Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          veBFYq6+APsq/neVUzj1KMArMugDIPdG7/URtTWnT+0=
Subject key identifier:   46:48:67:AF:85:28:F3:26:44:51:12:9E:BB:F7:39:C2:3C:04:A2:A0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019CADC77A3FAC922351382EAE4DC29C2E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          075B
Signing time:             Mon 02 Mar 2026 09:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:57 +0000
Files and hashes:         1: 0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa (hash: nAX22x5LZPcFuwmumoiB6l6vDoqVxTHeyYCue4WKY+Y=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 7UOO4k4Zq2DJBIH7tWwLjr2nB-w.roa (hash: nTcrUbr5u/berqohC4ga7k6wljP1uQR96ROF4KN6bMQ=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa (hash: ftH8WXmCe7E5NBIPoJRYR7JenBvr3AQxF7w5t5Bh+jA=)
                          8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          9: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
                          10: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          11: IsBBsngSbH8D8ll-zq-eILoo78k.roa (hash: IhxGipNDNaViG3gc042e0dM0fgWzrITGBsZ2jJSSTNs=)
                          12: KQADPW4owxweNKfg2K59-o0aLv8.roa (hash: K4s/3hL7SRQbmE+iSSxyvalPmcaK7KFBbuUY95NP3Mg=)
                          13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          16: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          21: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
                          22: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          23: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: eaAUSgU91rpUxYZ+bR7fpzdXHA8/ClrAadb4X9TYTUs=)
                          24: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          26: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          27: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:7a:3f:ac:92:23:51:38:2e:ae:4d:c2:9c:2e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Mar  2 09:00:57 2026 GMT
            Not After : Mar  3 09:00:57 2026 GMT
        Subject: CN=464867af8528f3264451129ebbf739c23c04a2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:26:fa:0e:59:59:89:52:09:ff:cc:11:e0:
                    f5:37:28:b1:06:7b:77:68:e3:c8:75:22:4e:25:1e:
                    e4:16:2b:e8:58:e0:90:12:e1:2b:d7:a5:7c:8b:71:
                    16:80:09:70:51:5e:92:74:4c:c8:4c:28:99:c0:ce:
                    56:7f:fb:e7:fd:d1:60:00:00:24:bd:28:cf:7d:29:
                    e2:19:4a:b6:be:5f:c9:0f:d1:fe:b6:48:d4:27:b8:
                    ca:f0:ea:92:cf:f2:3c:3e:d3:32:22:ed:13:d9:4a:
                    ef:42:27:c3:96:b8:3e:e9:a7:17:70:ce:7f:6d:81:
                    70:e5:85:24:aa:16:1a:41:86:a6:6d:50:ad:c1:86:
                    b2:51:dd:57:e2:69:1d:22:07:af:dd:40:f3:91:6f:
                    0d:c5:a4:19:21:ef:28:4b:39:ae:59:12:e1:4c:78:
                    91:f3:4d:b1:dd:65:b8:da:ff:59:70:e1:69:96:7d:
                    68:3a:89:e4:51:1d:dd:fd:e6:1d:22:95:4f:70:87:
                    a9:4e:66:5e:bf:9a:6d:e4:d1:dc:79:e3:ba:10:7a:
                    a5:a0:44:9b:97:6d:da:41:c8:46:ce:60:52:3c:1d:
                    66:72:de:06:04:cd:07:a0:63:65:cb:af:6c:0f:10:
                    c3:18:2c:40:27:01:5f:34:71:86:fd:23:db:7e:26:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:48:67:AF:85:28:F3:26:44:51:12:9E:BB:F7:39:C2:3C:04:A2:A0
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:c2:63:07:a6:3a:bd:a6:9d:ab:78:44:92:1a:ad:cf:62:
         ee:4d:fc:63:4e:e3:c2:63:7a:cb:22:af:1e:6e:e8:78:2b:ec:
         e7:c1:08:f9:fe:ef:c8:93:ce:bc:93:8a:d0:dc:0a:52:e4:a0:
         d1:f3:e9:19:0f:15:74:23:d3:b2:75:7a:8a:f9:d9:a3:68:87:
         17:16:85:5c:34:7d:05:85:ad:7c:a9:1b:6e:57:c6:69:71:ff:
         bf:4c:a4:4b:b7:56:89:73:c7:00:52:fe:fe:65:68:f1:7c:ae:
         41:36:4e:58:d3:a0:e5:81:06:bc:b3:6e:b8:01:57:2e:b1:ba:
         7a:f3:14:0e:78:c0:03:20:7f:80:da:ad:2d:94:7d:a8:77:2c:
         8a:57:21:a7:dd:e2:c1:40:e2:f4:59:e5:5b:ef:6b:60:0b:10:
         e6:ae:a7:44:47:20:f6:c2:43:08:af:96:14:3d:c7:e5:a0:71:
         97:e8:8f:3b:10:a9:56:3c:ae:31:53:64:9c:9d:88:5c:30:dc:
         97:35:08:0f:4a:43:75:1f:a8:1d:e8:3a:59:23:22:8a:3d:a1:
         4e:35:86:70:7e:63:14:70:fd:c4:ae:8b:c2:e4:45:88:d2:0a:
         e6:73:d9:86:fb:b6:76:4e:6f:8c:ac:52:61:94:24:21:49:f1:
         2b:95:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:51 2026 by rpki-client