Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          YSP8+pr3c0aebtjQgHqjMmdKpKcaW0dgB7A2kSG7Liw=
Subject key identifier:   6F:3F:A1:81:D0:08:88:7D:83:B9:45:51:20:91:C6:F9:4E:13:B8:E4
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019CABD9D644E1ECFD2C14834120240DEDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          18A3
Signing time:             Mon 02 Mar 2026 00:01:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:45 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:45 +0000
Files and hashes:         1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
                          2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
                          3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
                          4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
                          5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
                          6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
                          7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
                          8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
                          9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
                          10: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
                          11: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
                          12: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
                          13: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
                          14: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
                          15: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
                          16: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
                          17: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
                          18: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
                          19: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
                          20: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
                          21: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: IsYrW3xvd48ZSfmmNNftYWi+IZf7FueAiUUiaAgfyKk=)
                          22: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
                          23: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
                          24: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=)
                          25: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
                          26: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
                          27: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
                          28: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
                          29: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d6:44:e1:ec:fd:2c:14:83:41:20:24:0d:ed:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Mar  2 00:01:45 2026 GMT
            Not After : Mar  3 00:01:45 2026 GMT
        Subject: CN=6f3fa181d008887d83b945512091c6f94e13b8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:27:80:82:04:a7:16:b1:c4:ac:8f:70:76:
                    c2:81:cd:f2:12:11:24:ce:32:22:c6:72:55:00:c3:
                    b2:f7:4e:3c:f8:67:e1:92:76:9f:8f:c0:20:99:4a:
                    27:1d:23:f2:30:f4:01:a1:0f:fe:fa:16:66:7d:d0:
                    bc:51:61:88:d0:93:d4:8d:6f:13:61:01:a3:c8:c3:
                    b2:02:ad:00:05:f6:c7:41:e5:69:8f:04:54:9e:85:
                    97:28:3b:e9:36:3d:54:ae:4d:21:d6:92:fc:ee:25:
                    9d:73:74:0f:64:99:24:ee:cf:ef:5a:f2:83:f8:81:
                    d8:f3:19:d2:7a:21:b5:b9:48:e6:23:15:48:70:db:
                    fa:78:55:b8:23:be:41:f9:a5:9a:13:9a:c0:fe:7c:
                    24:c7:1b:b6:80:3f:39:1a:08:1c:b7:1a:b5:b1:02:
                    a9:e6:32:68:e6:b9:80:04:fd:78:9e:6e:9b:29:1c:
                    26:b5:58:e1:02:84:1f:b0:63:97:10:65:c8:ec:7c:
                    e3:b7:ef:32:cc:e5:a2:14:2d:ac:14:05:25:8b:9d:
                    e7:de:b6:42:61:74:69:4a:5e:2d:fc:0a:80:7c:bd:
                    46:2e:43:f5:c7:94:13:f2:cd:55:22:09:6a:22:de:
                    85:5b:57:17:4e:f3:05:59:0f:39:6f:3b:9a:ed:1b:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3F:A1:81:D0:08:88:7D:83:B9:45:51:20:91:C6:F9:4E:13:B8:E4
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:a6:f6:52:7c:ff:03:14:a5:e1:6f:c5:cd:1d:01:68:76:
         b0:08:2c:c4:68:16:fb:cb:38:b2:c3:f0:57:31:79:61:cc:aa:
         63:03:7e:5e:3a:12:54:39:57:83:cd:25:a2:cc:51:7b:9b:e3:
         3c:60:b3:14:5c:3d:23:d6:1f:b3:92:67:ad:ba:d2:6f:a1:52:
         24:f3:80:7a:65:7c:db:c8:06:91:db:f2:54:ab:02:c3:e5:16:
         03:9d:6f:5b:34:c7:db:84:50:df:65:41:93:78:fc:38:40:f3:
         d9:fe:67:3c:35:d4:45:43:77:06:c6:51:0e:d7:32:c4:c2:89:
         90:a1:19:96:69:f8:64:cc:db:db:92:bc:94:09:4c:46:88:03:
         21:0b:d6:9a:44:ef:b4:42:25:60:02:d3:b7:6e:ae:7c:4a:ff:
         35:4f:c6:48:c7:f2:22:22:d9:53:8b:78:4c:60:19:c1:a0:4e:
         a3:f1:47:65:c0:ad:ee:b8:49:ab:e5:b6:17:97:13:9b:b2:e6:
         73:7d:01:b5:c4:29:e9:02:33:c7:3e:c4:ee:73:99:8a:e4:5e:
         44:2b:23:7a:d9:7f:91:65:c4:14:00:7c:12:ce:57:98:9d:5b:
         f1:db:d3:44:9a:c0:f4:cc:f1:0b:dd:62:1c:2e:68:d7:b9:76:
         68:c2:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:25 2026 by rpki-client