Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          N9lQMwUePEbDPZMHm1nz88A31ldmJPmO9OWobxRYntA=
Subject key identifier:   08:82:30:7E:AE:AD:9A:EC:69:B5:AC:03:DE:A2:57:FE:87:05:53:05
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019CE259D3702B8B27FDAF71752AFAA5BB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          025E
Signing time:             Thu 12 Mar 2026 14:01:03 +0000
Manifest this update:     Thu 12 Mar 2026 14:01:03 +0000
Manifest next update:     Fri 13 Mar 2026 14:01:03 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: FgMU2ZYOgEgduI7gaC/oH1Xw/WziePkROgUg1INp6r0=)
                          22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:59:d3:70:2b:8b:27:fd:af:71:75:2a:fa:a5:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Mar 12 14:01:03 2026 GMT
            Not After : Mar 13 14:01:03 2026 GMT
        Subject: CN=0882307eaead9aec69b5ac03dea257fe87055305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:aa:b3:87:8f:b8:36:ab:59:86:32:36:37:
                    fe:21:73:09:f1:a4:e0:3f:da:2d:18:f4:ac:f6:ba:
                    f1:12:ef:63:7a:80:95:93:07:e3:bb:7b:99:69:f0:
                    b8:c8:78:c6:e0:6f:7e:f8:4e:84:ae:8f:4a:5e:67:
                    07:4a:fe:0a:02:81:b0:05:c8:3c:23:12:c5:85:08:
                    a7:f9:1e:a0:3d:b2:93:03:2b:b3:47:27:b7:71:c2:
                    ed:66:ac:02:e2:a9:86:c6:9b:d5:a1:d5:0c:c9:01:
                    c6:2c:a2:14:12:c1:58:ee:78:81:49:a5:4a:c4:b2:
                    61:19:1e:c2:f8:cc:cd:84:b1:5e:90:44:c1:55:25:
                    10:db:7f:6b:97:f1:01:3a:93:29:04:66:37:11:55:
                    13:99:7f:22:5a:84:d3:93:f3:aa:38:8e:4f:01:0c:
                    36:3d:87:a8:c4:f6:00:3c:e1:57:06:34:c4:30:78:
                    58:d2:57:d8:30:22:d6:c4:f6:0c:b6:be:e3:6d:95:
                    67:79:e7:ba:b6:b6:87:6e:29:10:9e:d0:94:20:9a:
                    9b:3b:0b:dd:57:56:b7:bc:50:02:ed:95:3c:51:42:
                    dc:63:59:34:cb:a1:4e:e5:8e:03:80:fd:ff:86:62:
                    d5:26:20:e0:16:7e:45:e1:46:87:9a:02:67:f7:ec:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:30:7E:AE:AD:9A:EC:69:B5:AC:03:DE:A2:57:FE:87:05:53:05
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:3d:c0:9e:36:ae:51:e9:8e:00:6e:50:a7:1d:9c:6d:fd:bd:
         8c:f7:5a:47:f6:ee:59:d4:d8:96:60:2d:c8:e6:5b:d5:88:f3:
         ec:e6:08:4f:81:94:13:bd:27:b7:17:1d:66:44:fc:8f:fe:28:
         02:cc:df:d0:53:53:0d:57:9b:63:22:b3:04:8f:46:48:39:e7:
         35:25:01:b4:74:63:3b:ef:39:50:db:74:b5:15:ea:c3:e9:3c:
         f5:4a:11:56:8d:7f:3c:ef:be:b6:9b:1b:ed:0e:c9:1f:3b:b6:
         57:01:a0:bd:45:10:a9:8c:ef:0b:ff:92:be:80:9a:14:fc:82:
         5b:6c:09:61:4e:17:c9:a0:9a:43:6c:b9:e3:b7:b6:1b:e2:dc:
         11:02:86:7b:4f:4d:36:6b:3c:1a:ca:70:e8:30:55:c6:3e:7a:
         40:33:b2:2f:74:92:9d:3a:42:6c:02:df:64:77:1e:77:ad:d1:
         47:a0:6f:a0:ba:0f:d8:a8:6d:ab:0d:f8:c9:32:bf:fc:57:b7:
         82:17:57:db:e7:18:e7:93:85:15:c8:5c:d9:85:d0:88:18:ee:
         5d:8f:3c:a2:d7:16:41:e8:0c:fd:4c:bc:ba:35:da:99:51:42:
         2b:9f:13:a2:92:ad:b8:ca:88:4a:a9:b7:44:d7:28:89:e2:57:
         b0:54:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:23 2026 by rpki-client