Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          xLNnMHecw9DXL44IFYO492FLiivfs5lDHFnuh45Usvg=
Subject key identifier:   CC:3F:A0:8A:C5:44:02:FB:69:39:47:DE:86:5C:E7:E2:8C:DA:25:14
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019CAB33E403CB908097AD164D02EE5281A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          18AE
Signing time:             Sun 01 Mar 2026 21:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:30 +0000
Files and hashes:         1: 0OuuyqY3IwdsfAtd88x0rLTDEmc.roa (hash: Qq6wGpoV1AfHrD9+W3Yp1kNkuV/yBgqjGqUUQJ0ciVY=)
                          2: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
                          3: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
                          4: 65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (hash: AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=)
                          5: D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa (hash: LbOMXXB9u8cO6PHdvqyPMdpNy795D8V7gOQlri0kebI=)
                          6: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
                          7: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
                          8: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
                          9: GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa (hash: v9SK5mh7PmHOJWi3iJx6YpyA3GIGwSntwdY41a/SlEI=)
                          10: JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa (hash: UMtm5NsMwoDqBk1AdmB+70baCvbkR79TUj4KCkxO3RI=)
                          11: NJV8waBsLUaoGLKI4jOQ12y_154.roa (hash: zy+s0FwJ70UvNcy6TEvBfYURXcENeGYoESLAOkXvxpY=)
                          12: PdDHdpbPpbKYuTECocykq4914hM.roa (hash: OqAak7Fi70YK8BmuGNS/s8KqFkZrFfNHxhvYdFiVlco=)
                          13: SuktG5ygfNWoaIU5AmVI9f2QHqc.roa (hash: njMvgmOx4SGfZ8RPEr0/GOcVp5Xe/qHE6LYm5ovrTVQ=)
                          14: VXP_uFqv54kn5PXeZcQj6-zBdWM.roa (hash: RmWBZcHSSZvH3KKmvnz7cJeoXnECiQumgZ2zixWZ+YE=)
                          15: YF--vA_L6zCcHJEBqR7jtaCGFfo.roa (hash: a3gFh25pMYpl+agwkJIHNpjKYlN2gnTlYe3HeVBoWTk=)
                          16: YYro5ffGY8__zi5PmVjqRei7Zi8.roa (hash: v6CR7E1/nVT3Cmi4Wb+H0VJhjtdKWQon2xJxBGFWHgY=)
                          17: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=)
                          18: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
                          19: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
                          20: nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa (hash: b5roqxrC5hM3q/j7Y7kUe7Tu2I31wiF3qmJCqWlG9jo=)
                          21: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
                          22: tWR6de_y3YqQITSsFwOUQ9hgoS8.roa (hash: A85iHNufZIkn4yOU2pLKW3cxxsXEb4XDO37mWDui/7U=)
                          23: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
                          24: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
                          25: wfzgDMRxuyayBLQPPxPuYGao92s.roa (hash: XLNXyipW2bdTh0IJx7RRnlgyXVVw+Yp3FUwpSXwkVJs=)
                          26: xB8G2Wpa-bPT0379AYe1B0JaZCA.roa (hash: XnvuBDsm7nE5D21D99HgDtqbUAjTfFnm+Hp6IwSPINI=)
                          27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: ct093tRpwBna3jVJmHnGU/LtN3QOmYMObGaeBWbUj2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e4:03:cb:90:80:97:ad:16:4d:02:ee:52:81:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Mar  1 21:00:30 2026 GMT
            Not After : Mar  2 21:00:30 2026 GMT
        Subject: CN=cc3fa08ac54402fb693947de865ce7e28cda2514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:2d:ac:88:97:3a:1b:f9:7b:ad:75:78:22:
                    b3:bf:c4:4c:ce:6c:c9:19:5b:76:f2:87:c0:13:4e:
                    2c:9d:35:ad:39:c7:3a:86:44:63:f6:8f:25:36:87:
                    00:59:1d:0e:0f:76:15:ee:59:14:db:6c:70:21:d5:
                    e1:c7:fb:d5:f8:0d:38:b7:5b:ad:bc:34:8d:6b:e4:
                    92:2e:3a:69:c9:9e:b1:f1:74:88:9b:d2:09:10:65:
                    cf:91:f5:52:42:af:3d:e7:de:e3:c1:cc:54:59:7e:
                    e5:8f:7f:ac:e8:e8:ff:ca:b6:a2:d2:57:0f:b0:c3:
                    d8:0e:20:13:ba:8b:d2:bf:f8:b2:65:db:9b:53:3c:
                    e3:71:a3:f5:a4:33:6c:80:a7:d6:11:58:d1:38:85:
                    8d:43:8a:2b:ef:d6:68:a9:ab:51:67:71:b5:0a:e2:
                    32:e7:37:a4:5f:97:48:57:9a:72:c3:42:d2:86:df:
                    62:58:c1:7c:e6:4b:01:55:7f:62:c6:f4:fe:da:a0:
                    73:56:ab:16:cd:f0:4b:3c:01:a4:0b:3e:9a:22:d4:
                    4a:54:00:d5:e0:57:85:ce:ff:7e:10:7e:b8:fa:c2:
                    13:03:71:fb:d2:7d:25:b3:4b:d6:2e:d5:b9:4d:5d:
                    89:08:56:ab:8e:37:de:1f:26:28:8c:72:20:90:52:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:A0:8A:C5:44:02:FB:69:39:47:DE:86:5C:E7:E2:8C:DA:25:14
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:92:b5:61:2b:d3:4b:cf:1a:05:fd:f8:8d:62:9b:5b:8a:
         2a:18:84:8f:9a:b9:25:bf:5b:ef:06:e0:03:dd:79:10:4c:e2:
         f4:de:2c:39:69:8c:dc:b9:58:3c:18:ba:46:7c:48:62:d3:27:
         22:82:28:60:6b:9c:4a:35:49:5c:e1:e8:a6:bf:3d:56:66:a3:
         20:5e:77:38:ba:00:bc:fc:66:c3:78:15:b4:7f:98:99:ff:28:
         c2:5c:36:09:aa:a0:0c:28:10:3c:a3:f0:54:e8:3b:11:4f:d6:
         21:19:ea:83:ae:f9:cb:d5:33:27:c2:1c:07:54:0a:26:9f:34:
         b0:aa:4a:6d:60:9f:f2:80:bb:71:d9:39:94:70:40:d7:0d:c7:
         4a:df:da:8c:2e:04:08:77:d2:ee:10:8c:17:34:03:d5:6a:20:
         a0:72:e2:a7:d0:a9:0f:f6:1d:d2:af:0d:38:c6:e4:0a:45:06:
         99:01:6a:9c:32:67:f2:a8:0d:42:bf:32:2a:a1:e4:39:4f:fe:
         bc:a2:f8:7a:89:21:46:bd:e9:8e:12:ec:00:c1:41:64:2b:e4:
         94:09:b1:c2:db:28:33:3b:a9:b0:05:c3:24:a2:59:25:7a:9c:
         d9:d6:0f:47:78:c8:85:f3:0a:85:2b:fa:87:8c:ab:ae:e2:3d:
         8c:49:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:40 2026 by rpki-client