Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
File:                     _r8wIB8SoEDThtK07tRIRiPk0Rs.mft (raw, json)
Hash identifier:          XyHdKkAGd3N/KC2ngJhtrP5B/XsflCQQyLrSxCC1y8Y=
Subject key identifier:   59:DF:B0:E4:95:0D:A7:DF:EE:DB:1A:0D:EE:CC:25:64:90:29:5B:02
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       019CAA2160D92D3CD3803EC98F055C0A6864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
Manifest number:          18CC
Signing time:             Sun 01 Mar 2026 16:00:40 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:40 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:40 +0000
Files and hashes:         1: 0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa (hash: qATqWNelp5kWeQPks533jdrIL1p5vs1PiC8G5RQkGlg=)
                          2: 0zrEo8QP0bXgcF12sU5vrygwlQE.roa (hash: 6YYAcAy/aDjwQQzA+nKyrCYZGuukSS8tQOHMaVi+CoA=)
                          3: 1-XfHBFax_1tomyWLg_6vgflWHJQ.roa (hash: 3skJCnuSusBD4Kz3JoMjZa3DYVYqgQ4pYXK7lif6dtQ=)
                          4: 1-nb-21DXmf62BIC9VxV2OpkYnHY.roa (hash: j+M5U6ra0ssEQFmg+65JUjEOQeVCtqgDScB/iptdlL8=)
                          5: 1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa (hash: H20bjGoEOuihmzJMLyFevmPp5zZxGzTakhEjF/1zfvU=)
                          6: 2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa (hash: aGcEkbs8B9XGL0F0LNugSEY85pIuqgOQdV7ekqsiVOg=)
                          7: 7Yr6u97grf1hUVycycPX5OExet4.roa (hash: /YCWPkUdSqRfeH441ocRglLXS70RxpDbzLeVOBB7eEU=)
                          8: 8MHily8SQRnSnqa8jdWwNxzJOJ0.roa (hash: Mz5ev1bJoNfDfpyakjMaD33JbMOyNCdahq2K77uSBgA=)
                          9: 8TUPHciyGaksQ6MP8jAHNsAPpYE.roa (hash: Fv+3jD6OIzEu9o8Q5RQKAszPqo8Ehe/KlRJRhcwyRYM=)
                          10: A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa (hash: TGslLfU4kNnaeAuNV7CpYV4k2JG7kGnYe5ortZjLBhM=)
                          11: B3zbM5xg9ITO7mwd4L77i5mDkUI.roa (hash: wnHErELQVSr33UQXeVMoJMrt6Y6sNJq/nzEiEMGtcLU=)
                          12: CTJNV0sxuquJoUebYx9HEZAvPwc.roa (hash: Qvb3kgpvGMS/SsbNaMMA8uX0p4GHCB6dLfWU+N88ybY=)
                          13: CWm4ghtnXdhF2lpLVnPbwX5vDbo.roa (hash: M3dqujH2MQ/STjhVQYB3kEdRsWanGPx9Y/ZVCUe5e9A=)
                          14: D15A6Y0sb7k1H2uqg-GtvZLut0k.roa (hash: V9FBzc/7Hn//D+9pyc2UMFFMygajW6Wjjn5Gwv7VHX0=)
                          15: DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa (hash: DaUT/fT+NICYQVuOaDW47znt7KgZgGkTskJWTkPJpw0=)
                          16: EAvdcx6UXynkshpQCxtCVzMapSM.roa (hash: HyebAm+JL+H5M0WBgvfSq3Io39nqO3XXidXJ1toYvBU=)
                          17: ElynjHG_UQwIgCy4ktcvJuph5xM.roa (hash: 9OrXYPV+gIQCzxDfPDo7BqofJNl4lFKZU7HQvmqtpo0=)
                          18: F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa (hash: iVpKrd6Ug6fU+KHqi7wZWBiHrwYPUj6qELLKcXb+3ok=)
                          19: G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa (hash: rnOVHL8CzfDzL1AjH9eIc8KBikir17C0voUG58ezEDs=)
                          20: GGgoV9H1ZnFfJYF9H4RVv02H1sY.roa (hash: /7ZEU7xEW2nDYkqDSBL+vRIeG1ZNMeV4BKP7/O1n5kI=)
                          21: GR_ltSMMQxYGO3_IELkqoJCzQAw.roa (hash: 9+UW3YS7Yur4fFHofBTOr054shJOxAKnej+y3XevDtA=)
                          22: HMrkyJnqPLhWHWp3uSc-TJZ6evM.roa (hash: XRtW9/rDWh39fCwJcQvqM0stm2Q1JPWivWUvQ7XMdHw=)
                          23: Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa (hash: f3O43dRoTvsqvqAJ2oSJqSH8kS/z2CiiKFA5+7PRbFg=)
                          24: ILqlW9am-Ny8jSaAwVrjeBq_jnk.roa (hash: 7oOBX8eHDSPBlKPfgqArMljc2KOvyLrmS8O9T8mWbuc=)
                          25: LZJptrqByyRVN5I-1d313-ovSg0.roa (hash: woaDsTShO7j6tVSjZ3DIPcOFpjMcazzIgvjQSYqyykk=)
                          26: Md5tcSU0teTRpNubA7Z_jfoALig.roa (hash: fWMX2yQUvN7MEeTOLeKGuRXarovSwuRuaIdjkLDezKM=)
                          27: Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa (hash: sFvW2zTL0LYES516UioaLe6jUPi/sxoWUv9ji3dJL6o=)
                          28: OKm9cxPf32veHeJAKYn1FqPX-W8.roa (hash: ZvaU3xtVjcswzDH4WA8g/rfMZQ+9iWBXxvsEncNm1JE=)
                          29: P3uhwZVtBog2MCLVgG6wcSgmxc0.roa (hash: ieAD0UkSqCquHFAONT31C2Q9x8Ke2zXum3W10Ar+9qw=)
                          30: RAvnIlfF0SdQXmmY5bBWCD7Lz1s.roa (hash: dJFULBYB1BF183CUwkk8quF++Fuj43gc3tTG4XeqwmE=)
                          31: RW0ojBlsX-UMDAMTXaAJjNfClOc.roa (hash: jZcTAOAhoH03df4Q/rcMMKGLMXhfdLm2TLCLpCgQgyY=)
                          32: UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa (hash: ZRj0TfEEIlaCTZI476/fNtISJ9n9/xFSHfysagr2srA=)
                          33: Y-IHPWMaGckQrH16kuwYjRaz6lc.roa (hash: yHuusFOjac/dJgf4/wrkl4vcJyWzKN4yhuik48GsQf8=)
                          34: Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa (hash: vM2x7YuVwFLP24SGRsKa5AxeLkiP9gJUkmgCmMV/jOg=)
                          35: YuNHL3MqPtQ65KdhByule-7rY3k.roa (hash: K6EYndGp2dSRo54l3DqwEf+r694uIZecjw+hjG0dzt8=)
                          36: _Lm_-QcdqarLU0LNMaLm-NgW1zA.roa (hash: tA5twHJW6LmbqLjoKXMuZzAwfX9+8dHIKYFWHuS1qIA=)
                          37: _r8wIB8SoEDThtK07tRIRiPk0Rs.crl (hash: +VUjDC2BtiML+8ujttL8IGpGzb84NvPvbvFB6+4lDXg=)
                          38: cpdhzer5jYFwdNKnX19GbCPi-NY.roa (hash: 5bwnqUanFRC5MM2Dr7B3YVum1dT8JJxcaR8C+6tDc+A=)
                          39: dPx5EpBkXGylxEr5yJnqSisZSnk.roa (hash: ewTFNQKosKYlf3K3mKhO/DxoL72WIL+jLWw/jTC/AhU=)
                          40: hdJNEC4k9VYKuIsDSDeTldkfx2w.roa (hash: 9mVLR3+7ZtRwJh3b3TAecSLtWAEh1ogVNYpFHs+XbUI=)
                          41: igce6sXyWMRuLXM6rVKdhvvPUvA.roa (hash: lJbTpwGiJnAGTrBCWtuwGuLG+y5pdRw8UdMiLvljmjQ=)
                          42: nBQWe1jmHTSZ7dpISsOH6MyX3Ak.roa (hash: m7Fmvy+e9j8BV69sSpg7q2dbJVIlQDmT7D7dNJf6GBM=)
                          43: qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa (hash: B+cfOBFQS0AHm1xsdf8uja/gqoAukeAQ2CKGxd1/H5s=)
                          44: rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa (hash: 0idHC/YAh59nWfVR/AfEpg32uZCCAz2zzDzVigdrTbY=)
                          45: sQcdal7FL9sPoCwGgqBEe74MjYs.roa (hash: 38/+W5KtwZflyziocQUIiNPWgWXpqNWvo2kPETtHdRY=)
                          46: tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa (hash: /I2V6ak1ikZZlvsO/kVy4ibcPNbQ8S94XaGCt6WfFvU=)
                          47: v6bPTwpra_lwtjUINIbbfpZIvU8.roa (hash: 4L7UWKvPIObMCy8KU/wBhI7qPkvmfHTFzJZ6aL8WFkI=)
                          48: x59UxU_los7Hl1SUMoPUdMaubzU.roa (hash: feBONM6ExLV2d5rAGWqq5VdULpcbX2Y0286qupSvhIw=)
                          49: xGSstVYCVs5vthNwQmR_-VYhf6A.roa (hash: QhmSgkubcVL97EAzVxMccq4bjANHavzm5rAf4mlSvQA=)
                          50: xph8qFaPT8h84DuqzAdcK_YZB0g.roa (hash: s8aCGZ/D7LJh8NIG3TfL891h0yRKDba66+N1I5CEjyA=)
                          51: yC5B0rT7Xy5HWb6b20HYfHMmPII.roa (hash: cd94rZ6SfXF3OCGPrP9y3o8F1w3N6nSTo6a88BEpspE=)
                          52: yLs8OPl8oziwieEbbfdCNTVMlCk.roa (hash: YN8vE2F6YUz/M7MQ323DHctfvFexIsnM+ZcFWFilXs4=)
                          53: ywsWs96Lkyy6USTdQGWVUnBfJGk.roa (hash: rLUKOshXAl55BwpYwHZduUKPcEeNr503oFkfH+OJ5TQ=)
                          54: zRr5zo4vzdBhkq1qbPubljxB4EU.roa (hash: cabHGFo/0oEEfQ6XBa6BalqOenhqiZJQQeeX3LsKyDA=)
                          55: zrirJ-nfVhEepwawAGj9edSQ_Mk.roa (hash: 5jQOo5egdNHstLmwNLujp17O6/gqruG3lZKpoYabUeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:60:d9:2d:3c:d3:80:3e:c9:8f:05:5c:0a:68:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Mar  1 16:00:40 2026 GMT
            Not After : Mar  2 16:00:40 2026 GMT
        Subject: CN=59dfb0e4950da7dfeedb1a0deecc256490295b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:3d:1c:04:9d:38:de:31:16:d3:c2:97:d5:
                    23:fc:98:e6:2d:2c:b9:1b:9e:ca:04:37:15:2a:5c:
                    43:4a:b0:36:83:e9:c4:a3:f1:19:04:61:07:80:7e:
                    46:f0:32:80:ae:3c:92:15:9f:7e:16:c6:b8:40:d3:
                    17:44:85:1a:c8:99:89:fc:94:5d:50:62:19:d6:7d:
                    43:e0:1a:ca:b6:28:cb:8e:52:4f:0b:eb:59:8f:9a:
                    2c:b2:1c:15:1c:1d:39:0e:bd:e6:d2:0b:52:2a:45:
                    23:18:5d:61:ba:38:d8:67:e7:b1:93:69:a9:87:0b:
                    82:3a:c1:81:81:36:dd:a8:91:40:e8:51:70:24:1a:
                    92:b8:bf:48:44:0e:75:56:3b:97:c4:2a:2e:e6:2c:
                    5b:f6:17:8f:ba:b5:84:1f:bb:b8:8b:d2:dd:cc:cd:
                    f3:5e:af:87:6c:d5:60:f1:5b:cc:fc:5e:e0:ce:af:
                    d5:99:ec:26:ae:64:7a:69:5d:62:c8:d0:a8:d1:64:
                    4c:3d:ec:cd:db:25:b5:be:a7:ea:2f:de:ee:a5:53:
                    dc:92:2b:ba:8a:b1:ba:b1:79:74:2d:f5:68:a6:26:
                    52:4a:b1:62:63:76:a6:35:d1:dd:58:b8:08:bf:aa:
                    45:8c:b7:93:ef:b8:70:38:ad:c7:67:b8:4c:33:7e:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:B0:E4:95:0D:A7:DF:EE:DB:1A:0D:EE:CC:25:64:90:29:5B:02
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:94:54:2d:49:b7:3a:27:36:7e:2c:ee:20:fa:7e:e9:18:
         aa:0b:c1:62:54:23:34:f8:02:20:b0:c4:f1:fd:28:a8:79:7c:
         32:e5:14:6a:68:23:fb:9b:11:71:38:37:29:ee:92:43:72:f4:
         a7:bf:25:76:02:ac:f6:ed:a7:2d:9c:ca:50:f4:14:f3:7c:5b:
         19:c4:4a:97:3b:7b:82:fe:46:92:ae:dd:3c:60:ec:03:82:c6:
         5d:f3:f1:30:ad:43:7f:79:bc:bd:84:33:f4:9f:75:4a:d1:aa:
         00:b0:d2:cd:d3:cd:37:ba:13:60:61:3b:32:8f:c2:61:ff:08:
         ab:76:17:80:17:e5:17:8e:02:58:ed:5c:9d:9f:81:54:27:28:
         1f:34:ea:49:d6:17:48:2d:65:ea:1c:d2:62:58:be:71:cd:3f:
         dd:a6:50:2b:e2:d1:5b:69:aa:00:06:5e:b6:a7:4f:0c:b2:d8:
         7f:4b:5d:fc:48:92:2c:90:76:ff:6e:78:3e:1e:ff:e5:da:2c:
         12:9e:b2:39:20:ba:0d:c0:6b:ab:48:ed:56:29:80:62:0a:5d:
         be:ff:8c:b9:5b:24:28:e6:25:b6:60:65:96:82:13:3d:76:99:
         68:bd:8a:e4:a0:ef:d9:66:14:58:c0:16:9c:e0:08:f5:81:58:
         48:3b:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:28 2026 by rpki-client