Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          9J6EgtqdNzP+7B7UAE+XvS/lqFo4EybjZyqy2LU2sKo=
Subject key identifier:   F8:0E:E3:EE:D2:B6:97:DB:70:07:5A:55:34:FC:E3:6E:F8:DC:88:2B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019D156B1E8D2FF34A423EB0DBC5CBD9F97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          14B0
Signing time:             Sun 22 Mar 2026 12:00:34 +0000
Manifest this update:     Sun 22 Mar 2026 12:00:34 +0000
Manifest next update:     Mon 23 Mar 2026 12:00:34 +0000
Files and hashes:         1: 1-TQR8y4sN17E-SWN89qH6JkTzi8.roa (hash: EEpEfvlkIJ9uyIa2Z+y8sTrbxy3qHHgHKhyB/FRPiLU=)
                          2: 1PIZRMmdZRgI3Wa4_ZzyHe2oYE0.roa (hash: xdWJ3eNp9bQHQv3VXJLaKMRo3GljyMICAdW2Em7ImoM=)
                          3: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
                          4: 3-5cXi68-qSm19-cw47NGAFOvm8.roa (hash: XrRH7OLHbaRdmy5YCkOe6Qv7KHjP22uCrnuGqMCfIPc=)
                          5: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          6: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          7: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          8: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          9: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          10: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          11: D8eGC5ZKAox_KeaP1UljsqAMI3M.roa (hash: dnNXrXfTnRxGm38nI41pfB3chpp2nN/b3F7qqu7zeoE=)
                          12: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          13: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          14: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          15: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: W/dTczxsmHcHH1+saJFsy5Emfw462HnzgQCUXbx0a0g=)
                          16: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
                          17: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          18: Hl5Go-G4ccQPGOPYKgEFRsvuf9A.roa (hash: 6pJYEI2P0iZxmWhHwVcjPdyivUm5nJWXdkev/Q1q4eA=)
                          19: IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa (hash: prplIaM3PWEhlFcjnviG8bsFClULprJWrb9nQc2Cyx8=)
                          20: Ie255GVZaYey7rhYagBRzHE7H3E.roa (hash: or7M3EclkAzV5jogXbEouItR69VJgo+P2gUgbnwZ1yw=)
                          21: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          22: OgGvgzQ7dezw8MDcZi6buKfdUb8.roa (hash: L8eq3es2reZC3hgT7YVcEjNHAAKE3EkZ31nJkzTykBw=)
                          23: Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa (hash: Is2zqCObxzxyRTLurzDszhgJjeBbmDneFFkeCf5fwOY=)
                          24: QwWuwVkdjBz3wZdsSno-CI2Yiho.roa (hash: xPUqXofpXXjvDkyqf3+rVR/DoKofd8E7P1jA4t/JQ60=)
                          25: R5tvCe0yrnM86VrHIuRfz1LTt-M.roa (hash: as05R3UNSvXGTL4W9RvrUX7POh9FNO1TNlRUnR2EAUs=)
                          26: SEeFiz3tStXW9I-MWDoCbj05WJc.roa (hash: 3Uw2Tnxk96aTwjIxD4+rHbo4Gs/ginuifw8bOJqsGy8=)
                          27: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          28: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          29: XktNhibRI0-PzcETN2KpqeiB7yU.roa (hash: ub5KLahjRSng7WQAYOkZYLUuIHH+I9Wig1Tcpx/w0X0=)
                          30: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          31: cu1ZBl9pTXMoUfbvqV36t7lrydc.roa (hash: PmBmp0oA0bJzrpAjf6rJ/tIcErht7TFeRxDbLDdIykE=)
                          32: g4HRZQNS12RdmXjLw3tZh-1vYgg.roa (hash: V1AVi93zZNpOWRPKGqDa+P6P4ED/8GSMCZzlTGfN1OE=)
                          33: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          34: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          35: hM0KnSbGL5YIPkBiWFsQifDO0ws.roa (hash: AtisJ2m9ZKIN0vglh5L6u6PQdFGr2dFMzFl70GeYwMU=)
                          36: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          37: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          38: k87TUd7a1kuOcniBzYfnlX8a-W4.roa (hash: cKelYB7nuRbmwJFd5LKfRP7a7BoXOJMN2zYhG4umK0g=)
                          39: kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa (hash: bcFxF873MZkpZmOV08T6nkOuQgijfNrZUmktwHDfSVw=)
                          40: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          41: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          42: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          43: nRusnjyVlPOUWGzXuB9NY-6sv20.roa (hash: A/FjYrK1itnVBNQUvd3X2LZZ5EuY9pjPUFuiUVmHNl4=)
                          44: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          45: q96A3McnMMNWIVoYFNvAuHtU8JE.roa (hash: ltIrllUkwOoE3ENAiSDBzU5bAkZQAxS7OaSzZdN6v10=)
                          46: rjitowNgExd3EKmyTmQyMbODtUQ.roa (hash: Tq2i9bTs44ic9Q8EU6ujlmcQqAWYCYHNOE79if/NLMI=)
                          47: tce9s_lTJFcWc3lfojqUgt8cKSA.roa (hash: hE1WQM2phDZchQwUsmVoGyxt4pfcKaKaEiXcV0znh8I=)
                          48: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          49: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:15:6b:1e:8d:2f:f3:4a:42:3e:b0:db:c5:cb:d9:f9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Mar 22 12:00:34 2026 GMT
            Not After : Mar 23 12:00:34 2026 GMT
        Subject: CN=f80ee3eed2b697db70075a5534fce36ef8dc882b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:89:f2:6e:63:09:aa:8a:2d:21:02:70:26:
                    d5:50:2b:7d:b2:ff:07:97:92:dd:7e:1f:6e:32:92:
                    2a:bd:fd:84:58:e3:2a:79:5f:5b:1e:ab:71:a0:9d:
                    f9:c1:5b:cc:58:5e:2e:39:bf:ad:92:d9:91:0a:78:
                    b2:c5:4a:50:a6:34:9e:36:7c:3f:6e:82:aa:01:84:
                    b7:5f:3b:93:7a:e8:c1:ac:e0:0b:b0:ce:ca:3c:b1:
                    aa:87:18:c1:fa:9c:83:05:59:70:c0:ac:e6:8f:9e:
                    8b:7e:e8:ca:d3:bf:80:41:e9:3c:14:f6:cf:ca:e2:
                    6f:05:98:b8:3e:17:bc:fe:d1:a5:23:b5:e1:cd:68:
                    c7:fa:6d:12:e5:19:d6:99:9d:19:fa:fe:ad:0a:f1:
                    13:33:b5:92:c1:41:c4:2f:00:9a:d5:f1:b2:25:94:
                    4e:05:15:a8:b1:f4:2b:57:b7:15:09:4e:88:f1:9a:
                    3f:4b:ba:7d:2c:23:d3:7d:8a:47:8d:82:48:10:84:
                    92:93:0b:a8:0d:78:f0:b7:47:69:a1:c3:05:9b:dd:
                    41:b9:ad:9e:a4:6d:f4:35:28:43:5d:14:e5:c9:fc:
                    60:fb:e1:88:b9:72:ec:d6:bf:55:2f:68:69:d4:a6:
                    f4:d9:bd:8e:c9:d6:e6:22:d3:f8:ea:89:fc:d5:13:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:E3:EE:D2:B6:97:DB:70:07:5A:55:34:FC:E3:6E:F8:DC:88:2B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:08:59:6d:e8:eb:a2:f1:0c:a0:3d:fd:3e:de:2b:a4:86:
         85:ee:10:dd:2e:33:dd:12:c0:77:cd:c7:38:58:0b:bf:28:a5:
         ce:02:ef:d8:c9:be:49:0b:98:fc:77:a4:bd:3f:7e:6c:32:47:
         c4:8f:4b:20:73:06:6b:b9:d4:8a:53:73:22:4d:9d:8e:b0:ba:
         a1:d9:5b:b7:0f:f6:c2:30:2d:8f:00:6d:ba:28:ba:3c:5b:78:
         84:e4:65:1a:9d:3a:fc:27:8a:34:ea:1e:bc:21:09:16:ef:17:
         c9:a2:fa:18:45:2c:cd:d5:8d:9d:e7:4c:06:65:7f:74:ed:59:
         d4:ba:dc:70:bb:d8:bd:da:0e:8f:23:58:0a:c6:93:83:56:93:
         59:fb:01:17:50:bf:2b:a5:46:fd:d0:b2:1c:1c:bd:37:a7:b3:
         3b:aa:2c:d0:8e:1a:ae:5b:43:0d:a9:75:f2:9f:64:1f:f4:2b:
         62:f5:fa:fd:6a:44:ac:c9:22:04:94:5c:90:d3:81:dc:4b:86:
         30:8d:8f:ba:04:75:9c:09:95:c3:8b:94:8e:60:b7:46:9d:38:
         4c:b5:28:6c:4c:16:41:14:cc:f4:f4:c0:29:db:3e:32:08:63:
         cf:6c:83:b5:20:03:bd:31:d2:39:83:f4:44:47:b4:02:d7:30:
         b6:a7:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 20:46:30 2026 by rpki-client