Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          ORwtLKnazjLhbDfWpOzE+UdlKhSqan15aRAPapdBiaU=
Subject key identifier:   CC:AB:E7:AE:C6:48:98:6F:D6:05:81:D8:BA:AF:2E:DA:EF:5A:76:6C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       019CA97CC7FA3E60979D32DD8A80B5F267B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          19A8
Signing time:             Sun 01 Mar 2026 13:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:52 +0000
Files and hashes:         1: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
                          2: CqA9cr2DE41pKD1teATFElzNQMM.roa (hash: Yu9pGPZlVEZb08k6hKWvmkKjxaboZondaohylKtbBNE=)
                          3: DDQuSRchUsTONQFDXN241i8makQ.roa (hash: 9Bakhxfn/ZSz8KdwGJaTawgcJWGxI/ZViAwYdC6JLp8=)
                          4: DZlCXtJccLP5CvH1IidVE75-VBU.roa (hash: GSRgLFliaDL+yaLYBTmTuTWDmh/1GTiBHJVvOOeVvME=)
                          5: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
                          6: Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa (hash: h/3w7HTeHzCXjM18AkUy2ZC4OLV5zp/8BEXLvTQ7pKs=)
                          7: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=)
                          8: J0hUsRCIsJxqBDRWowURVzD64X4.roa (hash: He+iX00zjq0nvLNeHU3AImzUnMzLPp3BFiM+8qRicMw=)
                          9: JsIHfHpPQrnekdFAPCzTMnYw164.roa (hash: UKlA4LZ7sAnV+fNaTjO88sVLgs0VMiuV7lCEsjs5P4E=)
                          10: MsSlk3WQ80ETXzZv-_xFc70cB4o.roa (hash: UXtaZaFGO7Pek5r3b1Q7L+7LS6p3gDK8oAU7N1F6XHk=)
                          11: Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa (hash: pgdQfCVii0tZJ2RyRo580T4O0JCC2mcRd1QEO6ECB2U=)
                          12: QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa (hash: bXd6j/Agfn0Rdepo1CUkaCAq5JVFgCLN7MB9bLtEyjg=)
                          13: QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa (hash: JLC6T3gloruu7glMw++YQSZ+CxmCxYVfu7O7HVXEONg=)
                          14: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=)
                          15: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
                          16: cmiAdI9ABY20r1DL-iK7mP_ABOQ.roa (hash: GVlILV9edBQcEnREaTXDYU83MwfyP0dZPoDbZHRuwLg=)
                          17: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=)
                          18: jiIhZii3j4Bqym72DQeyWI_m29Q.roa (hash: +SPdj+zBKoxWRkJS1U/YY6cllApr1BpaKaVGD0dmzRo=)
                          19: kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa (hash: ZgKOQA+PHq9i2ji6e+ts+3wSCdikkWfp1S4fKo671JU=)
                          20: kUL_GvYXS_94QSofdFlMNZdISv4.roa (hash: Mxp3nUXiwwphpooQtwG7jgdbNv/OEx4oNKjtwZp8Mv8=)
                          21: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=)
                          22: qmF9fRcumk7X2oJN5OkS-C8FSYI.roa (hash: kNN2YWGRgsIQUTPdz3mbK/nIsN9Wk7Pw3UUk2fdqFdo=)
                          23: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
                          24: s9XpH50IUJBDqGm5liaMw7s6Njs.roa (hash: 3HgZKcrh15EUGsnYKA6GPUieZc8k28J7WsTmBzdNTZs=)
                          25: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
                          26: ulNfXAbUCn0EIzzAH-fg_QLGm7I.roa (hash: qj6bZX/kfBz2h0JS13N+LxoFybMNI2V0ojpMRowCNJQ=)
                          27: xNnQfct2h92PaIKS74sD9CM4o4U.roa (hash: QGuW5QKxtse8707nSPUJuzi0XsZ2TE2pxDMoVhy4gvQ=)
                          28: yVrNXqNEpQPVCD5-s0QzcdjfSt0.roa (hash: MPF8hnJnGT4tCUF+yYI/sK+YJjujYjlpvRajTbmYFa4=)
                          29: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: pSHsPBhViEAerZdWRXUb9/DfLuSzyOlak9PSLnbdogo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:c7:fa:3e:60:97:9d:32:dd:8a:80:b5:f2:67:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Mar  1 13:00:52 2026 GMT
            Not After : Mar  2 13:00:52 2026 GMT
        Subject: CN=ccabe7aec648986fd60581d8baaf2edaef5a766c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:cc:f9:0e:cf:b1:9b:6a:fe:76:fb:84:9e:
                    3e:cf:0a:24:78:2a:92:d8:d3:dc:bf:26:ed:48:a8:
                    27:88:f0:7c:f3:6f:fa:e5:29:4d:83:51:29:53:21:
                    89:ea:8b:71:9a:54:1d:6e:34:a6:35:69:6d:58:07:
                    28:0c:27:df:35:ed:79:b0:87:31:17:e2:48:17:5a:
                    f2:bf:ca:d2:87:56:c8:6a:75:59:be:77:60:dd:c6:
                    5d:70:b3:a2:a3:69:27:a7:90:dc:5e:40:f2:cb:a4:
                    1f:d6:7a:ea:4d:46:31:1b:f4:c9:9f:e8:20:17:82:
                    bf:5c:0b:8d:8c:1b:83:8a:4e:fa:6d:5e:14:b9:c7:
                    0c:a7:ea:4b:9d:8f:ea:2d:01:1d:5b:66:8e:2a:a9:
                    01:53:e6:fd:77:d6:28:22:ae:a6:14:ad:0a:54:b4:
                    67:b9:6e:44:25:10:0b:c6:07:26:cf:7a:9f:64:20:
                    06:64:a0:fb:fd:16:fe:00:86:51:b9:db:2e:4a:5a:
                    cd:46:e7:bb:4c:75:d6:36:03:f9:83:a7:fe:9a:30:
                    b6:93:18:5e:e0:ee:89:c9:a3:47:66:0b:d8:5e:53:
                    bf:52:d6:99:42:20:0d:20:26:10:38:2f:1c:15:a7:
                    7d:bc:69:69:e5:6b:85:14:db:42:16:60:02:2a:d5:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AB:E7:AE:C6:48:98:6F:D6:05:81:D8:BA:AF:2E:DA:EF:5A:76:6C
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:59:11:85:e7:81:cf:6c:c3:f2:fc:7a:df:18:c7:be:3d:
         ca:c3:28:64:7f:b6:f7:73:19:43:ae:ec:bb:37:b4:96:08:23:
         7e:b6:3b:66:fc:fb:53:f3:99:c3:31:7e:1b:92:df:59:d7:fb:
         8f:18:ac:6f:4a:58:77:8a:84:0b:35:e3:5e:b5:77:e0:e3:a2:
         e8:14:56:67:3c:d6:04:97:54:46:fb:2d:0e:02:ae:f4:f5:f1:
         52:79:a1:91:df:ef:9d:a1:be:91:c2:c4:ca:b7:a8:a7:b6:2a:
         e8:c8:f9:c1:66:47:66:42:34:26:6c:71:da:8a:f8:ab:4a:da:
         8d:d3:18:18:38:85:76:de:a8:93:7d:aa:76:af:fe:12:13:ee:
         f9:69:f5:83:47:7e:32:80:46:1b:9a:98:4a:44:56:13:eb:bb:
         bb:92:fa:91:9c:69:4d:41:fc:1e:50:0d:83:76:3c:dd:ce:af:
         bc:47:20:3e:b6:b2:63:86:cc:11:36:11:5e:df:d3:4a:51:d1:
         40:7e:ca:22:84:59:71:b9:d9:c1:69:11:20:17:12:3d:0f:0c:
         43:99:e5:c3:6d:76:73:d2:fa:36:a7:79:30:48:b3:eb:94:b5:
         b4:a9:d4:a6:ec:6b:2c:6a:37:b2:bd:da:5a:14:81:3a:b9:e3:
         9f:6c:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:39:29 2026 by rpki-client