Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          kSmy+v8Wsra7bx365Jaaa/eTy8HFlvClpHGyYa892NU=
Subject key identifier:   42:1A:FF:87:BC:16:39:26:A0:ED:43:48:EC:B9:1D:23:A2:48:93:8A
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019CC37402FA83F97961F644B424EAA4AAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          12B0
Signing time:             Fri 06 Mar 2026 14:01:25 +0000
Manifest this update:     Fri 06 Mar 2026 14:01:25 +0000
Manifest next update:     Sat 07 Mar 2026 14:01:25 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: 62rSUSAaJ1JEz3SrhhE5mw4XDpvPssMtQbdS9JKIRBQ=)
                          6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
                          17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c3:74:02:fa:83:f9:79:61:f6:44:b4:24:ea:a4:aa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Mar  6 14:01:25 2026 GMT
            Not After : Mar  7 14:01:25 2026 GMT
        Subject: CN=421aff87bc163926a0ed4348ecb91d23a248938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:c0:80:d1:e9:51:84:5d:cd:88:7b:35:6f:
                    33:82:9b:60:94:79:30:6b:97:64:c5:c6:0d:7f:02:
                    d7:c0:0a:38:8d:e8:f2:41:61:27:dc:e7:6a:07:2d:
                    79:03:fc:7a:b9:d8:48:80:bc:77:b5:06:45:1b:4b:
                    5f:9e:78:b2:2a:da:5b:8b:6b:10:22:7b:42:6a:cf:
                    30:e4:13:7b:e3:ed:07:f8:e4:41:d0:ae:fc:74:be:
                    7f:24:83:bd:7f:9b:b8:1f:9d:75:31:72:30:3c:f7:
                    0c:a2:74:3a:c7:34:20:cc:d6:5c:88:67:22:41:79:
                    db:10:85:2a:15:d9:e2:81:96:1e:a9:39:b4:d1:7d:
                    ee:21:a9:a7:4d:c9:b2:80:c2:d9:ef:b5:aa:72:3e:
                    39:ed:bc:3b:29:24:86:30:77:30:1b:91:28:3e:16:
                    4b:ae:c3:fc:45:a1:d3:3b:de:a9:ac:7f:b2:03:82:
                    29:a5:94:0b:69:ad:d3:9b:d4:3e:0b:f0:5e:6c:45:
                    75:b4:96:9f:b7:10:88:d3:5c:5e:33:96:cd:2e:f1:
                    93:dd:a2:93:74:32:b4:74:ce:49:61:c7:e1:7c:46:
                    c2:a4:73:50:ea:79:2f:4b:a2:9d:af:53:72:78:1e:
                    ec:8e:88:85:e2:7a:2d:fa:3d:05:e0:60:e1:57:6f:
                    d1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1A:FF:87:BC:16:39:26:A0:ED:43:48:EC:B9:1D:23:A2:48:93:8A
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:9f:09:2f:52:53:41:c7:3d:06:04:be:99:d5:17:00:36:
         44:d3:52:b6:ba:19:fb:0b:0d:14:7b:d6:eb:7f:c6:df:a1:f7:
         9e:01:cd:b7:53:67:4a:8b:78:9b:0c:f3:b9:3c:4f:9b:50:7a:
         6f:4c:80:ec:0c:66:e1:b0:18:ec:4b:1e:af:de:24:df:7f:1d:
         4f:04:8e:54:16:b7:49:e3:97:3e:19:3b:c2:73:24:0b:c5:83:
         8e:ec:55:a7:dd:56:f4:78:db:77:fb:26:3e:74:1b:0f:ac:67:
         50:4d:6d:b5:dc:1f:7f:f8:63:19:80:24:4a:d4:06:51:9c:6f:
         3a:0b:79:61:64:64:47:2d:8e:07:c7:b1:25:ee:51:02:48:c9:
         a5:ef:bc:f4:40:0f:0d:06:91:df:6b:56:ef:8f:6a:69:83:f3:
         e8:5d:d8:52:32:aa:d6:d4:3e:43:29:e6:d5:af:97:43:0f:b3:
         b8:e9:50:c0:f7:94:3f:96:96:15:d0:83:12:12:fb:40:51:b3:
         b3:c6:84:d8:80:9a:a6:d4:d5:ad:13:06:39:a5:a5:42:47:96:
         81:4e:7b:51:fe:79:a6:3d:14:2c:75:0a:1b:04:71:6e:18:33:
         c2:88:30:3e:41:5d:cb:01:4b:d9:cf:58:9a:64:2d:9f:2e:be:
         ec:26:51:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzDdAL6g/l5YfZEtCTqpKrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjYwMzA2MTQwMTI1WhcNMjYwMzA3MTQwMTI1WjAzMTEwLwYDVQQD
Eyg0MjFhZmY4N2JjMTYzOTI2YTBlZDQzNDhlY2I5MWQyM2EyNDg5MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zbAgNHpUYRdzYh7NW8zgptglHkw
a5dkxcYNfwLXwAo4jejyQWEn3OdqBy15A/x6udhIgLx3tQZFG0tfnniyKtpbi2sQ
IntCas8w5BN74+0H+ORB0K78dL5/JIO9f5u4H511MXIwPPcMonQ6xzQgzNZciGci
QXnbEIUqFdnigZYeqTm00X3uIamnTcmygMLZ77Wqcj457bw7KSSGMHcwG5EoPhZL
rsP8RaHTO96prH+yA4IppZQLaa3Tm9Q+C/BebEV1tJaftxCI01xeM5bNLvGT3aKT
dDK0dM5JYcfhfEbCpHNQ6nkvS6Kdr1NyeB7sjoiF4not+j0F4GDhV2/RKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIa/4e8FjkmoO1DSOy5HSOiSJOKMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALByfCS9S
U0HHPQYEvpnVFwA2RNNStroZ+wsNFHvW63/G36H3ngHNt1NnSot4mwzzuTxPm1B6
b0yA7Axm4bAY7Eser94k338dTwSOVBa3SeOXPhk7wnMkC8WDjuxVp91W9Hjbd/sm
PnQbD6xnUE1ttdwff/hjGYAkStQGUZxvOgt5YWRkRy2OB8exJe5RAkjJpe+89EAP
DQaR32tW749qaYPz6F3YUjKq1tQ+Qynm1a+XQw+zuOlQwPeUP5aWFdCDEhL7QFGz
s8aE2ICaptTVrRMGOaWlQkeWgU57Uf55pj0ULHUKGwRxbhgzwogwPkFdywFL2c9Y
mmQtny6+7CZRzA==
-----END CERTIFICATE-----
Generated at Fri Mar 6 17:58:05 2026 by rpki-client