fb:4a:0d:ae:97:92:a5:aa:a8:
                    d1:5b:91:be:4b:c6:3c:a0:2c:b1:63:2f:37:bb:a8:
                    4c:1a:69:da:12:74:30:49:00:2d:b6:90:5b:a5:95:
                    19:f3:8a:71:d0:ab:b6:37:eb:a4:1b:c4:9a:b5:6a:
                    31:2c:3a:c0:8b:b3:9b:93:0d:f2:fa:4e:24:fa:17:
                    92:9a:cb:9a:90:83:6e:df:2b:ad:f9:cf:50:4a:48:
                    0f:cb:b4:47:e9:44:b5:5a:0d:b2:bd:fa:54:24:86:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:E6:19:7E:4D:BF:0A:05:72:58:5C:5C:7E:1E:A2:B8:DD:4D:54
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:b0:33:51:d5:4f:2b:cf:fb:2e:93:f1:54:12:e1:e7:1f:
         94:7f:48:00:f5:18:d8:16:7d:88:ac:b3:ce:f5:1a:be:1d:01:
         7e:6d:b1:34:80:eb:5a:0d:f7:e5:23:e5:98:dd:d7:44:1d:54:
         d5:f2:2d:fb:f8:c2:ef:bd:63:81:43:fb:ec:7d:b6:9b:b3:60:
         5d:0e:e9:b4:48:de:e7:25:ed:4d:2f:3a:f2:26:c5:4a:89:ad:
         57:46:9e:eb:b2:84:0d:da:29:2f:ad:69:3f:48:d3:1b:48:87:
         73:6a:ef:12:5b:a0:cd:07:b0:26:b7:92:e9:b0:88:a2:65:32:
         50:d4:a1:77:19:a7:e3:6d:42:c3:6f:01:f2:cf:8d:25:c9:dc:
         e1:f4:dc:30:91:92:cf:13:17:75:a9:e0:45:0b:71:d3:69:a9:
         2c:a1:11:96:b0:a4:43:b2:fc:77:ca:bd:71:4f:fa:aa:56:ff:
         ad:0e:f9:ea:f9:c7:8d:1c:b7:17:09:67:ed:55:ac:6b:f3:8b:
         9a:d4:d3:91:72:4b:3d:8f:5d:f1:6d:a5:f4:f3:16:75:e6:36:
         33:c9:1a:d0:03:e5:f4:7b:18:c5:91:b0:f7:31:52:2a:af:53:
         64:0c:1c:0b:2f:b1:85:ba:81:c5:a5:54:f7:57:fe:f3:d9:c2:
         ce:dc:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:11 2026 by rpki-client