Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          33S6VKRvXEZ+OIoKUhBRo/rpI9YC/IpFawxhu2IxLC0=
Subject key identifier:   81:24:26:B1:20:6C:33:82:D6:D0:D1:BF:9B:C4:A7:A2:75:3A:C3:78
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019CBF60222C4BBB4601661FE9BC83C7F080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          114B
Signing time:             Thu 05 Mar 2026 19:01:14 +0000
Manifest this update:     Thu 05 Mar 2026 19:01:14 +0000
Manifest next update:     Fri 06 Mar 2026 19:01:14 +0000
Files and hashes:         1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=)
                          3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 1TYc0O2wm0GPpxAAn1e+ZMwpe0MvMD0AmJnlWhb4goE=)
                          4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          9: MDkr1mPINhLWlbE7zVQDBRRtERo.roa (hash: rKzUC6Ga9NHbbH+PBR/UbbD9eWJNxuXrWwtzpzRiJgk=)
                          10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
                          22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
                          26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 16:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:60:22:2c:4b:bb:46:01:66:1f:e9:bc:83:c7:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Mar  5 19:01:14 2026 GMT
            Not After : Mar  6 19:01:14 2026 GMT
        Subject: CN=812426b1206c3382d6d0d1bf9bc4a7a2753ac378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:e8:60:b5:7a:b9:37:7a:6f:a7:92:93:33:
                    d1:eb:5d:0b:8d:2a:d5:05:37:8f:a6:8d:30:3d:19:
                    e5:a9:b8:e9:ab:3a:a1:51:aa:c1:d2:1e:e8:30:23:
                    e0:67:8c:a5:f8:0f:09:81:89:41:04:60:6f:c0:7c:
                    84:af:c6:f4:cb:89:0d:51:a5:4c:c6:f4:92:14:fa:
                    f1:ab:f3:40:35:e4:1f:12:9f:1d:24:55:20:0f:b1:
                    d6:ff:f7:23:fa:ba:36:db:07:ba:77:48:99:7b:0f:
                    e7:7a:ac:20:43:e5:14:9f:68:19:28:b6:4a:e3:13:
                    b9:19:47:ff:17:77:3b:21:61:f5:61:4d:17:fe:cc:
                    01:28:85:88:f3:3b:c0:86:cf:4e:fc:a8:8a:ee:71:
                    b2:54:b3:fa:d2:f4:4b:d1:0c:f7:1a:9e:28:d0:d0:
                    7e:14:76:ba:b8:7e:50:37:a4:94:3a:47:d7:bf:0b:
                    54:c3:18:a6:86:8c:6d:90:c1:d1:25:08:d6:7b:4e:
                    6d:f5:65:18:ac:cc:27:17:9d:d2:ee:ad:1a:9e:48:
                    50:32:46:4e:19:aa:10:d6:db:58:3a:e6:f2:9f:79:
                    2c:5f:63:55:27:dc:ed:aa:88:4e:81:0b:da:36:11:
                    f3:08:0e:3d:da:a6:65:f2:c2:f0:cd:67:64:a8:2b:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:26:B1:20:6C:33:82:D6:D0:D1:BF:9B:C4:A7:A2:75:3A:C3:78
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:13:c1:75:0f:15:00:fe:63:05:d5:aa:de:2b:f7:8a:ec:
         12:e5:7c:b2:64:b3:3b:96:d5:88:fb:b8:1f:04:34:04:dc:d1:
         2d:ce:07:0e:f2:24:06:1c:18:9a:46:41:91:87:20:5a:db:9e:
         98:7f:8f:51:86:ae:c4:80:23:4a:f9:0d:a0:92:54:90:e5:1a:
         0b:7f:36:82:3d:a8:54:88:e0:ed:49:d2:70:f1:f6:9e:8a:61:
         6c:ec:94:9a:51:c5:1e:24:53:eb:0d:68:1b:bf:8b:72:d0:7c:
         a4:da:b0:a0:2f:97:d1:cc:ff:59:89:14:ae:d0:42:7e:4e:06:
         80:52:99:18:56:42:80:4b:e9:d9:cd:cc:02:b7:20:15:37:f9:
         cc:51:62:27:b9:8e:08:cc:4c:69:7a:3d:5e:42:8e:66:5b:98:
         bc:fa:52:d2:5d:84:69:24:27:9f:b8:11:5c:84:eb:ca:04:1d:
         74:7f:0f:98:7f:73:d1:73:a1:b9:85:02:2f:d8:d8:66:80:37:
         fb:55:dc:67:37:ab:2b:04:2b:c0:fd:60:15:18:a6:83:ea:76:
         5a:7e:d3:2e:d1:a5:c7:06:ab:eb:70:a5:68:81:0f:e9:18:89:
         7f:9b:0b:70:f2:09:0e:c8:c3:fc:15:20:05:be:9d:62:99:fd:
         e8:13:b5:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/YCIsS7tGAWYf6byDx/CAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwMzA1MTkwMTE0WhcNMjYwMzA2MTkwMTE0WjAzMTEwLwYDVQQD
Eyg4MTI0MjZiMTIwNmMzMzgyZDZkMGQxYmY5YmM0YTdhMjc1M2FjMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5foYLV6uTd6b6eSkzPR610LjSrV
BTePpo0wPRnlqbjpqzqhUarB0h7oMCPgZ4yl+A8JgYlBBGBvwHyEr8b0y4kNUaVM
xvSSFPrxq/NANeQfEp8dJFUgD7HW//cj+ro22we6d0iZew/neqwgQ+UUn2gZKLZK
4xO5GUf/F3c7IWH1YU0X/swBKIWI8zvAhs9O/KiK7nGyVLP60vRL0Qz3Gp4o0NB+
FHa6uH5QN6SUOkfXvwtUwximhoxtkMHRJQjWe05t9WUYrMwnF53S7q0ankhQMkZO
GaoQ1ttYOubyn3ksX2NVJ9ztqohOgQvaNhHzCA492qZl8sLwzWdkqCsRhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEkJrEgbDOC1tDRv5vEp6J1OsN4MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrkTwXUP
FQD+YwXVqt4r94rsEuV8smSzO5bViPu4HwQ0BNzRLc4HDvIkBhwYmkZBkYcgWtue
mH+PUYauxIAjSvkNoJJUkOUaC382gj2oVIjg7UnScPH2nophbOyUmlHFHiRT6w1o
G7+LctB8pNqwoC+X0cz/WYkUrtBCfk4GgFKZGFZCgEvp2c3MArcgFTf5zFFiJ7mO
CMxMaXo9XkKOZluYvPpS0l2EaSQnn7gRXITrygQddH8PmH9z0XOhuYUCL9jYZoA3
+1XcZzerKwQrwP1gFRimg+p2Wn7TLtGlxwar63ClaIEP6RiJf5sLcPIJDsjD/BUg
Bb6dYpn96BO1Ig==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:52 2026 by rpki-client