Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          47aVWejVmTBraZpvue7kyC0FA2b066oXtJbqjMdxWHI=
Subject key identifier:   7B:85:5C:0F:07:B3:D8:61:72:E8:03:87:81:C8:01:5C:58:FD:D9:45
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019CFB3DF487BEA123AE2CCEED36008461D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          18BF
Signing time:             Tue 17 Mar 2026 10:01:07 +0000
Manifest this update:     Tue 17 Mar 2026 10:01:07 +0000
Manifest next update:     Wed 18 Mar 2026 10:01:07 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: kA7WVSY+12kZGOjJXiqn5AprO5T1/xCrNYW8vaK/xrI=)
                          2: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          3: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          4: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          5: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          6: 16nRyZBneqNvEfGo1-HpM9Ja0Qg.roa (hash: jc0qTiU5kUL9CDVuEIN96YPjHZwKeP34Xiz/uIOIYSs=)
                          7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          8: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          9: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          10: 9bg312-jpd5dsTESX25J_DZuaqw.roa (hash: LAZo3eOOurviFVjV+JoiwFbUPXZpY5hQY2UdXIQci0M=)
                          11: BRRlr-O65m98wAyGeEux0ziZQTg.roa (hash: r4yxbGgOabU6dy/wqqnsPsdmZlo8myEwwZceeDTTub4=)
                          12: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          13: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          14: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          15: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          16: IUNZ7k6Be0InVz26bkrmn4bWfkw.roa (hash: DDlLvGK0psVjxhmGzrMeKyqnXmOhbxm+rWrp7gXndKE=)
                          17: J9v7IiuRP1pbAznPUNvJOlnWfvg.roa (hash: EYQYgTyVzWI0iNgScvYcbg1KIwbJ7qZmmAC63DQl9Q0=)
                          18: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          19: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          20: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          21: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          22: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          23: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          24: Ts5PqWGJj2W9EIosEAfizgq213Q.roa (hash: CTqIT1awwqBKy53JmlWWx69BitjHGxp4vFXWpWSK68A=)
                          25: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          26: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          27: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          28: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          29: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          30: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          31: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          32: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          33: jorfWq_1YnE5kHaeGqCZdPdeWNY.roa (hash: Y1UP/CLj7/bw212cAWqRM94fuvrK4D40u1bvJepra2k=)
                          34: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          35: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          36: mZIbZUM5n7SNvXZOBEvALh3oD_g.roa (hash: AV63YnpqRQM0cB0PktZC8zmEKBSBUm96dCFtXeH4o7U=)
                          37: q33LmE5Se9FQEcP6RSFJNn-BXIs.roa (hash: oPU6durkYfLGQ3BAJeR+pZewLCfJC12AIpaH6yElthY=)
                          38: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          39: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          40: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fb:3d:f4:87:be:a1:23:ae:2c:ce:ed:36:00:84:61:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Mar 17 10:01:07 2026 GMT
            Not After : Mar 18 10:01:07 2026 GMT
        Subject: CN=7b855c0f07b3d86172e8038781c8015c58fdd945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:d4:de:cb:28:b4:99:95:58:81:a3:32:e7:
                    f7:5a:5d:b1:bf:3f:c0:b9:5f:b0:9a:4b:28:dc:67:
                    70:19:95:5d:36:3a:2d:f8:0f:9b:0c:77:2c:78:d8:
                    3b:c7:ca:ba:4d:ae:4a:9c:e2:72:0d:17:8b:8a:18:
                    64:0e:ad:f9:94:9c:dc:03:5b:59:6c:b5:f6:a1:0c:
                    6b:f4:25:bf:60:b6:c5:40:f2:d9:6d:37:78:a5:d4:
                    0f:57:e7:82:5b:48:55:e2:e4:e1:45:48:48:76:1f:
                    67:96:9f:82:2a:4a:bf:80:dd:eb:05:2f:cd:f7:ca:
                    bb:71:fd:2e:84:63:3c:4a:3d:76:8c:92:eb:c8:00:
                    4f:25:4c:9d:c1:ed:0b:f8:a4:01:5b:53:cd:77:59:
                    02:8e:a5:0f:00:01:a0:70:07:88:af:9a:61:e7:2b:
                    28:78:2c:10:65:a2:76:80:ff:0f:c6:a4:40:d7:df:
                    26:a5:c3:c5:d7:84:4e:b5:16:10:a2:67:77:10:21:
                    69:9a:2e:c5:92:7d:23:af:9e:f6:16:36:6e:36:5e:
                    cf:26:fa:f0:15:bf:79:7b:cd:16:ab:51:f5:b4:eb:
                    28:7b:3e:23:23:fd:bd:f6:e4:21:2f:a6:fa:c9:d0:
                    63:19:f6:6c:ea:8a:2a:33:8f:04:51:26:97:6b:75:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:85:5C:0F:07:B3:D8:61:72:E8:03:87:81:C8:01:5C:58:FD:D9:45
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:e8:de:e9:f0:09:8e:63:ba:35:83:a4:a3:ef:f2:58:a6:
         31:1e:6f:0a:8e:b8:7c:b4:f5:29:14:85:05:13:ea:34:bc:a0:
         e1:9c:77:9e:46:b2:07:81:af:a6:b5:21:e1:1c:3f:af:d5:ab:
         70:1e:c6:e3:d7:d8:bf:8e:aa:25:51:6c:c4:af:39:c5:76:ea:
         57:14:4c:27:e1:91:06:44:b3:a5:45:4d:45:36:70:f6:9c:da:
         67:f9:7c:53:2f:68:e1:91:69:f8:8e:9e:b6:1d:7b:f7:48:8a:
         f4:df:99:f7:a8:f0:9f:24:a8:c7:0e:89:69:49:f5:90:2b:2f:
         ee:8e:87:e4:52:b9:de:c5:a2:19:56:d7:24:78:bb:a3:37:ac:
         03:de:af:32:2b:0d:3e:02:d3:56:e2:dc:b9:c7:b5:4a:a9:0c:
         25:05:44:cf:cd:87:c2:94:ef:e6:6e:6f:4d:1b:07:aa:1f:3d:
         b0:ed:fc:66:c3:c8:8d:d5:74:5d:10:10:09:5b:35:63:a1:3c:
         c1:6c:dd:12:5b:f3:df:7c:fa:be:8e:ce:d0:c7:7d:7d:03:d1:
         a7:5d:1e:44:25:f9:6a:da:25:6d:26:b6:51:0d:d1:24:ad:e5:
         09:84:8d:be:e4:28:dc:fb:0d:fb:9b:fd:51:12:48:48:9e:a7:
         eb:17:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 15:19:01 2026 by rpki-client