Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          zWQu56cl6HvUF0j//Hrm3tyJIF152xCldetkhmmosG0=
Subject key identifier:   7D:F3:BA:1D:B2:0A:21:4C:02:1E:AD:6B:88:7D:C0:2C:DD:C3:F8:2C
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019CAC46AB89AFCCB35F2A687373364B8C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0892
Signing time:             Mon 02 Mar 2026 02:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:38 +0000
Files and hashes:         1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
                          2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: aLuNEQT7mKXE4foN8PkbFkSSAPcy1aT/GGZMan5fxVs=)
                          4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
                          5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
                          6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
                          7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
                          8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
                          9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
                          10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
                          11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
                          12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
                          13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
                          14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
                          15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
                          16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
                          17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
                          18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
                          19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:ab:89:af:cc:b3:5f:2a:68:73:73:36:4b:8c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Mar  2 02:00:38 2026 GMT
            Not After : Mar  3 02:00:38 2026 GMT
        Subject: CN=7df3ba1db20a214c021ead6b887dc02cddc3f82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:c4:4c:dd:a2:36:13:e5:2c:7e:2c:e8:a5:
                    69:4d:04:84:92:82:bc:b5:dd:8f:3c:d6:ea:55:f7:
                    29:1f:61:59:e1:24:de:57:67:e4:c2:58:aa:0a:0c:
                    1a:4d:51:72:9d:49:8a:28:93:43:c9:93:bd:7b:a0:
                    f9:1a:a3:04:91:81:d1:2a:71:8c:8e:c1:fe:06:97:
                    e8:20:ce:9a:7f:eb:35:ab:2d:85:10:39:50:4f:76:
                    e3:e4:a0:ea:6a:b8:f1:88:f5:22:3e:60:62:01:9f:
                    fb:46:4f:7d:05:39:65:47:e2:e7:8a:66:09:1d:40:
                    d3:3d:dc:86:fe:93:5f:4a:5d:54:41:e9:6a:29:b9:
                    7c:31:84:e0:eb:1e:c1:31:1c:d2:49:01:af:55:ed:
                    1d:89:75:17:15:91:ac:7d:24:7c:ca:2a:fb:ba:51:
                    80:81:15:d6:72:67:d6:b5:06:5e:89:3c:97:2a:ec:
                    94:10:79:bd:eb:d2:ea:7d:bd:c2:b7:c4:b6:6a:6f:
                    1e:02:89:cd:95:20:1a:d9:62:c1:1d:1c:b9:4b:df:
                    0f:31:a1:a9:e5:6d:11:39:47:a8:bb:31:c0:91:a1:
                    bd:62:ea:fe:15:c4:3a:ef:18:90:07:80:4d:eb:4a:
                    5f:56:75:7c:8d:25:f4:0e:1f:19:00:aa:07:d4:eb:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F3:BA:1D:B2:0A:21:4C:02:1E:AD:6B:88:7D:C0:2C:DD:C3:F8:2C
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:da:7c:ab:da:1c:99:db:ce:39:9e:14:5b:5b:8e:43:16:ad:
         16:73:e1:c2:df:3f:5f:6f:e8:18:9f:76:c5:93:f9:40:ca:14:
         ee:89:6c:d7:1e:d8:ee:62:f8:0a:c3:02:46:df:43:f6:f3:52:
         f1:54:5b:54:63:ce:92:06:a2:58:8c:e8:2b:e9:99:ef:69:c1:
         2a:05:b8:d0:ba:77:f9:2d:fb:69:e5:96:00:8f:eb:8a:86:6c:
         45:5c:f7:bd:51:50:06:a2:b7:2d:9c:98:30:f8:d8:25:d9:30:
         e2:27:b7:e8:66:88:ce:fa:85:11:66:9f:43:c9:44:55:64:13:
         d8:fe:c1:64:55:66:10:a9:ea:6c:b9:cc:5f:65:e0:67:ea:84:
         97:7a:b8:5e:ab:61:de:ed:d8:f3:97:db:55:05:91:fb:c3:18:
         00:55:98:4b:f2:39:08:35:3a:2f:88:68:68:2c:da:09:39:81:
         ad:d6:3d:93:fa:63:c5:3d:0a:c1:5c:d6:e5:4c:06:3a:5c:9e:
         ae:a7:ee:bf:9f:a1:b4:fc:69:26:a0:d7:9d:c3:d1:18:a4:09:
         89:84:a0:e2:6d:ff:14:fd:a4:9a:12:4e:51:62:d4:37:e4:a2:
         e1:ad:15:36:23:7d:ec:fb:e7:5e:bc:6c:62:47:7f:a8:c5:f2:
         66:bc:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:35 2026 by rpki-client