Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          oz8xF7K1/VEqyQZovx6pIztMSiGjNRbXLOv7QWXSF0Y=
Subject key identifier:   77:92:60:E7:2D:29:7C:17:9A:31:57:73:E0:4D:0C:90:65:03:93:95
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019CA9EACAC99F088CC38F1E740878E3A298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0411
Signing time:             Sun 01 Mar 2026 15:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:02 +0000
Files and hashes:         1: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: QWxtyWJY9+hChztNxPgQhVDBwOZZe4WD3zwmmt7fKn8=)
                          2: 9IeVl12aUhba2Emfsn2fBTAFUAs.roa (hash: XK8m1Iay7rzWVYWcJ+cMdfUsonXHcQUc6/GSyCW/CfU=)
                          3: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
                          4: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
                          5: Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa (hash: PIt7e72kgyCo74un3u52sqzROHoMmxmWZGgzptnTe7c=)
                          6: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
                          7: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
                          8: JTgQHQXGwmHC4oP-GDAD2vLC4nU.roa (hash: yJJDXekwegjFnbX/lz8JwsWlV3ic5fv5wLHyl9CXJE0=)
                          9: LGZXRjlMsd8l00GKR2QE87j1TTA.roa (hash: PaebTCq43309eJujsiliFxMpMTh3T8ONlskEyWdZeN8=)
                          10: ODgdHM7EjChq_YSS9774P5Z46A4.roa (hash: rb40TvEnd+AdrLvOEOoEZJPQ/zWoQJO/3tdPwyMpcH8=)
                          11: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
                          12: bCPDxwJHkuukIA5NrRhqsjUu02k.roa (hash: sYz71sSkvkSaFDq0bif5odKO04RSPGtH9MdBekO6lAY=)
                          13: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
                          14: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
                          15: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
                          16: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
                          17: k2h5FlXc59wzOxM8A70YzP6iC5M.roa (hash: CefUsydLyLh/G0hNJQpjjpTbFbmieBWRGwTdLKUTmro=)
                          18: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (hash: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=)
                          19: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
                          20: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (hash: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo=)
                          21: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
                          22: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
                          23: r53oyYolcOu-UfgcT_tdtf7-39c.roa (hash: 0h3BGKzWIs5UPZjIeVM1ksoF8ZK9Q6Fzsphmnty3gCM=)
                          24: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
                          25: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
                          26: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
                          27: wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa (hash: Oxrdhr1ss/JbqLMgdIsQwdWtrWAJAiM83gHMKnZe/Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:ca:c9:9f:08:8c:c3:8f:1e:74:08:78:e3:a2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Mar  1 15:01:02 2026 GMT
            Not After : Mar  2 15:01:02 2026 GMT
        Subject: CN=779260e72d297c179a315773e04d0c9065039395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:41:e6:78:ed:84:36:27:66:72:db:ac:2c:
                    fc:15:bc:88:0e:c9:c0:4d:a5:cf:a4:bc:7b:4e:15:
                    37:1d:cc:b6:9b:27:a6:5f:f7:7d:e4:3d:f6:03:d5:
                    cb:58:a9:cb:09:93:48:9a:9e:8e:4c:d8:d8:88:ab:
                    85:20:1a:a8:01:63:9d:2e:79:f7:fd:55:bb:ff:1f:
                    d5:39:31:6b:eb:6c:0f:9d:fe:1b:3e:cd:ce:0b:ac:
                    ed:7e:8c:a9:22:f5:42:4f:f0:68:bc:16:3d:34:8a:
                    71:26:d0:b8:32:27:ce:94:af:b7:a3:8c:e0:76:57:
                    31:79:a5:a9:36:a7:91:33:f9:d4:46:af:39:7d:78:
                    e0:b6:fd:27:a6:de:a8:31:ac:eb:c1:ef:86:8a:9d:
                    57:5b:c2:e5:77:97:12:5e:c6:97:1a:93:fd:9b:70:
                    4c:8f:96:32:a6:a7:c4:3f:56:62:e8:a1:ad:e8:0b:
                    8c:eb:dc:de:15:f2:05:a6:36:cd:17:9b:8d:af:14:
                    b8:3e:85:a6:5e:da:b1:e0:24:f2:c2:90:d9:29:44:
                    6c:de:cb:08:fb:4e:68:62:76:b2:80:8e:27:d4:7d:
                    07:6a:bd:2c:1a:e5:92:26:a3:94:50:4e:d6:40:cc:
                    5e:55:80:ab:e1:5a:d7:e0:e4:15:38:45:b1:df:11:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:92:60:E7:2D:29:7C:17:9A:31:57:73:E0:4D:0C:90:65:03:93:95
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:bd:ed:00:d8:83:84:8e:1e:d3:63:fe:59:a2:04:44:87:
         5f:e7:4e:da:a3:cc:55:2f:0f:1e:6d:54:f7:22:d2:90:da:94:
         fc:9d:e2:98:70:85:c1:75:8a:98:19:e9:2e:1c:db:50:3c:56:
         fb:b6:06:58:2c:31:34:a1:63:9e:97:4c:fc:bb:b2:f0:ef:2a:
         b4:a1:c2:cd:f8:09:92:e7:e4:51:77:6d:c8:16:90:e4:19:78:
         19:58:68:56:f2:65:da:17:2f:5b:b6:fc:81:71:1d:80:e7:21:
         aa:44:93:1b:7b:6c:d5:ea:f3:97:86:27:4b:89:0e:95:f7:81:
         05:26:b8:ac:6e:ff:20:f6:24:a6:e8:90:de:37:e1:13:97:7f:
         92:e4:9d:43:3d:80:18:ab:74:0f:a4:e8:7a:02:9f:fb:ff:f3:
         0f:d5:74:f0:4d:09:05:e2:0e:c7:a7:b6:02:6d:da:ce:ad:fb:
         59:89:93:05:ab:63:c2:6a:18:92:e3:61:3c:f2:bf:c2:27:a4:
         02:31:68:31:19:fa:5f:01:70:3c:81:46:01:b0:43:c1:0c:90:
         ee:ca:03:7c:91:d6:48:38:c9:3e:96:e5:81:08:9b:0f:6d:c7:
         2c:2e:f7:11:29:fa:6a:07:6e:49:44:39:18:24:cf:4e:50:61:
         b7:f6:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:58 2026 by rpki-client