Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          WuNCJb/arVocpkQBLEiOAfTdWv9LtOHdHZxEk9HHtpk=
Subject key identifier:   F9:4A:46:FE:69:14:82:BB:06:BD:F1:94:B9:6E:10:0F:01:51:52:04
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019CF49731ACAAA566A6C8778FF5F174F60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0E05
Signing time:             Mon 16 Mar 2026 03:01:15 +0000
Manifest this update:     Mon 16 Mar 2026 03:01:15 +0000
Manifest next update:     Tue 17 Mar 2026 03:01:15 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 8D8hc9aqkL4Bavtx_8Gt5LyWD9Q.roa (hash: 0uF2Af7Dk4CplpXlk+Cbt9rR/69r9fo7ZdCCr7L8Q0k=)
                          3: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          4: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          5: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          6: GNGk2dk3owBh0t7XjA8lYKtdBNY.roa (hash: C0SSoQPsvhCvPcaamLjO8oeUMsL4lVyuJZ6NEzbK8t8=)
                          7: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          8: KwOOI4nyHLltSmxmCqXmNAWGCTk.roa (hash: Cn4AENaFj3iDaJ2ynDP4Br7mPiKHlqswys3FUBKbke4=)
                          9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          10: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
                          11: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          12: YX-6ScqKUraMD69yYtTsBuVasbs.roa (hash: RDolbbCzs8cCvZMotuCTGu7mkuVioGtLAt4tkI4fzeY=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          15: hd7nNrL_1mle-1qn41vN6UL_cQo.roa (hash: rIFhHh/krDGOpoRXwoCwuKbz6zBx+GuARGKj0KEhEE8=)
                          16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: 3i2nyh7TmgiZdaW7spkiE+baRf9w1Lr1xIExS4Hzj4Y=)
                          18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          20: wehcPMWdUQvCmWJevdZknxgIA3c.roa (hash: LUZzWvM19nGNUyYCC4muLiqCKcZL6hOtbafsQKTgU7I=)
                          21: x7sCJ34Ztr98gIfsfgWJnnEyU4U.roa (hash: EQOvnK3Oa0O5kiMJfZT9bEcq7pBtLSg9vEZYTLmrVPI=)
                          22: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          23: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          24: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f4:97:31:ac:aa:a5:66:a6:c8:77:8f:f5:f1:74:f6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Mar 16 03:01:15 2026 GMT
            Not After : Mar 17 03:01:15 2026 GMT
        Subject: CN=f94a46fe691482bb06bdf194b96e100f01515204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:8c:58:b7:8a:8e:13:a0:f1:d8:63:4d:ad:
                    b0:c9:a5:35:68:b8:d9:a0:64:19:d6:3c:ba:ce:71:
                    dc:38:7b:25:6b:c9:51:66:3e:28:08:44:02:81:c8:
                    21:9e:43:2b:78:98:8f:8c:f6:27:39:24:bd:88:38:
                    b2:2d:df:87:20:70:60:cb:c0:08:a9:0d:4a:2a:97:
                    9d:94:99:5d:10:5d:b3:b4:d4:8a:97:94:dd:7c:b9:
                    4d:6d:eb:f9:f7:16:50:e3:03:b1:25:f5:05:7d:98:
                    bb:8d:ed:d4:cf:89:6e:0f:65:13:c6:00:ed:32:92:
                    7a:f7:52:60:d6:5a:86:f3:64:68:16:a6:ba:0b:85:
                    3c:38:eb:82:e0:29:ba:25:5b:c6:4c:a2:ff:45:50:
                    d3:1c:36:72:c1:73:bf:ba:08:d1:06:04:1e:ee:9a:
                    9d:bf:bd:37:f9:17:51:51:c5:38:3d:30:39:e0:7d:
                    bd:9a:56:df:98:7e:48:f4:3a:c8:2c:9f:5f:ff:0e:
                    dc:93:7b:5c:8f:3e:43:4c:46:a9:98:2b:4b:bc:bd:
                    3d:ca:aa:9a:e3:93:a5:0c:5d:25:7a:96:09:8c:48:
                    61:a8:02:7a:2e:c2:bb:99:c5:4f:81:b3:b5:65:a9:
                    3a:e0:96:ca:a5:bf:8a:b9:4d:8f:9b:96:42:20:80:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:46:FE:69:14:82:BB:06:BD:F1:94:B9:6E:10:0F:01:51:52:04
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:19:bf:aa:76:55:5a:64:14:70:be:f4:47:9c:bf:88:1f:06:
         b1:15:e8:d7:e8:72:d3:76:1c:8e:cb:24:b9:38:ea:be:57:96:
         e6:72:06:42:e0:9e:49:b1:d2:19:52:ef:e5:65:2e:84:0f:bc:
         81:d4:f2:42:51:e3:3f:93:66:61:f1:4e:76:f8:6f:c1:fc:ed:
         a9:fd:c3:f1:97:1c:94:1e:58:38:9e:50:3b:22:a5:d4:34:69:
         b0:7b:69:49:06:82:f3:80:03:2b:19:2a:9c:3e:bb:8c:ea:98:
         76:b9:a2:f9:2e:cb:0e:0c:8d:15:2e:b5:c6:1b:76:66:17:68:
         70:ec:41:68:a2:cf:1e:b1:a5:6f:83:f0:c3:20:e5:7e:97:2c:
         6d:44:52:ef:13:57:38:91:ce:70:c8:c1:76:4f:c0:ec:f4:32:
         cc:be:ce:c5:17:2d:cc:c3:db:ba:ff:f0:de:11:b1:7a:cc:cd:
         a8:bb:1c:9e:c2:7d:ba:ee:5e:07:3e:f6:3f:29:65:e3:89:39:
         c7:57:67:28:b9:d7:ba:f8:c7:ef:b7:10:30:8a:72:9a:ff:cb:
         16:ef:f5:86:87:28:32:45:8e:37:a1:63:33:03:81:9b:1a:ca:
         ff:5e:4f:56:39:4d:eb:3b:2c:63:fb:56:55:fb:ff:28:ed:54:
         77:9f:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 11:38:00 2026 by rpki-client