Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          1dxqE005gvqgPouBD6cCAr4XA1LJKvmflFdtTOxYJs0=
Subject key identifier:   69:08:CC:B1:8E:2B:06:69:FA:EB:7D:6A:87:3B:70:6D:B4:26:65:E4
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019DEFA56A2FAF138313A362B8CE384CD7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          1210
Signing time:             Sun 03 May 2026 21:01:28 +0000
Manifest this update:     Sun 03 May 2026 21:01:28 +0000
Manifest next update:     Mon 04 May 2026 21:01:28 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: ro2hJvz015XVHxaNfcdjbDyTQKWUFvMRyR0hYsDQOwg=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ef:a5:6a:2f:af:13:83:13:a3:62:b8:ce:38:4c:d7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: May  3 21:01:28 2026 GMT
            Not After : May  4 21:01:28 2026 GMT
        Subject: CN=6908ccb18e2b0669faeb7d6a873b706db42665e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:78:48:1c:4b:76:3f:35:8f:af:0a:47:0b:
                    09:cd:58:61:80:7c:cd:ee:f7:80:c3:00:ca:5b:ad:
                    94:93:88:fa:d3:a8:7f:60:2a:a9:16:28:e2:3a:31:
                    32:bb:95:d4:ff:97:f4:b5:46:ab:c7:ce:7d:d2:0b:
                    fc:e4:6c:15:c1:4c:04:04:a7:49:b2:e3:ff:1a:22:
                    4c:fd:c0:a0:02:7d:58:13:e6:01:2d:67:14:d4:f2:
                    05:38:48:2b:c6:a7:73:08:1e:2d:57:e0:97:b9:d8:
                    98:3a:8c:93:73:d4:6b:e3:95:69:30:9a:86:9a:e7:
                    81:d0:ef:47:7d:6f:90:07:5c:46:51:1c:04:51:5f:
                    e8:65:d0:a6:35:13:fd:e1:b1:2d:8e:60:4a:65:15:
                    75:fc:15:6a:2c:52:e6:cc:58:b1:b0:9b:3c:5d:70:
                    7d:57:bd:4a:13:e6:f5:56:a5:8f:b2:22:80:b2:72:
                    21:b2:01:6a:60:64:84:84:1a:56:96:37:e6:e9:8f:
                    65:67:c7:46:8d:e0:14:c3:3e:91:6e:70:a3:63:5e:
                    7e:33:6c:82:16:49:a8:8e:8f:d6:24:2f:25:ca:e4:
                    c6:d5:d4:dd:d0:ff:1b:58:8a:c4:88:24:01:55:c0:
                    6a:e0:d9:96:6e:5d:27:a6:fd:6c:c1:60:1f:59:be:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:08:CC:B1:8E:2B:06:69:FA:EB:7D:6A:87:3B:70:6D:B4:26:65:E4
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:18:87:ae:ed:db:e8:0c:a7:c3:2e:c3:85:27:26:df:0f:
         e7:22:a9:78:c2:fc:b1:9a:82:fa:d1:10:e0:76:73:d8:4b:c9:
         ef:87:91:1e:15:f7:93:bc:e0:69:57:dd:bc:c0:cf:f5:cc:6c:
         b7:b4:b1:a1:b7:fc:22:90:75:19:e1:bf:b1:6e:f7:1a:66:6c:
         8c:db:a6:1e:92:c1:9a:b3:ff:64:db:2b:56:61:ea:18:c7:0c:
         84:a8:d3:85:76:39:49:e7:d6:ae:15:60:e4:aa:07:5e:8e:83:
         32:05:b1:02:d0:1d:57:9d:48:4c:9f:ab:4c:e5:7a:6f:a9:cd:
         16:fe:dd:b9:89:4d:c7:18:94:44:64:f7:eb:67:d5:e7:f8:e5:
         79:54:92:0b:01:f5:45:ba:b0:f7:41:41:a6:0e:08:8e:ce:dc:
         40:c1:e9:46:3f:5c:e1:db:21:e6:57:09:99:8a:e2:d1:07:5c:
         aa:ae:12:97:ef:f7:c6:32:8c:a5:76:ba:f1:8d:8b:b9:5a:ce:
         6b:51:9d:89:0a:c2:19:0d:96:a7:f2:ea:1b:ee:c6:39:d2:fc:
         b2:92:bd:b7:c6:dd:10:a9:b3:4d:61:d3:b4:45:ce:87:38:7e:
         63:1d:09:77:15:bb:6f:c2:cb:d5:5c:f3:52:af:8d:d9:a9:1d:
         34:28:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 03:29:27 2026 by rpki-client