Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          8qioxpP4txjCQCt4mZQ+8yUmJmc3MCaK7P9OVyWmGAE=
Subject key identifier:   8E:E6:4A:97:A2:0F:F3:F7:37:58:B1:5A:55:C3:70:B1:8C:15:6E:98
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019CE290B7DD7472C7219FBB93933ECFC0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          126A
Signing time:             Thu 12 Mar 2026 15:01:00 +0000
Manifest this update:     Thu 12 Mar 2026 15:01:00 +0000
Manifest next update:     Fri 13 Mar 2026 15:01:00 +0000
Files and hashes:         1: 0VSesXDVm1kdp7OP9sVaQNaIx0I.roa (hash: QMxjCfdCBm32VW6X1BoprZ37jAPwnIJNYNKtYt65wRk=)
                          2: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          3: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          4: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
                          7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
                          8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: T7mrbziWcPasxHfDxJV5SEGTJL9JtCfPe1Bs/FHQxiw=)
                          13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:90:b7:dd:74:72:c7:21:9f:bb:93:93:3e:cf:c0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Mar 12 15:01:00 2026 GMT
            Not After : Mar 13 15:01:00 2026 GMT
        Subject: CN=8ee64a97a20ff3f73758b15a55c370b18c156e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:0b:ec:6a:0c:2a:e3:c3:ab:99:ad:54:3b:
                    b7:55:f2:af:79:08:37:cf:3a:44:d5:22:bc:f2:10:
                    1b:18:ee:5b:77:ad:dd:6f:85:d0:6c:3c:29:13:c0:
                    8e:9b:e1:c2:a8:da:7f:e7:d4:62:3b:69:c4:09:1a:
                    0b:ba:55:90:32:88:1c:4b:00:64:14:6d:c8:6b:f2:
                    47:2b:97:8a:bd:35:32:22:68:03:40:cc:98:e8:8b:
                    7a:10:8c:f7:f0:9d:54:37:a0:1c:6d:86:e8:e3:aa:
                    ac:f7:2e:87:b5:e0:9b:d7:1c:bb:aa:80:fb:c4:74:
                    90:a1:90:20:d7:63:18:a0:4d:c9:bc:f5:ac:5c:e0:
                    6e:80:47:96:64:27:fb:6b:23:f4:56:c5:ca:e6:d4:
                    95:bf:49:3b:03:68:2b:64:67:73:d4:25:a3:c1:0c:
                    3c:86:1d:45:50:86:28:91:98:0c:b8:fd:b9:0e:90:
                    d8:9e:5b:bd:36:61:8f:20:a7:c8:be:c2:d7:21:24:
                    37:04:99:d1:46:9b:f2:a3:57:6b:ed:02:40:bd:b1:
                    eb:aa:54:de:5f:57:5d:a5:9a:91:42:84:c7:d7:ea:
                    b8:a3:90:96:52:4d:62:22:23:4c:57:69:ca:68:1e:
                    d1:37:2a:bc:76:78:c4:7b:0d:f9:80:db:03:cc:f3:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:4A:97:A2:0F:F3:F7:37:58:B1:5A:55:C3:70:B1:8C:15:6E:98
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:16:6c:8b:bc:01:12:c9:26:f4:85:69:cd:c9:df:5a:53:
         18:2e:9c:41:cd:6c:e8:24:e4:58:85:08:3f:af:2f:b6:a2:42:
         39:01:80:84:0d:d2:8b:b6:23:d4:4d:7f:89:19:33:5a:b2:09:
         4c:97:36:dc:4f:0e:f5:8f:74:e9:a7:03:64:1e:dc:1d:3c:d4:
         b5:d7:21:aa:df:70:39:9a:d6:6d:95:ad:5f:95:21:e5:1f:e1:
         af:54:cd:76:2f:95:ff:d4:ad:1d:eb:29:33:76:6d:85:d9:99:
         7b:56:84:b3:40:81:39:64:40:30:6c:1d:0c:7d:81:17:41:b7:
         9d:28:14:57:b3:a0:ad:96:14:4d:b0:71:d5:f6:91:78:b1:f8:
         ce:1d:36:96:87:99:f2:e7:11:b9:92:f9:ed:e9:34:91:ad:95:
         95:65:44:5b:01:3f:58:80:cc:99:2f:f1:c5:80:ab:5c:26:36:
         1b:4d:8d:16:45:03:44:d7:fb:a7:e9:b4:6c:ab:15:90:4a:e6:
         e4:ed:8f:e0:17:44:da:e8:0c:f9:1c:67:6d:d7:67:96:72:3b:
         39:ce:14:d7:5d:4b:f1:51:6a:dd:b4:47:ed:2f:d3:27:41:92:
         d4:24:03:45:b0:ca:2e:65:6d:4f:48:97:18:af:c2:91:ce:cd:
         9e:8d:12:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzikLfddHLHIZ+7k5M+z8CqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwMzEyMTUwMTAwWhcNMjYwMzEzMTUwMTAwWjAzMTEwLwYDVQQD
Eyg4ZWU2NGE5N2EyMGZmM2Y3Mzc1OGIxNWE1NWMzNzBiMThjMTU2ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nwL7GoMKuPDq5mtVDu3VfKveQg3
zzpE1SK88hAbGO5bd63db4XQbDwpE8COm+HCqNp/59RiO2nECRoLulWQMogcSwBk
FG3Ia/JHK5eKvTUyImgDQMyY6It6EIz38J1UN6AcbYbo46qs9y6HteCb1xy7qoD7
xHSQoZAg12MYoE3JvPWsXOBugEeWZCf7ayP0VsXK5tSVv0k7A2grZGdz1CWjwQw8
hh1FUIYokZgMuP25DpDYnlu9NmGPIKfIvsLXISQ3BJnRRpvyo1dr7QJAvbHrqlTe
X1ddpZqRQoTH1+q4o5CWUk1iIiNMV2nKaB7RNyq8dnjEew35gNsDzPMwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7mSpeiD/P3N1ixWlXDcLGMFW6YMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmwWbIu8
ARLJJvSFac3J31pTGC6cQc1s6CTkWIUIP68vtqJCOQGAhA3Si7Yj1E1/iRkzWrIJ
TJc23E8O9Y906acDZB7cHTzUtdchqt9wOZrWbZWtX5Uh5R/hr1TNdi+V/9StHesp
M3ZthdmZe1aEs0CBOWRAMGwdDH2BF0G3nSgUV7OgrZYUTbBx1faReLH4zh02loeZ
8ucRuZL57ek0ka2VlWVEWwE/WIDMmS/xxYCrXCY2G02NFkUDRNf7p+m0bKsVkErm
5O2P4BdE2ugM+RxnbddnlnI7Oc4U111L8VFq3bRH7S/TJ0GS1CQDRbDKLmVtT0iX
GK/Ckc7Nno0SNg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 20:55:00 2026 by rpki-client