Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          +lTa3CgfRtbQ2qZ/BkrdZN/kW6F7txr/H2vQZS7xILw=
Subject key identifier:   7C:EF:56:D2:72:F0:3A:E0:93:E5:F5:29:49:C9:44:EE:1D:04:18:EC
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019CBDDF4E19D38C99DEF1A051AC6B6108F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0B4A
Signing time:             Thu 05 Mar 2026 12:00:53 +0000
Manifest this update:     Thu 05 Mar 2026 12:00:53 +0000
Manifest next update:     Fri 06 Mar 2026 12:00:53 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=)
                          6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: c31FM85VFHSpjNcDVQEEgzsDBqTuclPXaVD707Mr/7Y=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
                          32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:df:4e:19:d3:8c:99:de:f1:a0:51:ac:6b:61:08:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Mar  5 12:00:53 2026 GMT
            Not After : Mar  6 12:00:53 2026 GMT
        Subject: CN=7cef56d272f03ae093e5f52949c944ee1d0418ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:8e:e2:f4:13:6c:fe:3f:76:2b:f3:bb:50:
                    58:00:e8:d3:e0:4d:97:8d:e0:a6:04:6f:65:15:6a:
                    44:53:9f:44:a4:ab:cc:38:e7:9d:85:86:6e:c7:58:
                    4e:07:88:83:e3:23:51:6d:59:cb:59:64:ac:58:8a:
                    67:12:c3:7f:ee:36:3f:ac:67:1d:d0:8e:f2:1a:43:
                    c2:75:76:5f:66:5d:9f:92:06:48:36:de:8d:d6:a0:
                    b1:89:77:2a:80:1c:6e:b3:07:80:c9:a8:18:9f:d0:
                    14:0e:cf:96:53:54:78:65:56:44:f1:b1:17:d9:3f:
                    81:67:68:e5:bc:57:78:57:bc:2f:e5:be:62:ba:01:
                    ff:77:d5:84:cd:02:42:ac:d3:b4:ab:ae:70:30:3e:
                    cc:1e:0e:ae:30:b7:ca:cb:06:f4:be:cb:21:93:70:
                    51:c3:ff:eb:b9:ef:db:1e:42:10:38:1a:76:cc:c6:
                    e6:08:5e:cb:6b:19:bb:6c:43:ad:36:c2:29:4a:3a:
                    02:51:83:12:8c:bc:62:36:11:5e:21:39:ee:5f:a1:
                    ed:db:6b:fc:9d:b3:ce:4a:18:7e:21:a2:17:6e:fd:
                    f7:e8:03:b9:a0:77:0a:ba:f3:b7:73:44:22:ca:6c:
                    71:60:27:1e:d6:9d:9d:cb:dc:4b:64:c2:98:b1:85:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EF:56:D2:72:F0:3A:E0:93:E5:F5:29:49:C9:44:EE:1D:04:18:EC
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:6d:3c:f6:78:2e:ce:ae:33:9c:6b:e5:88:c7:f5:e2:92:
         c9:de:96:84:e5:b6:f6:3e:ac:8e:5d:dc:19:b5:a8:9f:c3:0b:
         a2:26:1d:dd:03:d5:47:61:90:0c:b0:8f:dc:98:18:36:00:e2:
         b8:39:d5:92:28:51:d4:f7:a8:37:97:de:e0:d5:97:2f:3e:2b:
         bd:15:fd:d1:33:6f:36:14:d5:f2:b6:f1:d1:a3:73:95:94:76:
         05:fd:55:e2:8c:7b:d7:03:e8:35:6c:b8:c1:c4:3b:c1:56:d2:
         c1:d5:a7:66:06:fd:94:56:05:92:2d:37:e2:63:bb:56:2c:42:
         29:b5:45:23:56:f7:ca:d4:ed:37:a9:74:f4:43:dc:c2:d2:65:
         f0:cc:eb:39:9a:05:4e:83:0c:dc:7f:17:30:86:c5:02:90:59:
         eb:1e:77:9d:3a:71:b8:32:ed:61:e3:b9:04:64:e5:1a:3e:39:
         34:96:22:2f:ff:12:54:a1:1d:10:8c:c4:8c:9f:23:7d:2d:40:
         c6:dd:2e:2c:59:f4:98:b9:58:b0:6f:ec:b6:85:a7:c2:bf:57:
         ca:db:9c:59:2d:28:2a:d4:89:58:00:be:de:3d:70:25:03:aa:
         91:69:93:17:81:ac:31:a3:0f:cb:1e:ae:5d:bc:10:fe:30:d1:
         76:3b:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 19:28:01 2026 by rpki-client