Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
File:                     gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft (raw, json)
Hash identifier:          TqcQBGQlwU+kaW5IZkiYN0upahsRe6GuumoBpSLHKWY=
Subject key identifier:   61:4A:1C:CD:81:06:07:78:82:21:3C:B2:EC:AF:33:61:D1:55:22:5F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019CA97D6EB9D5866C3295F34F0B59890940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
Manifest number:          14AA
Signing time:             Sun 01 Mar 2026 13:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:35 +0000
Files and hashes:         1: 1LvDD_BZRnvvGf1sfqTO_100fVU.roa (hash: 2Miol9a7wXh/xaI1zT3x2+RH8dQMQn9cHhv3Yai3Ws4=)
                          2: 2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa (hash: 2DEDWpJ7SE3vVfpuMvn1i8m6ipkkzB3x7E0ogUZSs8I=)
                          3: 2zlMgtzyu-Z3PQV3_FKqG0hE9Bo.roa (hash: nnMP95GAZ+DjD/mecEGCJ28xkRqwMeqhPltnEbq4eyw=)
                          4: 4AWwNlZeQ52vOp_U-usrOE2w0gM.roa (hash: lx/A7tX4mN00OfMd85cY90olYEHfTnrPnmp79+DZP8k=)
                          5: 9ApfopST5XecrXNX5W_Af-tjDIg.roa (hash: RHQdxjL8Bu7HEwKPvDMBrwq6IiTNX6h4q2f8yg/1TnY=)
                          6: AD6JtVgrEpex3YXg49I2S0j_9qc.roa (hash: 2NwmpEf9xxJ+wfu+ua+oOE/q4G+dxZtYDJ728w4u4tY=)
                          7: Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa (hash: FrTMQ7KbXoviPjsdmZdAMqS74Hi4YJDUcARzZd9rKkk=)
                          8: G2xdfzs3wQJv9zZFB0dIYE1wP40.roa (hash: Kb0gJzw5SmbhJGivaLvicWRV0EdJSpkk1X0zcVEuKm8=)
                          9: GPyCzr214BPkOg06tc6yh_rJxQ8.roa (hash: kdGhYWmwjCp7vCKV28oYmwJv0pozjJPvR7deJo2RH58=)
                          10: Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa (hash: 5BTj8NBQJZuTgfnofdntPmd8NUBWuOYk2ttRiYNiVbM=)
                          11: La0BhNU4VvmgRSm8ubnQEzR2vNo.roa (hash: 1zOaGF7LRM3VElFTI+Ny6gzAVWNGd19+/gg7PLSZJBk=)
                          12: OX3hgxwmrzDr0ugwF2_wxk4KaEI.roa (hash: USy9HaatJH9Ws4/6yqXo33z+gYPHAPqJ9GKMT9lNh6M=)
                          13: SK0oF-iS6H8bK9GyFAh3BLhhlxs.roa (hash: PHUAJ7YsTIFFsHxj6+qDAx4PRIHY38mg45gFva1mwuU=)
                          14: UpjGE674s_k9Iv1gBCVazhi7CUc.roa (hash: 87ue4C4cllbiUGBoWnQPxG8trSEi9IkhaFFPVs+XbBs=)
                          15: X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa (hash: 6AsU1KzAtb8yktF/NBT5ZyVg0dsVVnFJnmDhHSx+xJw=)
                          16: X2iLay16x5QksfE9JjxyC7WVu-E.roa (hash: yT/oNJ7y4V01Lho2cqA94Tff1USrKA6sWC03Mms2Ges=)
                          17: eWXuhLZOzQSkVnakv6XDZbQm47k.roa (hash: 7jNn7zEJAzsZccVFp+ntzTl1B+U5CsfTk+0fguXEWaY=)
                          18: f1XxKSOwgfOmC8P37MUBgW8zIF0.roa (hash: 1s4OkHRdEaBC8RyIRnYuhJ9aFTUMNBJFdizTtu2a1lg=)
                          19: gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl (hash: kH2+3BKXgEjQvmm6yzD+kDcYfkRz4Ds+kNr/ZM/S8Q4=)
                          20: m6rJiLleGqSjvebHYwPobhqpRnI.roa (hash: ShgXTWxethW6+KMOzI+kaz0tURD514B5b269VfuNT/4=)
                          21: m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa (hash: raOzCXfv2gIYL0xQb0f/9ZqowcC2F2r8bzgcoks8gKQ=)
                          22: pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa (hash: 3074qQKnytP+H130uNFdcnZrdHZY2zcxKO2AmdzYhJM=)
                          23: rCHZqnKTLnkV-IRvPVyjvCMImcc.roa (hash: SGcPhuVDulI6n4Hi271QHa+uDx+5hY6mc1NVrLuOhF4=)
                          24: sQvPybtma9tvSwqB-AosSvIjwzY.roa (hash: tGlmhMYvSMpHbovXQ1w4dxEff+1tXSKUNI8zYaqHCcI=)
                          25: tnOvqbiqo6KcISm2Z92wnQLo7AA.roa (hash: xwsx+sSVYc3HTkslJcSA74X9wr4O1+vTlAG6cVjM+So=)
                          26: ulPpireG9CM8idNuV-lYH5N8mIA.roa (hash: iqY+kaCP0vVDgPyHBj3BJih3werU/KaEYHAloIQUi98=)
                          27: w07IS6VwbFT7C45jHwNSzVbwcR8.roa (hash: lDpW+bIbUHoYEkbMa43ojnpgVM2clYFDS8nSWRgzTl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:6e:b9:d5:86:6c:32:95:f3:4f:0b:59:89:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar  1 13:01:35 2026 GMT
            Not After : Mar  2 13:01:35 2026 GMT
        Subject: CN=614a1ccd8106077882213cb2ecaf3361d155225f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:ba:fc:3b:1b:8a:a0:9f:f2:18:bb:49:b9:
                    66:71:d3:dc:4e:60:fc:74:ef:53:07:32:c9:1d:d7:
                    39:29:2e:99:a0:c7:0b:dc:a2:e5:9e:56:6a:6c:63:
                    fa:a7:2f:89:13:9b:7e:a9:1d:d4:4c:4d:53:47:61:
                    b2:fa:c9:41:a9:0c:de:5e:d5:6c:f4:63:cb:55:af:
                    4e:4d:60:f6:32:c3:07:7d:a9:d1:0d:e5:84:b3:c3:
                    47:2d:50:3b:89:93:e4:14:58:3c:a8:c2:14:ee:50:
                    5d:f7:08:95:88:80:fc:db:8d:b9:61:69:5c:40:98:
                    4d:9d:80:7a:47:99:e9:d6:3d:11:de:67:1e:9c:f5:
                    ea:28:c0:35:4e:e4:2d:14:2c:4e:a6:71:46:b9:b8:
                    cd:bc:08:8d:35:0e:68:01:77:d2:d8:45:8b:e7:be:
                    a4:30:f9:98:c6:32:ed:77:b1:c1:2f:cb:2a:6e:1c:
                    2b:8e:68:0b:06:1b:7d:c5:ba:bc:59:22:a2:54:f8:
                    3e:47:8c:74:91:4d:50:0a:a0:f9:19:ad:09:61:f5:
                    7d:74:69:04:c9:44:4a:d5:03:c8:47:52:82:df:61:
                    21:85:2b:21:eb:f9:2a:f3:a7:d6:ac:a0:2e:33:8b:
                    9a:e8:d3:3f:30:16:cc:a5:b0:e3:09:5f:27:65:d6:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4A:1C:CD:81:06:07:78:82:21:3C:B2:EC:AF:33:61:D1:55:22:5F
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:5f:f1:07:e9:6f:c2:f6:27:db:19:25:42:20:f1:88:ac:
         d0:60:82:42:1b:dd:2b:55:4a:31:c6:68:84:4a:a6:b3:e8:7b:
         bf:92:e3:99:f9:fc:c1:6c:ac:8f:c4:4f:d3:5a:e6:ae:94:82:
         25:5d:92:73:cc:14:b6:af:60:36:64:a4:03:25:e4:58:74:a5:
         ae:db:d4:97:f8:7c:8a:c4:c8:08:76:42:f8:a2:1e:a5:d4:71:
         c1:79:c9:63:1d:2a:f9:a3:75:a4:59:06:aa:8f:eb:c5:41:20:
         9c:c3:11:01:4d:7f:6d:b7:c9:fb:0d:f3:ac:44:e2:22:3c:85:
         cd:1d:14:36:9e:95:90:fc:0f:80:8f:7d:0a:e7:ae:f9:5a:fa:
         f0:60:b8:40:db:63:1f:97:7b:c4:51:ed:1c:02:eb:7d:49:58:
         93:fa:d2:11:0d:92:f9:53:34:3e:fa:99:89:88:2c:8d:a6:1b:
         dc:e5:69:21:e5:10:b9:6b:5e:a9:9c:1c:f1:4b:47:04:af:14:
         01:35:91:34:9b:c3:7c:32:53:44:bb:b3:15:a3:3d:73:2a:63:
         9c:8e:88:4d:64:ba:48:a6:22:ae:cb:1f:8c:db:d4:69:f1:62:
         78:1f:54:aa:8a:7e:31:24:84:15:57:05:10:de:ef:f0:68:11:
         c2:03:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:07 2026 by rpki-client