Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          N1Dp/n3dsomf6EVExhAvuWpCMaVvH0uAKAPwKazZ1lQ=
Subject key identifier:   92:0C:59:40:F7:B1:CF:BF:40:09:6C:97:BA:E6:E3:5A:5A:6D:FA:FD
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019D97E2322E1423B87D8F39A1F34255596A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          07E8
Signing time:             Thu 16 Apr 2026 20:01:16 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:16 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:16 +0000
Files and hashes:         1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=)
                          4: 4pRktO4y8eD6ra6mNvqltmnz8b4.roa (hash: 12Ja1hE6iIHHrJyGhSLx59zaQ5zOOmttof6X79gSp0Q=)
                          5: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=)
                          6: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          7: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          9: GSZrRVy15G6PvUYZWynpc2gz_hk.roa (hash: ZzSmu2LODxU1RdfKwu6hA1/fexn4kkckl+EdSV9u3ng=)
                          10: HDy9E8Syvp_94CFPESY5rqbClSY.roa (hash: 3igy8TWZ+XjW5zsIvNRV3KRA/9ZGWbPE9nexH9tr414=)
                          11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          13: O07Gs9HJGBohmqGgV1Fxi8Cjya8.roa (hash: kUD7jvRRGDKgNARltP3yg1eJ0LsDhp1ki9c7vn6WIlQ=)
                          14: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          15: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          16: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          17: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: d3lwtXFq2xXX30J5nmjd6KGeEDtG8G0NyxSQgNxzBdg=)
                          19: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          20: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          21: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:32:2e:14:23:b8:7d:8f:39:a1:f3:42:55:59:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Apr 16 20:01:16 2026 GMT
            Not After : Apr 17 20:01:16 2026 GMT
        Subject: CN=920c5940f7b1cfbf40096c97bae6e35a5a6dfafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:0b:34:2a:98:13:0f:67:7c:98:14:84:68:
                    03:7e:36:33:b2:08:eb:5b:ea:a0:5c:b6:4d:b1:ce:
                    06:52:be:8f:9f:d2:2e:ec:b3:b2:19:f3:a9:53:3e:
                    1c:39:14:6a:12:6c:79:02:ac:2c:23:14:55:16:ca:
                    0b:9a:2a:50:e0:c1:43:e9:e4:88:2e:4f:d5:7f:1d:
                    71:fa:35:70:7e:3e:3e:b4:7b:29:4e:82:01:b4:fe:
                    f6:e1:cb:89:ae:aa:44:0a:17:20:07:42:4c:5b:e1:
                    43:52:53:d7:7a:31:b8:ee:29:32:95:56:6d:8c:70:
                    59:9a:52:76:c2:40:f2:1e:34:13:38:ef:f5:d1:e9:
                    05:93:af:c6:22:be:12:28:82:d6:6e:82:b7:53:99:
                    00:d9:38:7b:74:3f:7d:1f:3a:da:dc:93:ad:15:28:
                    07:66:91:5e:98:69:02:a7:a7:bb:82:64:34:95:52:
                    bc:42:48:43:16:87:80:6e:bc:16:bc:fe:fe:af:96:
                    db:c0:2d:7a:11:1f:6d:59:a0:32:7d:c7:12:f3:b3:
                    bc:b7:69:e1:55:b0:48:42:36:02:28:76:38:c0:9e:
                    5e:ce:4b:e0:ad:13:d3:ae:6c:14:61:29:ab:9d:3e:
                    36:38:4a:9e:97:e9:12:13:28:16:bd:3b:3a:46:72:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:59:40:F7:B1:CF:BF:40:09:6C:97:BA:E6:E3:5A:5A:6D:FA:FD
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:8e:db:e2:ae:2f:14:5e:fc:05:d8:91:b6:c7:34:8c:d3:
         0a:b9:9b:cb:00:89:97:48:25:bd:21:4c:0d:1b:7f:d7:63:a7:
         34:ce:94:5e:fb:34:a8:30:2c:4d:9e:1c:1e:43:1b:7e:b3:a3:
         29:7f:ce:cf:9f:30:15:31:cf:f7:94:94:2f:b3:38:4e:a8:fa:
         c3:16:0d:61:f6:8e:85:f3:af:54:ed:f0:ca:db:aa:0e:41:0f:
         13:28:bd:4a:32:74:64:de:95:3a:1e:55:51:8f:39:fd:c8:b1:
         7c:53:8d:7f:62:3d:f5:70:c0:7f:ec:8d:de:9d:0d:a7:be:83:
         da:36:67:b6:92:ea:fa:89:b4:31:80:ef:41:b9:31:56:6b:de:
         12:a6:2d:a9:62:30:79:53:53:22:dd:58:2d:59:d1:a0:92:d3:
         12:99:71:d5:b8:ad:c7:94:1e:c0:3a:c3:de:5e:6d:7d:30:f1:
         e4:28:c9:84:12:3b:bb:3d:42:36:96:08:b8:25:05:80:de:b2:
         f8:6c:69:12:28:a4:0d:c8:7c:96:63:a4:b2:61:53:00:e5:37:
         c1:dc:7e:49:3c:41:74:aa:e5:89:c4:c6:21:0a:61:ca:76:f7:
         6b:1a:c0:03:44:f1:c7:9a:ee:d4:59:c4:4a:0b:43:52:75:e1:
         73:95:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:33 2026 by rpki-client