Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          LCONUfYkBQTSuhw7CoxgCFdGrCceYb162RF7ylG+feI=
Subject key identifier:   A7:88:0F:52:8D:F8:88:FA:82:45:CF:30:27:31:14:ED:CC:0A:1E:BE
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019CAD5A2F51BB14AA1CCDE9F819E06B3941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          10CA
Signing time:             Mon 02 Mar 2026 07:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:34 +0000
Files and hashes:         1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
                          2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
                          3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
                          4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
                          5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
                          6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
                          7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
                          8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
                          9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
                          10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
                          11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
                          12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
                          13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
                          14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
                          15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
                          16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
                          17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
                          18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
                          19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
                          20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
                          21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
                          22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
                          23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
                          24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
                          25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
                          26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
                          27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
                          28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
                          29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
                          30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
                          31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
                          32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: dBDd3ZQoAxXfHojiG8ZGfp0U6dLj8iaeyGqi0gioJio=)
                          33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
                          34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
                          35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
                          36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:2f:51:bb:14:aa:1c:cd:e9:f8:19:e0:6b:39:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Mar  2 07:01:34 2026 GMT
            Not After : Mar  3 07:01:34 2026 GMT
        Subject: CN=a7880f528df888fa8245cf30273114edcc0a1ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:d3:9f:30:a6:46:5e:19:e5:8a:1e:87:a4:
                    13:bf:a4:08:96:56:f7:97:c0:7e:c9:f3:07:f1:fe:
                    df:69:90:08:eb:22:80:e9:55:36:af:b9:67:49:06:
                    0b:20:74:7e:2c:f2:c9:79:1e:85:27:5d:57:72:e8:
                    c2:f0:e5:e3:1d:a8:77:4b:35:81:29:b6:b3:13:5a:
                    06:cc:c9:6b:65:27:89:b5:20:58:99:37:c9:18:04:
                    fe:b7:ef:33:06:d9:0f:fa:60:11:de:40:9a:ca:76:
                    33:b1:78:06:e0:1e:fe:e2:d3:d8:fe:5f:45:78:c5:
                    de:9d:5c:4a:53:54:33:2f:24:d3:f5:9f:bb:27:e9:
                    2d:f8:13:d0:ba:63:67:79:23:91:eb:e2:6e:93:69:
                    d9:f5:23:e3:5e:a7:df:91:fc:2a:bf:c7:53:05:fa:
                    6a:bc:83:e7:96:fa:d8:72:d0:33:e6:63:22:54:e9:
                    02:d4:66:f4:c0:b1:9d:05:83:e0:a4:e7:0b:4e:29:
                    8e:a8:b1:ed:c7:51:ce:e1:a3:6d:02:95:2c:f0:ab:
                    85:3e:79:16:94:bd:54:2d:2b:06:46:33:43:63:c8:
                    9b:25:dc:d9:cf:cf:66:6b:30:88:a3:98:fc:85:c9:
                    75:d4:60:5d:ed:36:1d:bc:19:19:74:96:71:a0:7a:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:88:0F:52:8D:F8:88:FA:82:45:CF:30:27:31:14:ED:CC:0A:1E:BE
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:43:35:ac:0d:91:d5:72:c8:e5:dc:07:11:4c:1a:96:ad:7e:
         7b:21:91:df:44:e3:04:af:20:71:c9:73:41:ba:7d:d8:c1:f6:
         f7:5d:5e:83:0b:86:b0:9b:e4:4e:2d:5c:0b:53:40:a4:71:d9:
         dc:94:b2:ab:e1:2e:5f:e4:8a:57:09:e7:08:1f:f2:6a:23:12:
         2f:fa:f8:bb:1e:cc:67:5d:2d:7d:c5:1c:76:11:55:1e:1e:dc:
         ba:30:dc:af:20:54:25:4b:10:14:04:6a:78:f9:84:40:56:95:
         a7:76:b0:1d:0b:5a:6e:b9:6b:dd:55:c9:8f:a2:5a:9f:6e:46:
         35:93:66:d4:26:be:0f:dd:88:14:d1:f8:93:7d:12:1d:39:b6:
         a9:ed:ce:aa:e5:64:45:8e:95:5c:e5:3d:a9:85:ff:05:e7:c5:
         c6:d5:d7:7c:13:4c:fa:24:2c:70:5f:b8:f4:48:29:40:19:32:
         86:f5:ff:03:63:0e:89:c9:b9:bf:77:9b:b8:25:17:76:c0:9b:
         c0:f1:7e:ad:6a:a3:97:78:d7:75:c2:67:7e:fb:6a:20:42:a0:
         d2:0f:0f:6f:d5:c4:c2:f2:c3:7f:e7:51:4e:b8:ac:94:66:45:
         cb:10:61:2a:fa:b2:33:d3:8c:b0:d8:9c:22:37:56:20:43:81:
         cd:85:9e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWi9RuxSqHM3p+BngazlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjYwMzAyMDcwMTM0WhcNMjYwMzAzMDcwMTM0WjAzMTEwLwYDVQQD
EyhhNzg4MGY1MjhkZjg4OGZhODI0NWNmMzAyNzMxMTRlZGNjMGExZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPfTnzCmRl4Z5Yoeh6QTv6QIllb3
l8B+yfMH8f7faZAI6yKA6VU2r7lnSQYLIHR+LPLJeR6FJ11XcujC8OXjHah3SzWB
KbazE1oGzMlrZSeJtSBYmTfJGAT+t+8zBtkP+mAR3kCaynYzsXgG4B7+4tPY/l9F
eMXenVxKU1QzLyTT9Z+7J+kt+BPQumNneSOR6+Juk2nZ9SPjXqffkfwqv8dTBfpq
vIPnlvrYctAz5mMiVOkC1Gb0wLGdBYPgpOcLTimOqLHtx1HO4aNtApUs8KuFPnkW
lL1ULSsGRjNDY8ibJdzZz89mazCIo5j8hcl11GBd7TYdvBkZdJZxoHoD5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeID1KN+Ij6gkXPMCcxFO3MCh6+MB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEM1rA2R
1XLI5dwHEUwalq1+eyGR30TjBK8gcclzQbp92MH2911egwuGsJvkTi1cC1NApHHZ
3JSyq+EuX+SKVwnnCB/yaiMSL/r4ux7MZ10tfcUcdhFVHh7cujDcryBUJUsQFARq
ePmEQFaVp3awHQtabrlr3VXJj6Jan25GNZNm1Ca+D92IFNH4k30SHTm2qe3OquVk
RY6VXOU9qYX/BefFxtXXfBNM+iQscF+49EgpQBkyhvX/A2MOicm5v3ebuCUXdsCb
wPF+rWqjl3jXdcJnfvtqIEKg0g8Pb9XEwvLDf+dRTrislGZFyxBhKvqyM9OMsNic
IjdWIEOBzYWemw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:32 2026 by rpki-client