Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          SgsB/jspxVXaWKfpn89WaTzEdzazmZu0AEOtJfbyeFE=
Subject key identifier:   74:2F:F2:3D:E1:72:A0:92:F7:92:47:43:42:77:6C:56:E6:6C:C9:8E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019CAC4703E729092E3D32406BF5B56A0C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          185A
Signing time:             Mon 02 Mar 2026 02:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:00 +0000
Files and hashes:         1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=)
                          2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
                          6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=)
                          7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=)
                          8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=)
                          9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: KFhmSgb27viyBY7jn+N+OI/xSBkCkcJDnfIDaBWS+T0=)
                          13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=)
                          15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=)
                          17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=)
                          18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:03:e7:29:09:2e:3d:32:40:6b:f5:b5:6a:0c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Mar  2 02:01:00 2026 GMT
            Not After : Mar  3 02:01:00 2026 GMT
        Subject: CN=742ff23de172a092f792474342776c56e66cc98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:55:f1:c8:dd:1c:fe:6c:ff:45:a9:b0:e0:
                    d8:e7:0a:ab:fd:c9:fc:17:2c:bc:58:d5:5f:bc:dc:
                    16:7f:f0:38:75:78:f4:f3:90:1e:45:2c:3d:fb:98:
                    96:f4:41:4a:c2:3b:b9:3b:74:02:b9:89:5d:e1:7b:
                    12:35:1f:54:1b:82:f5:07:cc:b8:4d:ab:0c:be:2f:
                    9a:d7:fe:f0:ba:ec:69:d7:8d:98:72:25:d1:b6:6b:
                    88:63:d7:cf:a4:f3:61:80:b6:6a:52:fe:4c:db:08:
                    e8:3c:20:c2:80:21:ae:6b:b1:ab:75:4c:1d:88:26:
                    68:8c:f3:92:20:5e:03:1b:d9:2a:f8:71:98:03:f9:
                    f1:95:2d:07:4d:7e:c1:b1:a9:46:e4:a5:fb:ed:7d:
                    75:c3:38:c7:a5:2c:0e:a1:4e:ec:47:7a:d1:f8:d7:
                    ee:0e:9c:4f:02:a1:10:46:82:16:9d:47:56:36:4d:
                    41:ba:b2:5d:89:b2:f1:5a:80:20:8c:d3:e2:6e:01:
                    23:a7:1d:18:7c:c0:ee:67:0d:de:0f:21:f9:5b:58:
                    d4:40:13:46:96:19:e8:84:ec:2c:12:eb:0a:78:f6:
                    b4:08:85:ab:cf:6e:1d:aa:80:3c:c4:62:8c:ab:b7:
                    dd:11:53:71:29:fb:09:9d:94:8c:63:8f:0f:7e:2e:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:F2:3D:E1:72:A0:92:F7:92:47:43:42:77:6C:56:E6:6C:C9:8E
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:d6:92:26:a0:9d:1e:85:47:96:6b:20:dc:55:a9:ac:83:
         5c:9c:94:4f:67:a7:a9:cd:4a:91:19:65:81:1d:8b:ac:26:3a:
         38:96:9d:2e:c2:27:e2:d6:e5:91:7b:11:cb:db:06:32:3a:e1:
         81:5c:3e:d9:db:32:34:d0:dc:7b:50:14:1a:92:82:a5:cb:80:
         df:77:f8:c2:14:2e:b7:b7:2b:76:27:0c:13:59:f2:b4:a9:29:
         bd:ab:a9:cc:7f:b6:e1:b7:30:66:a7:6f:b8:2c:86:2c:5e:58:
         4e:85:36:06:dc:7f:dd:3b:e5:2e:07:a5:56:4c:b9:b1:21:98:
         d7:c6:19:a0:93:72:6f:e8:6e:dc:a3:b2:75:2a:22:7c:74:30:
         df:e3:a7:93:00:31:f5:09:2c:86:6b:d4:57:0e:36:f9:13:b3:
         33:cd:88:cf:57:2a:2d:fa:ce:7b:73:eb:f0:eb:11:63:72:cf:
         c4:02:da:c4:72:03:08:e2:02:bc:f7:ff:1c:f4:07:4f:cc:82:
         80:0c:2f:ee:54:bb:06:3f:6d:8d:63:a9:71:48:28:5b:cc:ce:
         81:56:6b:00:34:ad:54:e5:25:d8:37:f4:95:96:43:b7:74:79:
         1f:fc:f7:d4:48:7b:61:f6:24:5e:6a:16:7d:58:df:b8:80:6d:
         10:9e:2f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwPnKQkuPTJAa/W1agxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYwMzAyMDIwMTAwWhcNMjYwMzAzMDIwMTAwWjAzMTEwLwYDVQQD
Eyg3NDJmZjIzZGUxNzJhMDkyZjc5MjQ3NDM0Mjc3NmM1NmU2NmNjOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNV8cjdHP5s/0WpsODY5wqr/cn8
Fyy8WNVfvNwWf/A4dXj085AeRSw9+5iW9EFKwju5O3QCuYld4XsSNR9UG4L1B8y4
TasMvi+a1/7wuuxp142YciXRtmuIY9fPpPNhgLZqUv5M2wjoPCDCgCGua7GrdUwd
iCZojPOSIF4DG9kq+HGYA/nxlS0HTX7BsalG5KX77X11wzjHpSwOoU7sR3rR+Nfu
DpxPAqEQRoIWnUdWNk1BurJdibLxWoAgjNPibgEjpx0YfMDuZw3eDyH5W1jUQBNG
lhnohOwsEusKePa0CIWrz24dqoA8xGKMq7fdEVNxKfsJnZSMY48Pfi6tOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQv8j3hcqCS95JHQ0J3bFbmbMmOMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxvWkiag
nR6FR5ZrINxVqayDXJyUT2enqc1KkRllgR2LrCY6OJadLsIn4tblkXsRy9sGMjrh
gVw+2dsyNNDce1AUGpKCpcuA33f4whQut7crdicME1nytKkpvaupzH+24bcwZqdv
uCyGLF5YToU2Btx/3TvlLgelVky5sSGY18YZoJNyb+hu3KOydSoifHQw3+OnkwAx
9QkshmvUVw42+ROzM82Iz1cqLfrOe3Pr8OsRY3LPxALaxHIDCOICvPf/HPQHT8yC
gAwv7lS7Bj9tjWOpcUgoW8zOgVZrADStVOUl2Df0lZZDt3R5H/z31Eh7YfYkXmoW
fVjfuIBtEJ4vnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:56 2026 by rpki-client