Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          7MHVUWEnc9O0tWaMlTqTh7f1ioHckJYxtBGATsl3Aus=
Subject key identifier:   D7:F2:E6:63:E0:31:73:F7:FD:11:44:C1:EC:1D:8F:72:BF:66:BF:46
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019CAC1002E563CF90565D44DD829C5713EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          1141
Signing time:             Mon 02 Mar 2026 01:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:56 +0000
Files and hashes:         1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=)
                          3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: OYPrWeDxaXNBAqW1ZemDRsMaIzuRN3yalXtarhTmXzs=)
                          4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          9: MDkr1mPINhLWlbE7zVQDBRRtERo.roa (hash: rKzUC6Ga9NHbbH+PBR/UbbD9eWJNxuXrWwtzpzRiJgk=)
                          10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
                          22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
                          26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:02:e5:63:cf:90:56:5d:44:dd:82:9c:57:13:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Mar  2 01:00:56 2026 GMT
            Not After : Mar  3 01:00:56 2026 GMT
        Subject: CN=d7f2e663e03173f7fd1144c1ec1d8f72bf66bf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:e9:b3:f5:94:a2:4e:07:61:d9:db:d3:c0:
                    d0:9c:8d:1d:ec:1b:fa:db:e1:5a:e6:99:69:00:5e:
                    01:90:74:02:f7:ea:57:dc:72:30:17:8c:69:d1:67:
                    11:db:7e:0f:ee:9f:06:3b:46:bb:37:66:82:54:a8:
                    8f:c7:b2:8b:ad:e2:84:f6:a3:97:ce:ae:9a:56:88:
                    91:d8:c6:0e:6b:12:72:67:a3:51:fe:18:2e:94:82:
                    41:07:3a:ba:b1:8b:a7:fd:42:9b:8d:0d:e1:4d:4a:
                    eb:4c:e4:9a:33:e2:71:db:5f:65:ca:8c:da:f1:98:
                    78:79:df:ae:b7:43:be:18:4f:04:ac:c8:0f:2a:b4:
                    26:69:bf:2d:23:2f:8f:94:61:bf:63:f8:da:13:f3:
                    5c:ae:b0:1a:c6:e9:a9:96:f3:34:8f:43:83:57:39:
                    1b:f2:13:44:36:f5:5f:01:41:b6:66:a3:79:23:9c:
                    03:03:f2:10:3a:a0:eb:8e:60:59:7d:89:ca:06:67:
                    a8:e6:30:a5:74:c9:ea:19:5b:7b:8f:dc:4d:37:e2:
                    2c:c0:93:14:fb:c1:93:bf:d1:27:0f:00:eb:cd:86:
                    fd:b8:7b:59:b2:bf:7d:dc:85:11:a1:27:3f:32:49:
                    12:09:cc:5d:5b:fd:04:c1:95:5c:27:3e:71:31:14:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:E6:63:E0:31:73:F7:FD:11:44:C1:EC:1D:8F:72:BF:66:BF:46
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:30:ba:96:f0:ab:64:c9:9b:3f:05:6d:4b:7c:a6:31:5e:
         e1:fe:ef:aa:5f:c5:d7:c2:43:e9:55:79:94:8b:d8:e4:5f:45:
         aa:fa:4e:18:b5:77:57:ee:2d:fd:0e:2d:c1:7f:fc:c7:a7:f6:
         6a:7b:b5:2d:d2:c4:bc:e5:e8:46:5d:c8:e0:05:eb:31:6c:27:
         30:e0:cb:92:30:b3:ee:a8:4f:76:f3:fd:66:cb:2a:d7:3b:bf:
         5c:12:0e:fa:66:34:cd:8e:58:5e:56:ac:ff:c1:00:0f:d0:d5:
         3f:6f:02:1d:6b:2a:bc:d2:c2:c7:45:ea:03:64:26:86:5f:31:
         20:a0:16:03:b8:27:6b:cf:6e:b5:c3:29:88:9a:c4:b3:37:57:
         e7:11:21:30:d6:e3:28:8b:d8:4e:3a:1e:60:da:46:4c:02:36:
         82:35:49:54:5a:8a:a5:45:41:26:40:51:13:51:77:c3:94:d6:
         a7:de:50:11:50:aa:fc:46:36:b5:a5:c2:c9:2b:3f:04:81:f3:
         92:bb:bf:62:9a:99:a4:49:c2:58:25:c7:a2:e3:d1:c9:71:9a:
         ea:19:f5:19:0f:98:2a:91:31:35:06:68:ab:d7:8e:1e:8c:70:
         03:87:fa:01:a9:a4:a6:1a:7a:02:f0:c0:91:44:6a:2b:e3:af:
         95:e0:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:47 2026 by rpki-client