Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          NzR7oDgBKXGBjlXvFeMFZJOIZ2hfxaN4CgOUe57Pq4A=
Subject key identifier:   6D:F0:73:20:A2:B1:61:DB:3A:BC:A6:8D:C1:21:DE:48:15:6B:D2:A3
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019CCA27BA29DD647EF8AD2E79AD0F8597DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          0570
Signing time:             Sat 07 Mar 2026 21:15:27 +0000
Manifest this update:     Sat 07 Mar 2026 21:15:27 +0000
Manifest next update:     Sun 08 Mar 2026 21:15:27 +0000
Files and hashes:         1: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (hash: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI=)
                          2: 1TvvbLktHy0nhJ1DijP154aSqI8.roa (hash: SrszYjZF86XnvrrBmqiB7eRR+n9LSUu/WqhEbIv6aBs=)
                          3: 6TpoatGKSPSrwq794kzIl2Er6NE.roa (hash: 10DNCuCmmf7tQjJWk0XlymUIhyygXD24DUUyEcOANN0=)
                          4: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (hash: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA=)
                          5: 9iCGXGMlG9blrWg1oCgEyBnOWDE.roa (hash: jitXayUeLYoVIziGdLkVAJnm4bC+Qige+N+C29Ex3+E=)
                          6: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: cBO93j7UhZrl1mqPQe3wUBSGZJnjV+0t8yzYc8rK1V0=)
                          7: CX2-XqJbgxFtfbz1ZXOm-VfI4xk.roa (hash: zBpyaivrS8dLO7I1EYJl3tAX+exEI6hLkdP3m9an98o=)
                          8: EqprGk5kowrimby1Je14qsse7Lo.roa (hash: LFHwUVenT9McibVbW2ZQmoL89oEmwzTC9qG4B4kc9jc=)
                          9: Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa (hash: DycZzKRjASdGPWCvEe7wIXygt7lohrHYcbmcoZSbRMw=)
                          10: G3HN66IsyUqcyb4IdBzNqnOqqc0.roa (hash: sDJ2LPZQc8/0xG/uRBZ6QNwDRUd4YGJewkn7EWmexdg=)
                          11: GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa (hash: Q4GuX3aVEvIlMgK5veVPusvhLwaRKg/Xs093or8mHOo=)
                          12: H-VLcLjySEvCPdXFtIamTTKKAmY.roa (hash: Pu4WAc0AHR3VQp7EwlL95Ks6Sl9Ot8C0yUhL/DK+kcs=)
                          13: IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa (hash: sPvYwBM1GXpOKAqaT4Pf1zse9CyIwkrb9aMQGJa8ysg=)
                          14: JZWlbgGs77-K_lBvMrRD_aczpko.roa (hash: 7WDxDeue9uY3onqd6ZcYQ+v+RK9TTwQALQaKXD0UqfQ=)
                          15: Jj4at4zHeBwwNmGkDLH-Mp9huMk.roa (hash: QZpy1OnnLHSLHXiQE2iYW3CLy6/t5uEpr8+8UATusHs=)
                          16: L37d5XpVwOihITHnXxLI5vAySz0.roa (hash: Meq3YteYq93BIA+pzMA3bx3hn2eN+fGD8F0EUsr+moo=)
                          17: LVNDdtLYnujMWbq0swLbShC0Y-g.roa (hash: 8HctQXfZBPB92/kv8TD0DdrdmIMzx8hg2wfACFjK79k=)
                          18: M-2rME5iw6DM-f47-QFFb7VzGFU.roa (hash: vtu0N2tgrIN8s3d7nrEfJQ8SnAhHAVxXwjju8rnYHgE=)
                          19: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (hash: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s=)
                          20: NUC_LFMe2cNtzU5aCrIgV-H-cMA.roa (hash: NpATbiFrt9IYp6v1R73idi7OcNugJKN3KPoGaMp8IYk=)
                          21: NfntwoXD_O0scdxf60MFJ4QAEsM.roa (hash: fJxzALYVA6cDE1yHGT4WjIHIwKWY+JaHack97oaMMaY=)
                          22: PZOfXkMDADVBf7NT6Rj7RN56siM.roa (hash: SMDC4UDcpAMIXDcIa/4V8NacOsggpeu0mE3jv/ToZ+w=)
                          23: QrZBpVrINYvtt8eQ3BUierAVaEo.roa (hash: otF3M+RO1u8J3AFXZCe+jAflY8Wg53WcaWXyGwSEsJ4=)
                          24: T9HYPrCqI1Lwx1ICx4gg3y9EaPs.roa (hash: 8WBx6rryQFW8qB2gn0UcoHoZSKFuIQe/bNKvBOdNkz0=)
                          25: TskIBboLcFBuqPn_MOgE03hfzQA.roa (hash: mdOwXyGLiZ3kiLeepuX9bG0ElkLvweofxQqMwNHkNZM=)
                          26: TxA7LZAEQ_1O1wo4B0jrXnmrDhw.roa (hash: 5o3TCb2lIaRZg6xjEwTN8/Pb07E53fm4tlVwapwpcIc=)
                          27: Wbq7Ok0yF85jLwjgt89q4ddf2aQ.roa (hash: GTUajXsE/JkQFkUisKJPXVFO/HOVdC4Jka6OQslN+MA=)
                          28: Yj7Z4O3T_4OFgcJvDON8O9sZ3cQ.roa (hash: YDlOogzHsGSTZo3rVdCrAX857/Bm2F4SnElxA8x/cN8=)
                          29: ZrBNPjEycZrANxNyVIzzzbkmbro.roa (hash: xRKEM4Adn5RZtYpllrg5Vg4AZHQgUo0g7tJdnV0uOgQ=)
                          30: _ryzMmjmSU7ZGAZCZXgl3zhi790.roa (hash: bcxS6uMI7fATL0M6h1j5zg3SrS8sl6NPvR5jNoM7/MA=)
                          31: adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa (hash: 1Kwboaf94lcPqOMax8VtYSaq7bYuJ9QQ+t9XDkOoZZ8=)
                          32: bXvQDzztgR20YUmWOPJv3-d7kbs.roa (hash: Yu03wDPl98lP1gZjiDY9V7dBNvUsvmd/sPZMcHPqSFo=)
                          33: c--NfYyQ6E-hR59TJgivWxwrXVM.roa (hash: tL2NGDcvc+5rAS2b+OMbEZsDoupyJSLpPH625LDD0s8=)
                          34: dAQ6Yalce-mSw3JzJGnHTG3anHQ.roa (hash: 2mIrdQ1ciiXVimVbz20GsghWRPI8l/oYrrPopxaFDQg=)
                          35: exV_NxoACh9PVI2yk3AFGxcSE74.roa (hash: /7CsSD2D8O74c2ToqHoUhp+nSCjsquhAS9BwzWD3GKk=)
                          36: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (hash: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU=)
                          37: iUizWLhWfxuhAg01J5TZ1jFmSPg.roa (hash: ENIMp5nV0vUaK5H7wzEsTFdmK8DXWPVnhfT4KGT0dVc=)
                          38: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (hash: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc=)
                          39: lgzi4YsrXvoBW8RlYxslYJTfpHs.roa (hash: eSi9kncqAL4WVQ1k1BW+/Zwu2o42SgRuUSoCCd+nq9I=)
                          40: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (hash: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q=)
                          41: o2l8xzkmVJWqm4ShtsEWZOgOYfs.roa (hash: LJ04zYKzGbwKYdxO34r5QetPcNFFzW69WM6bxmWsEAg=)
                          42: xTZJJpGpeUxMY5LeQXBMUN19dnA.roa (hash: HbnsCO3ZsmJagmIfOuDUR7M7F04yDmonV5hrdy2TpFM=)
                          43: yv8FhbcnTRrN9TOc-2PsqWje6m8.roa (hash: P9uulFa6QaPUohj+iTguvv0i6CS/+WyKM74MIfRJ4RY=)
                          44: zB1uc6k_qAdWt66X8InqZqHDntM.roa (hash: hWYMua5mstmbOSm8yc4WQRkHL7pc/tOGsprl+gVmDkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:27:ba:29:dd:64:7e:f8:ad:2e:79:ad:0f:85:97:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Mar  7 21:15:27 2026 GMT
            Not After : Mar  8 21:15:27 2026 GMT
        Subject: CN=6df07320a2b161db3abca68dc121de48156bd2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:84:b2:76:ea:ac:43:07:ed:64:19:a7:61:
                    3a:e3:ec:0a:07:7d:73:8a:79:1a:03:a6:95:1e:94:
                    63:ad:cc:71:4d:f2:43:79:61:4a:ec:19:3c:e0:53:
                    7e:da:7a:49:ef:e9:b5:94:3b:38:a2:cf:4b:66:5a:
                    f2:ee:fb:e9:de:97:2b:eb:d4:94:80:cf:b2:6a:32:
                    01:ac:c7:73:09:9a:d2:ac:cf:0a:d1:14:42:6a:26:
                    95:63:b8:37:9b:c5:4a:a2:a8:e7:5f:72:6c:14:fe:
                    84:b8:04:71:cf:7c:b1:4c:3e:b9:1a:6d:19:43:ae:
                    69:e9:f1:c6:a0:59:15:19:31:f8:18:b5:b1:03:43:
                    38:31:f7:30:6a:52:1c:77:0e:5f:01:13:2f:4d:74:
                    ce:aa:e6:43:bf:52:c0:01:8b:aa:34:2a:f6:8c:d8:
                    f2:68:7c:2d:d5:21:fa:71:11:0f:87:a6:92:58:fb:
                    af:27:29:4a:69:88:2b:4e:8f:e7:af:b8:69:28:3a:
                    76:aa:b9:4e:81:48:39:4d:e0:3d:7e:c3:e7:34:61:
                    0c:b2:1e:b9:7f:e2:56:a2:80:eb:c3:2f:48:10:de:
                    b1:4b:51:5c:67:54:ff:d1:cc:c9:05:84:4c:cc:3f:
                    7d:e1:46:d2:1a:7f:96:0f:64:fb:9f:a5:91:c4:ee:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F0:73:20:A2:B1:61:DB:3A:BC:A6:8D:C1:21:DE:48:15:6B:D2:A3
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:61:e5:3c:26:10:07:44:ca:4c:4c:19:81:79:ed:d9:18:80:
         32:a8:f0:c9:7a:5a:84:a1:f5:2b:0c:d2:c8:9c:90:44:5e:06:
         e8:1e:71:b7:23:8d:13:1d:20:54:6a:94:a6:4c:ab:e5:a1:8a:
         a0:d4:e2:25:ba:ce:e5:ce:9c:79:29:b7:5f:08:1d:a0:c0:21:
         c1:42:fc:ae:a5:67:12:da:48:d1:ca:98:c0:68:6c:2f:2a:25:
         62:99:77:12:64:88:f8:e2:8f:0b:fd:ad:20:df:b6:ba:f2:6c:
         d5:c4:9a:9c:86:95:2f:ae:96:19:d8:05:e1:7d:b6:fb:7c:15:
         b9:8e:fe:8a:fe:78:4e:69:c2:90:bc:05:d7:86:8d:ce:03:5b:
         a6:15:f3:63:84:1b:94:30:16:14:b3:3e:b1:b7:39:86:e6:e0:
         7c:4c:77:90:5e:3d:c1:a1:76:6c:69:64:e9:26:35:b0:8c:92:
         87:8b:bf:9f:bf:b2:dd:7a:dd:06:e1:83:3c:76:44:49:96:ae:
         ab:62:ec:bd:2e:95:ed:1e:cb:7a:81:ba:fd:d2:ad:d7:a1:f3:
         b4:74:c2:3e:1c:14:ea:7e:fa:d8:59:f3:2b:7b:4f:52:c2:97:
         fe:63:9d:6e:e9:3b:74:db:e1:eb:b4:3f:65:d0:42:1a:44:85:
         0c:99:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:48:17 2026 by rpki-client