Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          bPIlpD9ONoldVqtqgcLi7R2leS5qN1CNzTsxjbvwL9k=
Subject key identifier:   7E:B2:F8:97:43:8B:3F:9D:F7:66:9D:68:55:F3:BE:3F:18:A1:2F:B3
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019E585BC932BCD53B901CAEDB3F33FDF9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          0AD6
Signing time:             Sun 24 May 2026 05:01:10 +0000
Manifest this update:     Sun 24 May 2026 05:01:10 +0000
Manifest next update:     Mon 25 May 2026 05:01:10 +0000
Files and hashes:         1: 0V41IrPL9797nvcWEWG2FOZRVs0.roa (hash: 2ssmd6CA4RuDZaqZAWLQB4prRBUYd7qy+OjXYkfyY8U=)
                          2: 0mnvSdoOq2Np1ajRjxABIHng1iU.roa (hash: uW7MfVSOJl8bfntjxT5K/usy+W6G+cF+ATrwdjzTAsE=)
                          3: 1-TUZNCrJ10ahOEwp41oreLSGBDg.roa (hash: rLHCPObogTydMGgdo3ZcC9IneY90Ca9C6c4YIyl/Zc4=)
                          4: 2jmGEk4OVcICepreDNCO9eAT7tM.roa (hash: BFDa7KtVd8lP+Nx0xYbBnf+5dOJVnOedVDkc++Nuqto=)
                          5: 2mwrv0wD9Ii-22EalCpS3LzNa0I.roa (hash: yXx5oyiBSRzMOJnnZeVF3Q5wlRyj2BpyADDVZrn3lvk=)
                          6: 4pV68l2U_OBI_KTxAoUjIOcjUzI.roa (hash: B8v0b/yVI8T3veKWEXtdL1LMqczUDHMKi7SYPYiViEE=)
                          7: 6EvVe1iSCny24nuXxCceU1INn48.roa (hash: sr6pla8qayIY/DqIMDGG8xE9TOAtMeSL1wSO8tlpa+s=)
                          8: 6N99IBxeOoNouvWvldkTfkLCHBM.roa (hash: FPUrB9KogOAZBQW/PgPueBWp/lZvjFKhVmz9dPu6AUY=)
                          9: 8B2OpR0uRL2FMmC1O2ZU7nlPPyc.roa (hash: poPicSh/MHjn+zNOSYV7bGTSnbO9NymTUGa9CPZhEBE=)
                          10: 9_iEf91RWS6Or4zXi3xHqglPXuU.roa (hash: nfq16D2TXOKtFwSZlC1l0j0NZwkuSugZlNqjJes2gvs=)
                          11: 9euNyWZww10dUcwium3SKofSFMo.roa (hash: +JOKxowiMT05XyUwYWDe27B5gTyN5fMXDPrSBu4Dh0U=)
                          12: 9ynuhrMRe01fV95Cyr9pzp74us8.roa (hash: CPCA7Ls7etQTzU55irYgM6cXEy0L5hugJu12dcKcECk=)
                          13: ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa (hash: A86PQ/iyszG+BWtmyVBkR/FpnfeQe0gn6PRItvHkIl4=)
                          14: BKueLsOieGAX9FvG3x_kc_Syo6Q.roa (hash: +P5r5MnLAE+8y6qPH4D2f3RLLlxkb9rqjIzieNdiiu8=)
                          15: C4VDDLP3JAcEGxzpnk2rLngwLKM.roa (hash: ezMl5H9+rFaX3DPnZBbhAph0MJGwxBItopj9xyJgOS4=)
                          16: DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa (hash: XscIXOZDUssyO6/A3Rjz1yEV/LM4VTXT03e5bCTp2JI=)
                          17: DsEZUka67hhfO45y0N6lQLEhbNg.roa (hash: LO/Q3S/bHcnl/lLseLM9cKTvP0KfkNsY1jmwaQR9rFI=)
                          18: GLUy85p7VAjXBh9Flqb-k7SxKms.roa (hash: KFpZaWuTqKAMlOo6VTrDxS2jbsfzEvFfCW6Kj5PqghI=)
                          19: JQyOnqpGNBPQEPAwlMww21vi4-w.roa (hash: jQkSRE1wjqlaqj1a5xqclo3SlJv480zaA7qkOH+fatU=)
                          20: Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa (hash: zUSTD6UjYoCFyh+6Fa+acZar8+oT8zvNBGsiOc1YI1k=)
                          21: MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa (hash: K2zRk3RmxZ15QcwuR8MLsUcx4p8qMykaf3Ogb1jzldU=)
                          22: NG9CUSktO1msekZw9a1EZVWAEs8.roa (hash: /FXKoISQTR9dI6X0WpRKq7Dp9cupm3YGG13vpCFZWMQ=)
                          23: N_2U4grFu5nxrIC9KlTuX1giSbM.roa (hash: hqGwhEQ2nYAefg3hkWNmS4mDHtwG/bdG2tIurSMQLtE=)
                          24: Pq1wHGL74BEeLVteAs5lNhrtrQM.roa (hash: qDOFqoYVDkkHM0mfgfSDEdkESOTUNO4RV11uRnuEsT8=)
                          25: Tr29gpXA1jmqDBgka1nUTKOJCJo.roa (hash: hh8K875PIUFVA9mwH3l4qIdJG1FDE5Nj1NE6V/fpg5s=)
                          26: TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa (hash: BR22m/9Pfevw9R3uzbROoQfrnEnpQGFkpw8PiR4jomE=)
                          27: VMVAg1mMGfwQjKGmhI2WJPLGw6g.roa (hash: sbJO9slojJrSc3KUrqgi5tvXF70X4AOB6i96b8KWC70=)
                          28: Va_MfV2xGChXe2w-ujnKmKCX7rA.roa (hash: SUriIB/QcSARZo6IB0o6EwANvwMVBodokTc+4FO4rlk=)
                          29: YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa (hash: Gwnm4Vsq48kLU0hCIA+oRgHTCilqqqVQhr/04UYg0wU=)
                          30: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: eZtMrBbDfGyblhmV8qAQsCK4UaYH8nJptscMZSKHNXk=)
                          31: _uhmDxy0bPKVDKE3_BuDsYOFfc8.roa (hash: Ej7uUDNCVZsLavhouVACJHkTzDzHQuvQQWR3StpOuic=)
                          32: bDqehv-L-gpmy2f6tCgYpNfSY8g.roa (hash: q/ItbJkPl3hPXHnLP+1Umv3w88TYukseKTWgdWG5dUk=)
                          33: eZL5vtO0Yf1BqM-9GfgYHPtoOgA.asa (hash: uLAuM1LuifHrId1vdLDcQ0Bw/1C1EqkZVkGRwxB0A84=)
                          34: iOFBBEucpLe9YmdNyAo6szbNfu8.roa (hash: GDyyJB6XxA+2hW5dQo4bOWL/P6vz2lzwT7Z9ivIB5e8=)
                          35: k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa (hash: F4dOSuK6+r+jv3VvsH55u1uhJuPtq3hth/malk/i538=)
                          36: lYdRv68QBXjRttIYgVZzJoyauyU.roa (hash: jql5Zexhye487EU51RRPsc6wqZg3movkURm8VfWxyu0=)
                          37: nU5CDN2WGtUSleKd7srRFrfbDEk.roa (hash: cwVMrEsXanlUoOBqTwjSGD/5fQxRrPQBN7g36AxdSMA=)
                          38: nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa (hash: RD1NNAQbVUTLFIC0p8IpyLnW0lNI6MJeVxWZuDg6dNQ=)
                          39: o4lWv0LTRgPVdk5_FDzu00CQE4o.roa (hash: TlyDKYcMYDLXc01RpmsEuHDeSoE/K+GLiN11uaTR1mI=)
                          40: oDeQkGiiDpeW8Fb417JF-HeUY68.roa (hash: RfpJKZvP9NXaT8zUBt4vh5O6YG2vInwoG0F+j91Wx8M=)
                          41: pIP-J3Hr0bjQHlp_icnps7koRX4.roa (hash: wHGf3sOGDCSkFAvYxU0RGmIHZCDG9ji0dNgVFOg+Lwk=)
                          42: pUzPMt6BClGR1jFtNbviU7uarko.roa (hash: sTTxUsOajdJkBsH0LES6qRuCFvwILKUemPpUZvl8VgA=)
                          43: qEMGytWik2DoEBSunWlsAAW5JgQ.roa (hash: +olxdTWs4qt18DJ1bRxrfArORMjXdrDBommXdamDh6U=)
                          44: qdsgnJLfsFWH33m2j8fQRH_oBc4.roa (hash: 14/o0pHoZE4Ok/K+TgqTI/JKDxsbxv6pE8FKQiS3VWI=)
                          45: qt-VylqqZXmuhP5jTDffqyTPIeQ.roa (hash: NBYMZ8I2bI+aHaT/8renW87P2lw9r3jn3jIl3tUx06Q=)
                          46: rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa (hash: J39PyKLqvzHrXAZhA3OlBu2zPyXmjRuY84Ppooaj7xg=)
                          47: rKzCV3qhqu1jLwpYK4I2MJzM5sI.roa (hash: umG/JZ3YnlzuwNb541YIz1vycxqQQRaiCRUFhZzfyvQ=)
                          48: sB-L4JrKA9D3H7uMQdIKSAlPulA.roa (hash: NJvVl9eks4BHzKayTTKdpdPVy4jCLKYpuFF0TROWgBo=)
                          49: svwlxCw6x8aLg32dvOkpW_ij20A.roa (hash: WuukgvNZpJW0D6P5ULOewj5mtR4xQZ8fxZG033GhXZs=)
                          50: tIxWkdRjQM6AUyf4Fw_Xzyi3joY.roa (hash: jNYZxsHoHaK1jILM9/oCfLoPW92uI3bYlyUW81wDh3U=)
                          51: tVLBynseYuOMdYlyvWgVoSg2cm4.roa (hash: 7PKUWnEbOhh4JsQVjHSmYDZuYa3TgU9j80nH25oP8cc=)
                          52: ulFl9xA3_r04YuUSK9eoNoTFJKk.roa (hash: isVq8MJvxi135zQJ1rz5EGzvGDurQFrlBVCGVWBIULU=)
                          53: vRnOd3PnfHy_jU5pZ4WIsTYRCWw.roa (hash: 7FlXvhfa90lex347GsLnc36ToXN40osfZPSoD2JqSaU=)
                          54: v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa (hash: OPqb//I3XcXtiQdXp1SgTW0v2Oirred4OSIVhm80n00=)
                          55: vyQV9XKLquyOTEUcjaYGj-gmJlY.roa (hash: ZxbS06oju48UIMZkoTdqvqbm+RzA9DpQpzPigYDcfuY=)
                          56: zFna-BoaGJdoThTqDyocBjbxh7c.roa (hash: gtBmRdu7997d5OMFKSqKQSnnlDKzakUC2ak//FUPRGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:58:5b:c9:32:bc:d5:3b:90:1c:ae:db:3f:33:fd:f9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: May 24 05:01:10 2026 GMT
            Not After : May 25 05:01:10 2026 GMT
        Subject: CN=7eb2f897438b3f9df7669d6855f3be3f18a12fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:b3:2f:80:cc:db:8f:db:67:2b:b5:41:93:
                    65:4f:bd:d6:76:5d:2f:00:7d:66:6d:4e:84:5b:bc:
                    13:0f:e1:07:3f:12:dc:fc:2d:44:98:ff:a2:63:50:
                    71:12:50:36:3b:4f:34:d1:d7:f5:90:aa:f1:ef:03:
                    92:e4:61:e9:c9:0b:d0:82:31:28:de:cf:eb:8a:3b:
                    79:ca:80:d7:f5:69:c8:e6:97:3d:14:a3:0d:5b:81:
                    57:34:45:c0:85:c9:e3:9f:e6:a1:ca:a7:f6:a8:d4:
                    b7:d4:64:8c:31:36:8f:17:b4:0e:b3:9d:46:38:70:
                    cf:56:b9:c0:3a:db:8f:98:66:be:53:26:67:7f:d2:
                    30:38:11:0c:d8:d1:b5:d6:a7:d4:7e:12:e3:61:7c:
                    fa:12:8f:8f:51:93:03:5e:34:f6:a8:22:b1:4f:38:
                    22:e9:e7:7d:73:b9:0c:24:20:b6:3b:83:1c:a5:44:
                    03:74:a7:85:47:a3:04:4a:6d:85:93:5d:c9:8b:0a:
                    a2:12:35:d5:bf:19:8a:7c:00:8f:a1:11:20:84:6e:
                    30:ce:13:a6:e9:5c:ed:85:14:cf:d1:ef:5b:1b:28:
                    1a:2b:03:e3:5c:dc:c8:79:bf:b9:4a:72:aa:93:25:
                    66:fc:9b:21:d0:e2:a6:49:24:a1:ca:a6:00:9e:8d:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:F8:97:43:8B:3F:9D:F7:66:9D:68:55:F3:BE:3F:18:A1:2F:B3
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:63:44:8f:6c:10:9d:25:24:47:27:9e:a9:b4:6b:cc:ae:99:
         40:bb:70:f2:6f:a1:db:ad:3f:b2:41:db:ba:20:38:d3:b5:8f:
         85:b5:64:d0:21:2b:23:20:88:5a:fe:e9:82:23:3d:83:c9:82:
         77:3b:5f:14:5d:ad:2a:c9:96:da:8a:eb:f6:39:22:39:f7:7f:
         7c:a0:c2:34:e8:2e:4e:b1:43:65:1c:98:32:3b:96:06:40:57:
         23:47:b9:c1:73:b3:03:28:c6:45:57:a7:dc:c6:a9:8f:24:f0:
         99:02:ab:69:00:c8:fb:02:28:03:3c:2b:eb:d3:4d:a4:d0:dd:
         ec:2a:ca:62:0c:07:10:48:fc:e8:20:3d:6f:c1:db:d2:72:e1:
         cf:e3:ab:2f:1c:bd:5a:06:39:c4:ef:33:e4:ee:3f:04:e5:5d:
         4a:33:21:a3:3a:41:d0:c3:84:52:67:38:7e:1e:d5:43:56:48:
         69:10:30:aa:4f:73:77:bc:cb:93:b5:e4:54:31:68:71:65:a5:
         85:c8:56:1c:b5:6b:b0:47:21:b5:c3:b0:f4:50:62:46:09:18:
         e1:b6:ac:99:de:84:05:90:55:c2:7d:e2:f1:9b:62:f8:5e:63:
         1a:87:da:c2:ff:c4:57:82:ce:eb:3d:6e:f2:1c:50:42:d9:a0:
         db:54:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 10:33:16 2026 by rpki-client