Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File:                     7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier:          rkTYM/XV8IjyJEGttq5rYrbb8j2O8BKMPGg6wyX070E=
Subject key identifier:   9E:13:AC:7D:1E:8A:B2:D6:5D:39:7A:2A:06:FC:74:6C:70:4C:35:C3
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019CE7EDC9BC55475D785883DBCBBD648CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number:          0ECA
Signing time:             Fri 13 Mar 2026 16:00:46 +0000
Manifest this update:     Fri 13 Mar 2026 16:00:46 +0000
Manifest next update:     Sat 14 Mar 2026 16:00:46 +0000
Files and hashes:         1: 112MUhV6Rq4vAZbzuW-obACCM54.roa (hash: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g=)
                          2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=)
                          3: 6Un4lee3-tm_38Q2a4fRt_TbkO4.roa (hash: 2N91csqhe7eH+tOgGrfmrNd0A1nHCs+2+t/g2zbZlks=)
                          4: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: xT+n1IIEl3tSfqRpBlhhrAOwnqv6qYMZZI/Y2oBJOXY=)
                          5: 9Nc8fqO3ppxhW-Jct8GUNtvSV3Q.roa (hash: I/mhCT9o7KgK0oLXDIPxGztzZSgd0KUVRLKYVp1PO4s=)
                          6: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=)
                          7: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=)
                          8: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=)
                          9: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=)
                          10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=)
                          11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=)
                          12: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=)
                          13: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=)
                          14: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=)
                          15: eO45uT1GtktLT0DosPv15Nj9hds.roa (hash: /f5UBKEEnLeJEYRPrjwhCeZREfYSrFvilgtotwVacbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:ed:c9:bc:55:47:5d:78:58:83:db:cb:bd:64:8c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Mar 13 16:00:46 2026 GMT
            Not After : Mar 14 16:00:46 2026 GMT
        Subject: CN=9e13ac7d1e8ab2d65d397a2a06fc746c704c35c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:3b:5e:f7:17:db:21:77:54:14:93:d0:68:
                    c1:1a:06:e7:69:88:ac:16:7b:a2:c1:95:12:ba:95:
                    85:51:52:86:6f:e1:85:9d:f9:db:f6:e6:da:45:97:
                    f6:5a:a1:ff:c0:68:28:ff:1e:3b:82:84:ce:19:ad:
                    da:fe:5d:36:e3:29:ba:3d:4a:c8:56:9c:4c:53:7b:
                    d9:f9:fe:07:1c:a8:f0:d9:9b:da:8b:38:56:ec:4f:
                    06:bc:1e:ca:63:51:30:46:43:5b:43:8d:63:89:7f:
                    17:9b:00:30:f9:c2:ae:e5:9f:db:17:99:8d:59:2c:
                    db:bb:1a:7f:94:3a:ae:fb:aa:83:2b:df:ad:20:a3:
                    12:82:76:47:63:e8:23:68:1a:96:4e:ae:e0:de:74:
                    ee:b0:0b:49:66:33:46:04:2f:63:10:90:ca:56:00:
                    a3:0d:6e:bf:b2:47:f7:8f:e3:85:f3:a7:32:8d:96:
                    33:fb:d8:ad:87:03:d3:7c:54:ae:13:e8:1e:4b:e4:
                    47:f7:42:ef:c9:89:6b:86:79:a7:ad:fe:fd:43:2b:
                    9b:aa:6b:dd:4e:37:db:0a:8e:f4:11:e4:2a:87:28:
                    e7:e3:3a:02:92:62:a6:3a:9a:ec:e5:12:cc:9f:51:
                    96:9e:75:a5:58:d9:39:a6:dd:b1:ab:f7:cb:9b:ba:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:AC:7D:1E:8A:B2:D6:5D:39:7A:2A:06:FC:74:6C:70:4C:35:C3
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:59:f3:5f:28:61:fd:16:25:74:c0:a7:c4:fa:d9:24:d8:
         4e:24:3a:e0:b5:19:f2:83:98:91:93:35:da:ab:3a:be:bf:9b:
         d9:9e:4d:58:0d:a9:f1:2a:07:c5:b2:3b:42:63:40:6e:3b:57:
         ba:69:43:72:d7:f0:e0:d4:f6:ca:74:8b:64:cd:05:23:6a:b0:
         74:ba:75:05:d8:bd:ea:64:14:82:86:65:74:eb:e8:2c:5c:d9:
         1b:70:35:4a:5a:49:e6:90:b6:9f:e9:ec:9a:35:31:f4:a9:10:
         82:ca:fa:79:ac:c0:a3:33:be:a9:8e:1b:4f:61:b9:79:79:bc:
         a3:42:9b:7e:30:63:89:30:15:2d:a8:18:c8:1d:51:45:db:77:
         72:60:34:ad:e7:18:11:f2:63:ab:3d:94:c5:53:3f:9e:50:90:
         b5:2f:ff:76:2d:bc:2f:06:be:94:f5:f1:47:80:c6:d3:df:fa:
         63:0b:a6:4c:2f:c7:a2:23:c6:8a:48:25:87:10:6d:8f:e6:00:
         5f:a5:13:4a:a2:bb:d7:57:a1:49:23:55:f8:95:79:44:ed:b4:
         6b:73:ca:00:bd:f6:05:a4:2c:c3:f0:17:fa:f6:39:1b:f4:9c:
         2f:b3:4a:43:70:85:85:56:19:5c:14:5d:6c:8c:33:25:c8:42:
         75:00:38:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzn7cm8VUddeFiD28u9ZIzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjYwMzEzMTYwMDQ2WhcNMjYwMzE0MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTEzYWM3ZDFlOGFiMmQ2NWQzOTdhMmEwNmZjNzQ2YzcwNGMzNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC07XvcX2yF3VBST0GjBGgbnaYis
FnuiwZUSupWFUVKGb+GFnfnb9ubaRZf2WqH/wGgo/x47goTOGa3a/l024ym6PUrI
VpxMU3vZ+f4HHKjw2ZvaizhW7E8GvB7KY1EwRkNbQ41jiX8XmwAw+cKu5Z/bF5mN
WSzbuxp/lDqu+6qDK9+tIKMSgnZHY+gjaBqWTq7g3nTusAtJZjNGBC9jEJDKVgCj
DW6/skf3j+OF86cyjZYz+9ithwPTfFSuE+geS+RH90LvyYlrhnmnrf79Qyubqmvd
TjfbCo70EeQqhyjn4zoCkmKmOprs5RLMn1GWnnWlWNk5pt2xq/fLm7pCfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4TrH0eirLWXTl6Kgb8dGxwTDXDMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOpZ818o
Yf0WJXTAp8T62STYTiQ64LUZ8oOYkZM12qs6vr+b2Z5NWA2p8SoHxbI7QmNAbjtX
umlDctfw4NT2ynSLZM0FI2qwdLp1Bdi96mQUgoZldOvoLFzZG3A1SlpJ5pC2n+ns
mjUx9KkQgsr6eazAozO+qY4bT2G5eXm8o0KbfjBjiTAVLagYyB1RRdt3cmA0recY
EfJjqz2UxVM/nlCQtS//di28Lwa+lPXxR4DG09/6YwumTC/HoiPGikglhxBtj+YA
X6UTSqK711ehSSNV+JV5RO20a3PKAL32BaQsw/AX+vY5G/ScL7NKQ3CFhVYZXBRd
bIwzJchCdQA4Ag==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:13:47 2026 by rpki-client