Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          drtSPLmEtGYRdOWsFlxe/AxQ94B58zQt8d+nCcCo7cA=
Subject key identifier:   97:5B:5A:A1:03:D4:76:E6:06:68:77:C5:36:17:3C:AF:9E:79:1A:59
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019D506E0B1AC925F2ECAD470E88BB5B93C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          0A4B
Signing time:             Thu 02 Apr 2026 23:01:22 +0000
Manifest this update:     Thu 02 Apr 2026 23:01:22 +0000
Manifest next update:     Fri 03 Apr 2026 23:01:22 +0000
Files and hashes:         1: 0V41IrPL9797nvcWEWG2FOZRVs0.roa (hash: 2ssmd6CA4RuDZaqZAWLQB4prRBUYd7qy+OjXYkfyY8U=)
                          2: 0mnvSdoOq2Np1ajRjxABIHng1iU.roa (hash: uW7MfVSOJl8bfntjxT5K/usy+W6G+cF+ATrwdjzTAsE=)
                          3: 1-TUZNCrJ10ahOEwp41oreLSGBDg.roa (hash: rLHCPObogTydMGgdo3ZcC9IneY90Ca9C6c4YIyl/Zc4=)
                          4: 2jmGEk4OVcICepreDNCO9eAT7tM.roa (hash: BFDa7KtVd8lP+Nx0xYbBnf+5dOJVnOedVDkc++Nuqto=)
                          5: 2mwrv0wD9Ii-22EalCpS3LzNa0I.roa (hash: yXx5oyiBSRzMOJnnZeVF3Q5wlRyj2BpyADDVZrn3lvk=)
                          6: 4pV68l2U_OBI_KTxAoUjIOcjUzI.roa (hash: B8v0b/yVI8T3veKWEXtdL1LMqczUDHMKi7SYPYiViEE=)
                          7: 6EvVe1iSCny24nuXxCceU1INn48.roa (hash: sr6pla8qayIY/DqIMDGG8xE9TOAtMeSL1wSO8tlpa+s=)
                          8: 8B2OpR0uRL2FMmC1O2ZU7nlPPyc.roa (hash: poPicSh/MHjn+zNOSYV7bGTSnbO9NymTUGa9CPZhEBE=)
                          9: 9_iEf91RWS6Or4zXi3xHqglPXuU.roa (hash: nfq16D2TXOKtFwSZlC1l0j0NZwkuSugZlNqjJes2gvs=)
                          10: 9euNyWZww10dUcwium3SKofSFMo.roa (hash: +JOKxowiMT05XyUwYWDe27B5gTyN5fMXDPrSBu4Dh0U=)
                          11: 9ynuhrMRe01fV95Cyr9pzp74us8.roa (hash: CPCA7Ls7etQTzU55irYgM6cXEy0L5hugJu12dcKcECk=)
                          12: ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa (hash: A86PQ/iyszG+BWtmyVBkR/FpnfeQe0gn6PRItvHkIl4=)
                          13: BKueLsOieGAX9FvG3x_kc_Syo6Q.roa (hash: +P5r5MnLAE+8y6qPH4D2f3RLLlxkb9rqjIzieNdiiu8=)
                          14: C4VDDLP3JAcEGxzpnk2rLngwLKM.roa (hash: ezMl5H9+rFaX3DPnZBbhAph0MJGwxBItopj9xyJgOS4=)
                          15: DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa (hash: XscIXOZDUssyO6/A3Rjz1yEV/LM4VTXT03e5bCTp2JI=)
                          16: DsEZUka67hhfO45y0N6lQLEhbNg.roa (hash: LO/Q3S/bHcnl/lLseLM9cKTvP0KfkNsY1jmwaQR9rFI=)
                          17: GLUy85p7VAjXBh9Flqb-k7SxKms.roa (hash: KFpZaWuTqKAMlOo6VTrDxS2jbsfzEvFfCW6Kj5PqghI=)
                          18: JQyOnqpGNBPQEPAwlMww21vi4-w.roa (hash: jQkSRE1wjqlaqj1a5xqclo3SlJv480zaA7qkOH+fatU=)
                          19: Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa (hash: zUSTD6UjYoCFyh+6Fa+acZar8+oT8zvNBGsiOc1YI1k=)
                          20: MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa (hash: K2zRk3RmxZ15QcwuR8MLsUcx4p8qMykaf3Ogb1jzldU=)
                          21: NG9CUSktO1msekZw9a1EZVWAEs8.roa (hash: /FXKoISQTR9dI6X0WpRKq7Dp9cupm3YGG13vpCFZWMQ=)
                          22: N_2U4grFu5nxrIC9KlTuX1giSbM.roa (hash: hqGwhEQ2nYAefg3hkWNmS4mDHtwG/bdG2tIurSMQLtE=)
                          23: Pq1wHGL74BEeLVteAs5lNhrtrQM.roa (hash: qDOFqoYVDkkHM0mfgfSDEdkESOTUNO4RV11uRnuEsT8=)
                          24: Tr29gpXA1jmqDBgka1nUTKOJCJo.roa (hash: hh8K875PIUFVA9mwH3l4qIdJG1FDE5Nj1NE6V/fpg5s=)
                          25: TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa (hash: BR22m/9Pfevw9R3uzbROoQfrnEnpQGFkpw8PiR4jomE=)
                          26: VMVAg1mMGfwQjKGmhI2WJPLGw6g.roa (hash: sbJO9slojJrSc3KUrqgi5tvXF70X4AOB6i96b8KWC70=)
                          27: Va_MfV2xGChXe2w-ujnKmKCX7rA.roa (hash: SUriIB/QcSARZo6IB0o6EwANvwMVBodokTc+4FO4rlk=)
                          28: YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa (hash: Gwnm4Vsq48kLU0hCIA+oRgHTCilqqqVQhr/04UYg0wU=)
                          29: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: Pg9BfWquzHmNdeWlZ3xWs8ifex7xPN/qlQ2HaG++VyA=)
                          30: _uhmDxy0bPKVDKE3_BuDsYOFfc8.roa (hash: Ej7uUDNCVZsLavhouVACJHkTzDzHQuvQQWR3StpOuic=)
                          31: bDqehv-L-gpmy2f6tCgYpNfSY8g.roa (hash: q/ItbJkPl3hPXHnLP+1Umv3w88TYukseKTWgdWG5dUk=)
                          32: iOFBBEucpLe9YmdNyAo6szbNfu8.roa (hash: GDyyJB6XxA+2hW5dQo4bOWL/P6vz2lzwT7Z9ivIB5e8=)
                          33: idN-uNrF2TVOrpXxFIfOwbMi-d4.asa (hash: vMPkp6IwJyD7yVKwZBQs4h7Z+LHN3QGVzictYODgPDg=)
                          34: k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa (hash: F4dOSuK6+r+jv3VvsH55u1uhJuPtq3hth/malk/i538=)
                          35: lYdRv68QBXjRttIYgVZzJoyauyU.roa (hash: jql5Zexhye487EU51RRPsc6wqZg3movkURm8VfWxyu0=)
                          36: nU5CDN2WGtUSleKd7srRFrfbDEk.roa (hash: cwVMrEsXanlUoOBqTwjSGD/5fQxRrPQBN7g36AxdSMA=)
                          37: nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa (hash: RD1NNAQbVUTLFIC0p8IpyLnW0lNI6MJeVxWZuDg6dNQ=)
                          38: o4lWv0LTRgPVdk5_FDzu00CQE4o.roa (hash: TlyDKYcMYDLXc01RpmsEuHDeSoE/K+GLiN11uaTR1mI=)
                          39: oDeQkGiiDpeW8Fb417JF-HeUY68.roa (hash: RfpJKZvP9NXaT8zUBt4vh5O6YG2vInwoG0F+j91Wx8M=)
                          40: pIP-J3Hr0bjQHlp_icnps7koRX4.roa (hash: wHGf3sOGDCSkFAvYxU0RGmIHZCDG9ji0dNgVFOg+Lwk=)
                          41: pUzPMt6BClGR1jFtNbviU7uarko.roa (hash: sTTxUsOajdJkBsH0LES6qRuCFvwILKUemPpUZvl8VgA=)
                          42: qEMGytWik2DoEBSunWlsAAW5JgQ.roa (hash: +olxdTWs4qt18DJ1bRxrfArORMjXdrDBommXdamDh6U=)
                          43: qdsgnJLfsFWH33m2j8fQRH_oBc4.roa (hash: 14/o0pHoZE4Ok/K+TgqTI/JKDxsbxv6pE8FKQiS3VWI=)
                          44: qt-VylqqZXmuhP5jTDffqyTPIeQ.roa (hash: NBYMZ8I2bI+aHaT/8renW87P2lw9r3jn3jIl3tUx06Q=)
                          45: rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa (hash: J39PyKLqvzHrXAZhA3OlBu2zPyXmjRuY84Ppooaj7xg=)
                          46: rKzCV3qhqu1jLwpYK4I2MJzM5sI.roa (hash: umG/JZ3YnlzuwNb541YIz1vycxqQQRaiCRUFhZzfyvQ=)
                          47: sB-L4JrKA9D3H7uMQdIKSAlPulA.roa (hash: NJvVl9eks4BHzKayTTKdpdPVy4jCLKYpuFF0TROWgBo=)
                          48: svwlxCw6x8aLg32dvOkpW_ij20A.roa (hash: WuukgvNZpJW0D6P5ULOewj5mtR4xQZ8fxZG033GhXZs=)
                          49: tIxWkdRjQM6AUyf4Fw_Xzyi3joY.roa (hash: jNYZxsHoHaK1jILM9/oCfLoPW92uI3bYlyUW81wDh3U=)
                          50: tVLBynseYuOMdYlyvWgVoSg2cm4.roa (hash: 7PKUWnEbOhh4JsQVjHSmYDZuYa3TgU9j80nH25oP8cc=)
                          51: ulFl9xA3_r04YuUSK9eoNoTFJKk.roa (hash: isVq8MJvxi135zQJ1rz5EGzvGDurQFrlBVCGVWBIULU=)
                          52: vRnOd3PnfHy_jU5pZ4WIsTYRCWw.roa (hash: 7FlXvhfa90lex347GsLnc36ToXN40osfZPSoD2JqSaU=)
                          53: v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa (hash: OPqb//I3XcXtiQdXp1SgTW0v2Oirred4OSIVhm80n00=)
                          54: vyQV9XKLquyOTEUcjaYGj-gmJlY.roa (hash: ZxbS06oju48UIMZkoTdqvqbm+RzA9DpQpzPigYDcfuY=)
                          55: zFna-BoaGJdoThTqDyocBjbxh7c.roa (hash: gtBmRdu7997d5OMFKSqKQSnnlDKzakUC2ak//FUPRGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 Apr 2026 15:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:50:6e:0b:1a:c9:25:f2:ec:ad:47:0e:88:bb:5b:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Apr  2 23:01:22 2026 GMT
            Not After : Apr  3 23:01:22 2026 GMT
        Subject: CN=975b5aa103d476e6066877c536173caf9e791a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:ab:54:ed:d9:19:c2:76:f0:21:60:ac:1f:
                    59:ee:f3:43:87:54:f6:f2:8f:b7:dc:af:14:78:27:
                    34:5e:46:9f:3e:14:49:32:fc:32:dc:ed:ce:5e:24:
                    b3:f5:42:1e:a0:8e:b5:c7:68:b5:b5:af:7a:1c:1f:
                    7c:fd:21:47:fc:91:4e:ae:5a:b8:1a:4d:15:b1:26:
                    1b:80:30:62:cf:25:e2:44:a3:b6:33:0c:57:da:97:
                    8a:ad:c7:6b:c0:21:e0:50:93:11:ba:27:86:b7:7a:
                    fd:b5:91:58:2c:be:8d:8f:3d:2c:fd:00:e8:65:71:
                    c2:af:98:92:8e:84:80:26:56:9f:a4:dc:c3:c7:c0:
                    b4:54:a4:d0:ee:04:d0:e1:85:9e:94:cc:5b:8d:25:
                    9b:5d:c4:c2:50:5a:79:5b:58:bd:33:a1:f4:9c:4e:
                    a0:82:29:7d:5d:f9:a0:87:8c:13:06:49:2e:e0:1a:
                    94:1c:8d:bb:ef:63:1f:23:ef:66:23:41:d3:c5:0b:
                    03:9e:19:59:41:4b:43:66:84:49:6b:2c:6c:5d:a7:
                    a2:d6:2b:d8:b9:11:8a:d0:72:dd:85:0a:33:78:7c:
                    2f:e4:1f:1c:c7:16:91:af:61:3b:6f:0a:87:da:83:
                    1a:ae:32:30:3b:1d:8c:12:e0:50:ba:0b:67:03:68:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5B:5A:A1:03:D4:76:E6:06:68:77:C5:36:17:3C:AF:9E:79:1A:59
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:97:40:73:1f:8f:51:16:8f:71:63:ba:ca:76:10:12:93:17:
         6e:94:fd:e8:f3:5f:85:69:60:94:c5:a7:4c:ad:28:08:2e:ba:
         06:e8:b8:22:ce:4e:c0:27:07:97:fd:9e:7a:b3:51:a0:72:9e:
         fe:80:cc:d8:ce:41:b1:a6:83:04:d8:d4:8b:b0:80:ee:38:c6:
         09:d2:0a:95:89:37:f3:ad:f4:3b:60:0e:a3:bf:5b:57:8a:b4:
         8d:cb:29:3d:0a:4c:40:40:61:3d:f0:4f:ba:51:a5:29:1e:c9:
         4b:b9:0c:0a:0e:6a:e4:97:c5:97:0f:b7:8e:02:32:41:9a:96:
         46:ff:c8:8b:79:c7:25:9d:c1:8c:cc:eb:d1:65:63:ba:84:57:
         51:ec:a2:a0:f3:c2:e2:f4:c2:f8:4f:d0:79:d5:6a:49:a1:9a:
         71:56:0c:89:db:60:e8:35:16:a2:d9:7e:71:65:fa:50:04:7c:
         db:f8:6f:8d:01:da:0a:14:5a:fa:7e:56:42:51:da:09:e8:63:
         87:c4:42:b8:56:90:81:5e:bd:f6:48:4b:3f:7b:c6:e9:d7:75:
         e9:aa:b4:cc:50:45:39:04:ca:78:f1:f0:b8:f6:dc:39:6e:ac:
         36:4b:70:da:dc:99:d4:65:0c:01:a7:3d:6a:0d:c7:6a:fb:a2:
         84:28:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 01:37:06 2026 by rpki-client