Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File:                     8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier:          v90b+i3h6H5f48BTGB+6EicLN1VCMTDKkjzlEEkknK0=
Subject key identifier:   51:31:75:FD:DC:7E:67:E4:75:40:B9:29:35:FF:78:0D:21:96:CA:FE
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019CA9464F08DF6C845D292160F9406424E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number:          02F8
Signing time:             Sun 01 Mar 2026 12:01:23 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:23 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:23 +0000
Files and hashes:         1: 085Ouj6r61iFfHOta5gBK38YcLI.roa (hash: +dcjb4qLRxfEpIYg0fxx4jk7ltlYnwP0GJy1QwyeW6s=)
                          2: 0WDRBcA8T2_vPd-Ea1ZI0Vwq9sU.roa (hash: YIGHUkbXGWhQksuZIMwjVtJ16rFfhT94Ptqfh71jHlI=)
                          3: 1YwxvX8gyqCOEysmt0qqybMCHNk.roa (hash: 7FYwyB2+5ONzIUgMmr62DZ1GVH8LQaI+zbpkQWQzE00=)
                          4: 7OkR-ee7FhTD9TOvFg0TB3LjHL8.roa (hash: swhyxFYwn+CnBqFhVrbs4y23f0EZqZETzSH1AeaYUII=)
                          5: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: L4cqYZhH9TuE3I7IE03qk3gG3fjRmvJ6Jd6QTNRxqtk=)
                          6: AzQcC11ESzLHrBK-dTivzNW3KAk.roa (hash: Qv/b4Iwxqe4a3Bb0a4E5kPXh7hWyERaV6fHHMv4Rwjs=)
                          7: CRVYj4NZDsTYLr2ztmZUTQipvSM.roa (hash: 7cWK9n6qHCABKdb0qA8BH/bJaK98KOF3av748QQa8AM=)
                          8: Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa (hash: Tz0AYGnnSruzndjtcc2996lF3mrEc9QKF4xL5BBOObY=)
                          9: D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa (hash: SPNOBHWtTKROWkEPCTbPZeikMWIykdbg4/O6u08XSt4=)
                          10: EkRuyKFWRjbMdDOcs1dsKgqjrbM.roa (hash: 0FQSgLPvp5qGU4zNiDnUwC5JF+/wMdIauGkL3MoX+Ks=)
                          11: GJhh8vWiqWpiHiP3VYi3X3ItnvA.roa (hash: tNirVmxjlbrQuQ0TS8mgziEdfotI43SAU47hWmclcD4=)
                          12: GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa (hash: +/48cJgrArlo6mfgDzfzRcH8s7/Ae3+DsHBX0W2Y8io=)
                          13: H37Ete5wwerLRgrUxyw0AjT9IeI.roa (hash: 1+wJnEiTXXKkwxBFLngYDir5dg37NRndLSie1sCtdOM=)
                          14: He3WNkgL7nlF2HnV3BdHEQWrALs.roa (hash: z1HcC+X1IG3bBYzg10cK+dY1EeC1ADljcmtSP53WeY8=)
                          15: IV2STCCIKUBvceivIA9sMZYZz4E.roa (hash: NWK88nLTPVw+zgkCFtTK6JB4BF6rMCxtCHK+mBrJ6To=)
                          16: Lfs6BstrmZxglB6NzeIcAn5Ecgg.roa (hash: GCu25rg6JmUHgPzrD5apuulfXOFbXsjPKJgQYmFXjNA=)
                          17: OhqmFIGIvINLi29go-GBo9V89h0.roa (hash: 2mKCCY2dNPMKK3cxtc1UfN7vUi2jnLAoSCa9h6Ix5GE=)
                          18: QIQWz5LjRr3-eZJiI14h8jJ12GA.roa (hash: Qo9fA/hq8NKORTUtyMsNENCfVu9yLZUnC+mLgPsCyGk=)
                          19: RrcZBLWHensW4zI_-vOluMC8vUk.roa (hash: u//AksjLoFGyJfMpcGAy4pCUVqvkgMuwzOBgLgKdnVk=)
                          20: T9C9mSfUzTgvxqZJLjWuayrILKE.roa (hash: jbBkfXN2XtW57R+Xos+HqO04xHgS8FtWq55RRuKfCzM=)
                          21: VWsWyAjpERJfrZ2g4I5jQh3qNkI.roa (hash: grm0wDjmetYXy317dAMerpu+VQXPKmwc2d8e++oooEY=)
                          22: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
                          23: a6AW8erSgL4cyC7RB0KFlvz16WI.roa (hash: rfXhxRN3Mr6NGEn48dAtVk+dzIWU793BYF95HmzV6sU=)
                          24: aAM7MPx5ExZMCsJFazi1Jrhvjgw.roa (hash: FsUGMRauBaoNijE/VGFvcLi0/H3k8dln+uP1XPba3kg=)
                          25: bBxPW_zCXUaubRtG39KVnEQLrDk.roa (hash: 6JqVWigaUqWLIrSVZPhejuc/cdeerKyT5VxfwlA17pg=)
                          26: be28BkxFxZLQVi19h_PxhvrDxv4.roa (hash: ErkhyWUL7IeWfO/G4gKn/lMtd8yFq776RnWqwjXgqzk=)
                          27: dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa (hash: guube1BWqaZ3lHZMwDTgjnu3u/KgBDszavN68xccEaU=)
                          28: e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa (hash: 6PChnQpINtih6r77OhVxWKRB4JPj4g8KJ34c75c/92Y=)
                          29: fkwW7vQ7hztwijIVZvUQHj1qigg.roa (hash: uzOmNHDNSP9AIZ+LDCuR9nVTUUtFCpsVotW5tlN/vQA=)
                          30: gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa (hash: EiG5DzSKz6tAYp29UWL2CcDw/nWlCYzW/1PC1TLd15o=)
                          31: gdkG9J28VtKge69Dtz6nYxoWS4E.roa (hash: 8XwMXuWP61QIVZw8vtY3HHl4aNq7qQ8km37pm++lPVA=)
                          32: i5FPBdnKsXw64xDyOCC1mnQz9Nc.roa (hash: jslAP5bC5fn7g9kGmwk3vh8WxrZdD72DU7Ti1zOMxRc=)
                          33: iXK6_smiFzBTEFuOum3bjBSjlak.roa (hash: y6nsF83Zy7iKgp3+BWL++U3NO7f81mX6D4p46sUrhhI=)
                          34: jBd826A8cxmy1TNeXWDNCyZqVY0.roa (hash: 8u0pP3dG+KCwBOrG2AKj3JYXrg0WwOnfMYUSBZbe9vM=)
                          35: kN3CKGYk23jQrOwQ6USFJSSUGSo.roa (hash: uwQr4Amla+dPIAoyBEwo7M2r1NunJ5/9MN/5rJVR5IM=)
                          36: l4rcFgc3CjyrI9KrcS2jjR14BH0.roa (hash: PJtnob7yOMI5k7D8JCs1IdsL1ZqcpSi3bvSxPr9KbEI=)
                          37: mXyId1jytJjw_zkT5EQvyHKSxiE.roa (hash: 3ZUdJ8Wk6aauKWHOMkrZ0l8uSPzp/z4WGLszPtar+0U=)
                          38: pRvUJqk2YIK32FXKqRhubG5xKQw.roa (hash: LfT6/KbbWOdFJ/9LHrdfUEsEVQTe89HYGACVUWRNkhk=)
                          39: qyQMkaFhK0_l9HWkLZKgdqyT294.roa (hash: KH+mm2gb9IuiTAVvGPUNOLjd4I2d6HpdpPsFgXNFJn0=)
                          40: s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa (hash: 07d3h4sls+mebkuKMOSsHuF9QXCiDOJiXihhE6GwphY=)
                          41: tYJC_RLkea-R9DGyiP5WpibL6t8.roa (hash: 5v6gsOIATskbh1Ml478fq/pv1vDgXJirdgTuXOCN7Mc=)
                          42: uHbsD8VdMvyuW3wv40ww1CrTIh0.roa (hash: J5w3L50Klh2IAzoXITphGMCyA9UYv12K9YFcNuXFmE8=)
                          43: wpG9PWpUhr6GqC2eisrwoTZXDC0.roa (hash: UzCVZpdigBJ2p9V8fY9Ow84FKsH/rZ2hqhow5aQQ0pc=)
                          44: z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa (hash: G2CHvYhf4pvbtn9bn6ExRtKBsl13SB1ScEQ3QJbOvI0=)
                          45: zN4xIcyuKdReWz88lELFd10OniM.roa (hash: yTZG3oZJlBmSpnKDhcxunCfxKUZwKaHWTWtPKvOIooY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:4f:08:df:6c:84:5d:29:21:60:f9:40:64:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Mar  1 12:01:23 2026 GMT
            Not After : Mar  2 12:01:23 2026 GMT
        Subject: CN=513175fddc7e67e47540b92935ff780d2196cafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:9f:2f:66:81:eb:6d:fc:73:5d:d7:0e:33:
                    0f:1f:31:9f:88:0c:33:64:05:b1:c6:8f:95:4b:4c:
                    d2:2c:0c:49:27:8b:5e:bd:10:30:b0:45:02:7f:83:
                    5e:cc:0e:a1:a5:50:7f:be:9b:ff:aa:8e:88:e6:db:
                    96:fd:0e:71:bf:1f:41:4e:96:3c:bd:20:15:29:64:
                    1c:d5:d2:a9:61:2b:55:9b:0b:d9:c0:ca:7b:f5:c0:
                    a8:88:f7:a0:f7:78:0a:44:55:a2:08:91:6c:28:4a:
                    8f:24:aa:9d:2e:55:4c:00:b6:29:d3:a5:94:81:f1:
                    4b:be:6b:64:ff:07:6e:f3:2b:77:a0:ed:8f:7b:1f:
                    56:d5:80:2e:ee:0c:87:3e:c1:2d:57:e1:04:16:2e:
                    59:72:12:a0:96:e5:b9:00:5d:cd:50:89:39:2b:1a:
                    92:17:2a:0c:90:d3:41:14:67:98:ac:8d:0b:fe:8c:
                    8d:a3:33:36:56:80:72:56:c9:fe:49:ea:89:ea:68:
                    97:e0:dc:f0:0d:9a:02:88:c1:bd:69:fd:0f:7b:24:
                    db:73:83:31:f5:c6:b3:e3:e7:bb:ce:17:6d:43:a2:
                    07:df:56:a0:44:61:0e:88:3c:2c:12:dc:2e:1e:a6:
                    cd:79:80:4d:81:e5:99:2e:ac:2f:bb:cb:29:a3:3c:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:75:FD:DC:7E:67:E4:75:40:B9:29:35:FF:78:0D:21:96:CA:FE
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:28:99:09:6d:15:b8:ae:4c:4c:f5:8e:6c:b8:22:4d:4f:c3:
         61:c8:60:7c:56:16:de:dc:24:0e:c8:aa:d0:a7:e9:71:82:90:
         2d:e9:92:70:99:02:90:d6:8f:cd:7e:54:e7:8b:47:39:b7:f0:
         6a:0f:61:27:51:d6:3c:74:6a:63:19:f3:f8:0d:a2:95:58:95:
         9d:f8:df:25:e8:69:6b:97:b1:31:b6:5b:06:48:65:c2:72:de:
         a9:97:2e:b8:82:64:83:9e:b0:0b:21:f8:f2:99:65:46:49:ee:
         86:48:35:ef:2a:17:37:30:dd:3b:7f:29:e6:4a:59:81:60:56:
         27:9d:a3:23:16:b9:5e:1c:a9:93:5f:7e:e5:27:02:5e:72:35:
         01:9b:cf:36:1a:26:b3:04:6f:96:60:70:a8:da:cf:6c:39:7c:
         3b:69:92:1e:18:9b:5e:7a:03:65:87:c1:77:43:0f:01:dc:d9:
         2b:23:4a:a2:03:26:04:8b:a5:75:77:db:f5:6c:78:2d:a3:03:
         bc:8d:b1:a5:63:58:50:d5:93:69:3c:26:f0:1d:26:05:ba:07:
         9c:a9:7d:51:d7:26:a7:1b:c6:3d:ee:e1:49:88:6c:6f:77:db:
         22:0f:f4:fd:26:29:10:24:02:7f:8b:14:6b:20:e4:03:f1:d8:
         a7:d1:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:45 2026 by rpki-client