Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          l1xB16dTOi7fsIO1fwX646tspEU6qWnSqJFsImitwgo=
Subject key identifier:   1F:E6:00:24:A2:D8:29:30:44:5E:43:37:97:6C:33:67:B5:3A:48:53
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019CA94584E684AA49BB54FCC17D1A3B1598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0C7D
Signing time:             Sun 01 Mar 2026 12:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:31 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: 2Pm0ncEK9gVMtPD2FLYihnyVTTOJOj1kVmbAsAZFhwg=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:84:e6:84:aa:49:bb:54:fc:c1:7d:1a:3b:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Mar  1 12:00:31 2026 GMT
            Not After : Mar  2 12:00:31 2026 GMT
        Subject: CN=1fe60024a2d82930445e4337976c3367b53a4853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:d7:5e:a2:ab:34:e8:fc:c6:55:93:91:96:
                    a6:33:7b:4d:ea:c2:de:4d:15:84:28:69:a9:46:53:
                    26:94:0f:64:e6:09:81:89:3c:d1:ec:fd:26:de:8e:
                    c7:44:68:ca:7e:83:8e:82:0d:ee:98:ea:aa:85:88:
                    43:a4:fc:9c:a9:c6:4d:f1:c6:a9:a1:46:51:0e:b5:
                    6d:a2:a2:ab:6f:01:81:03:a8:47:c0:a1:61:96:4e:
                    84:7a:43:e2:33:45:22:1d:6e:6d:14:f4:f4:86:6e:
                    8e:6d:24:4c:0c:46:49:c7:a7:4e:db:30:ef:54:52:
                    88:ea:f5:71:26:f5:82:d9:a5:95:d3:6f:76:ce:e4:
                    a1:98:3d:9f:c6:40:9c:f1:12:7b:72:a2:c6:97:c1:
                    2a:59:54:d3:d2:cc:27:d8:52:ef:4a:50:20:25:91:
                    e4:8a:53:e1:40:53:4d:67:95:7f:ec:00:10:cf:44:
                    a0:8d:8b:e2:7c:f3:09:6b:1e:7a:90:a8:ff:26:32:
                    34:f3:1f:a3:01:f4:b8:7f:5c:e9:76:6e:b7:17:a6:
                    c0:05:a2:f0:fc:d2:83:65:75:2b:9c:ed:df:12:23:
                    b9:52:da:08:5c:8a:d7:24:f0:d1:9d:27:79:46:32:
                    25:ff:8f:96:23:ef:c7:e8:6a:22:d7:46:37:48:4d:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:00:24:A2:D8:29:30:44:5E:43:37:97:6C:33:67:B5:3A:48:53
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:43:ba:a7:55:7a:3c:9e:b1:86:1b:c7:ad:a3:a7:c8:1d:4d:
         15:5d:5e:85:7c:36:48:42:ef:90:58:db:0e:d7:34:52:98:7f:
         fa:1a:3a:d4:25:4a:6f:5a:13:a8:c1:32:83:3a:81:3d:c7:94:
         dc:51:9f:39:b5:54:e1:94:d2:b5:ca:9d:22:dd:83:46:90:e5:
         f5:50:12:25:b4:cb:78:11:53:fa:4c:70:22:2c:5b:17:22:01:
         23:0e:e8:bb:73:1a:3a:4c:ff:b7:cf:ec:93:59:0c:0d:4f:e9:
         d9:ff:61:cc:42:ee:71:d4:8b:79:77:55:01:e7:93:3b:f9:ce:
         43:fd:23:af:95:6f:ea:b0:16:4a:4b:b2:55:f7:68:ba:2c:18:
         88:f0:f4:dd:c1:78:21:ef:96:4b:44:b0:2a:11:d4:7d:ae:38:
         e9:40:24:30:98:00:40:87:88:03:b1:d8:31:91:26:9f:a7:08:
         3a:d4:97:eb:e3:7f:99:13:71:1f:eb:5c:6e:26:46:18:fc:aa:
         66:63:37:33:2a:5e:ca:9c:bc:db:c9:c9:85:02:08:23:d9:16:
         7b:44:40:6b:07:8a:ac:ba:8c:c1:77:75:0d:2d:ac:9b:6a:4e:
         b8:55:e9:8e:0d:6b:7f:13:96:19:c6:54:40:da:0a:2b:7b:97:
         e4:7e:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:27 2026 by rpki-client