Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          iFQEniUO3/clvZMT5geD/2PopN1M934noVtJBjedbxU=
Subject key identifier:   35:D0:48:8E:AA:AB:CD:52:07:CA:CC:CA:EC:56:56:52:27:8E:FE:84
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019EBF5AF7283224AF7259C6E3361F36B8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0890
Signing time:             Sat 13 Jun 2026 05:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:10 +0000
Files and hashes:         1: 0-M2wHYVJo6WO_dOM_FrtWqv32g.roa (hash: Syur9QoTGjJsrlDvPR/2jwpPclrs3Zqpe7DQd8jDoYk=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BvHi-9W8GTD7LuR4KI3K7NccH7M.roa (hash: zHRB/Mgz4Rp30xaIRw2vIwtiSLy6piaCCU+qGs3mVdE=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          9: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          11: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: x2kHYUSv7xcl/llXDz/CRsb+W8DthS4tojR9ZQStnfo=)
                          18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          22: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:f7:28:32:24:af:72:59:c6:e3:36:1f:36:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jun 13 05:01:10 2026 GMT
            Not After : Jun 14 05:01:10 2026 GMT
        Subject: CN=35d0488eaaabcd5207cacccaec565652278efe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:f6:11:fc:97:2d:40:b5:ff:c8:e1:a9:c3:
                    a3:cd:9c:ba:c5:ee:c0:4c:78:e5:38:a2:d4:92:bb:
                    7f:9a:d4:18:ee:5e:dc:da:34:32:10:b9:5f:c3:db:
                    23:6a:e9:ae:a9:9c:d8:37:3a:b2:4f:1e:12:b2:9e:
                    fe:2e:cc:f0:33:d9:09:8c:3b:10:f4:3c:98:6f:82:
                    04:13:0d:2f:81:2f:47:bd:89:d6:13:6b:a8:0e:63:
                    97:ee:e5:7b:a8:17:f5:1a:ba:06:62:ca:f5:6a:2d:
                    4a:65:b7:1e:91:ab:b8:84:6a:30:89:fb:bc:7b:44:
                    97:a4:ca:13:13:7b:b0:3b:78:89:4e:2f:e8:08:4e:
                    ea:4b:0f:9b:11:b9:f5:1c:b0:30:0e:9d:42:91:bf:
                    02:dc:d0:93:80:69:51:e1:59:45:76:e9:cf:1a:cb:
                    8c:a2:b1:fa:aa:55:aa:a0:82:d2:66:cd:40:96:b2:
                    e5:aa:2c:29:fd:62:15:70:7a:d9:af:e5:34:53:f0:
                    f4:2f:a1:09:b3:de:e4:c9:00:52:c9:2a:9f:8b:b4:
                    e1:11:c1:6d:63:10:31:33:60:a3:21:f0:e6:13:c9:
                    ed:55:76:05:20:e7:24:56:a1:4d:f6:d9:24:1a:af:
                    e0:62:e8:68:46:b2:98:c2:a7:99:6a:13:48:88:b4:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:48:8E:AA:AB:CD:52:07:CA:CC:CA:EC:56:56:52:27:8E:FE:84
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:cd:1c:bc:91:d2:24:27:10:ec:b0:16:c7:c5:1b:36:56:
         bc:41:a2:53:b9:01:68:4e:c6:69:19:8f:23:a6:45:98:8e:61:
         e1:4e:88:85:7b:85:5e:11:57:1d:c2:c8:89:81:15:c9:75:56:
         e2:92:cf:d1:38:c6:ad:ea:f6:f2:15:b6:a7:9c:ef:db:3b:08:
         69:80:26:72:6a:9d:45:01:6a:18:60:de:27:47:5d:df:51:c7:
         63:d5:70:0b:db:ba:d5:74:c1:88:ce:78:dd:6a:72:64:e7:35:
         23:33:c7:75:83:5b:5c:1d:28:17:0f:bd:49:a3:f8:63:db:bf:
         31:e9:c8:d3:e6:74:cb:ee:9a:23:21:3a:8c:bc:17:af:c1:35:
         46:24:55:a0:78:1b:c8:a7:de:69:df:5e:26:cb:f6:67:1f:9d:
         db:2f:be:d2:ec:6d:7a:28:1e:e0:e7:c1:b0:32:a4:7f:88:78:
         1e:95:0f:a7:9b:8a:2d:c7:3a:4f:d6:fb:e9:57:6e:45:60:b1:
         8c:05:cf:d4:1a:50:a2:68:0f:3b:b6:a9:97:f0:1b:08:98:78:
         4a:85:10:53:ae:a1:83:74:f6:d6:59:64:5d:ed:81:52:e6:12:
         0e:3e:36:41:26:83:e0:e5:a1:97:16:82:bf:3f:65:6c:f7:fa:
         fd:01:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:21 2026 by rpki-client