Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          Y/Lb4iI/zDAtNjuSvw1YQIijlYXxFKt1oNaNECu1RPc=
Subject key identifier:   FB:A6:6F:DC:F1:22:AC:D9:A2:25:E8:D4:4B:22:38:79:D6:23:BB:FD
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019D0E8DB4FA3A4CFF918E5C01B1BEB82CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0449
Signing time:             Sat 21 Mar 2026 04:01:00 +0000
Manifest this update:     Sat 21 Mar 2026 04:01:00 +0000
Manifest next update:     Sun 22 Mar 2026 04:01:00 +0000
Files and hashes:         1: 4nBKrQ7FuSHt16g-Jhb0HZHrVuA.roa (hash: aYoLlFVD8YAsL0de7AE9DSkfD8QMKerYqlj+yg5iM34=)
                          2: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: goTxkH6raKRFVWnv1P8EJPQT79i7fptfRf0G0w/gr1U=)
                          3: 9IeVl12aUhba2Emfsn2fBTAFUAs.roa (hash: XK8m1Iay7rzWVYWcJ+cMdfUsonXHcQUc6/GSyCW/CfU=)
                          4: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
                          5: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
                          6: Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa (hash: PIt7e72kgyCo74un3u52sqzROHoMmxmWZGgzptnTe7c=)
                          7: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
                          8: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
                          9: LGZXRjlMsd8l00GKR2QE87j1TTA.roa (hash: PaebTCq43309eJujsiliFxMpMTh3T8ONlskEyWdZeN8=)
                          10: ODgdHM7EjChq_YSS9774P5Z46A4.roa (hash: rb40TvEnd+AdrLvOEOoEZJPQ/zWoQJO/3tdPwyMpcH8=)
                          11: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
                          12: Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa (hash: pvxDBRck2bWfMsW7dovzPou9uNU8Gr9hr6lVhmhkx9Y=)
                          13: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
                          14: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
                          15: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
                          16: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
                          17: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (hash: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=)
                          18: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
                          19: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (hash: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo=)
                          20: nu2apDqXy-iino7G3nWPhPWkDqo.roa (hash: ixg3Ryv/Bp0pzXwcZFr4U5J1gnEXjS591im7CKO4sTg=)
                          21: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
                          22: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
                          23: r53oyYolcOu-UfgcT_tdtf7-39c.roa (hash: 0h3BGKzWIs5UPZjIeVM1ksoF8ZK9Q6Fzsphmnty3gCM=)
                          24: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
                          25: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
                          26: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
                          27: wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa (hash: Oxrdhr1ss/JbqLMgdIsQwdWtrWAJAiM83gHMKnZe/Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:8d:b4:fa:3a:4c:ff:91:8e:5c:01:b1:be:b8:2c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Mar 21 04:01:00 2026 GMT
            Not After : Mar 22 04:01:00 2026 GMT
        Subject: CN=fba66fdcf122acd9a225e8d44b223879d623bbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:7f:17:d4:70:06:30:68:da:d4:10:ed:87:
                    87:44:6b:d1:27:0a:3b:28:99:71:26:dd:c7:17:db:
                    62:6f:c4:27:1a:73:20:46:4a:a2:3e:ac:5f:7f:f4:
                    c8:95:f5:78:94:ca:98:f5:dc:e0:42:74:a6:41:c7:
                    d5:b9:d8:2d:be:80:9e:f9:de:3e:85:84:58:0a:90:
                    a9:f3:33:c0:87:07:ba:02:ba:4b:9d:12:73:6b:ae:
                    22:72:7c:9b:2c:88:81:1f:9e:e4:1e:4f:60:fe:35:
                    bc:fd:ea:b6:d1:6f:99:e9:d0:56:25:3c:c2:ce:fb:
                    e1:45:7e:34:60:5e:6e:1a:cc:8a:39:62:44:cc:e6:
                    4f:66:4a:38:a4:b8:ac:4a:1f:d8:ed:93:87:60:db:
                    e9:27:84:da:4a:f7:31:ed:60:2d:b4:7f:df:d7:7b:
                    b8:0c:8a:74:24:92:10:35:b2:c7:d2:6f:71:d6:d1:
                    08:34:04:81:32:25:c2:64:be:51:d7:1e:b4:f5:4c:
                    6f:78:b7:aa:e1:0b:c8:00:0b:0f:5a:ea:b4:83:fc:
                    9c:ee:91:20:94:e0:55:68:55:39:ae:98:b6:a2:d7:
                    0d:a4:52:99:48:f9:77:51:ae:d0:a8:0f:e5:4c:61:
                    aa:fe:76:50:6f:a4:94:32:b0:3b:4c:e9:a7:54:9a:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:6F:DC:F1:22:AC:D9:A2:25:E8:D4:4B:22:38:79:D6:23:BB:FD
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:9c:2b:d9:d8:85:12:ce:1e:9a:4c:f8:a7:4a:62:b3:7c:
         bc:25:fa:54:cb:5c:11:21:5d:9b:f8:74:e1:5f:af:63:ca:52:
         ff:1d:45:cf:e7:3e:9d:46:79:f1:a6:ba:53:f9:25:f6:d5:39:
         ca:11:ac:90:a6:d4:e9:72:b9:4c:09:f6:83:75:11:8f:84:d4:
         03:54:3a:e5:29:84:90:4c:93:5a:ed:59:3c:00:15:90:bf:41:
         44:a4:c9:df:88:a7:3e:f2:7c:6f:fa:0c:84:d2:88:f6:4c:fd:
         9e:57:2e:e7:b3:2d:8c:fb:08:bb:b3:0c:c0:c3:21:b7:87:c8:
         0d:37:5c:ea:26:dd:9f:3f:00:5b:53:6e:ef:0d:39:82:68:ca:
         9d:66:28:e6:42:b1:42:d4:f4:ad:d4:db:bb:26:42:5e:45:00:
         28:5c:e1:18:3b:35:40:2f:9d:04:40:ca:8d:67:f0:60:d1:0e:
         0d:9a:54:54:eb:0f:43:e2:b6:e0:ef:d3:aa:11:5e:9c:3e:06:
         cc:88:84:6f:b0:87:3b:b9:39:c0:9d:4d:ac:6d:27:43:47:0d:
         a8:31:37:18:2d:00:26:76:7e:68:07:22:31:64:f6:25:14:a2:
         af:1c:f2:60:07:15:38:78:cf:a2:3e:ce:3a:f6:75:14:dd:40:
         0c:d8:1d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0OjbT6Okz/kY5cAbG+uCzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwMzIxMDQwMTAwWhcNMjYwMzIyMDQwMTAwWjAzMTEwLwYDVQQD
EyhmYmE2NmZkY2YxMjJhY2Q5YTIyNWU4ZDQ0YjIyMzg3OWQ2MjNiYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5d/F9RwBjBo2tQQ7YeHRGvRJwo7
KJlxJt3HF9tib8QnGnMgRkqiPqxff/TIlfV4lMqY9dzgQnSmQcfVudgtvoCe+d4+
hYRYCpCp8zPAhwe6ArpLnRJza64icnybLIiBH57kHk9g/jW8/eq20W+Z6dBWJTzC
zvvhRX40YF5uGsyKOWJEzOZPZko4pLisSh/Y7ZOHYNvpJ4TaSvcx7WAttH/f13u4
DIp0JJIQNbLH0m9x1tEINASBMiXCZL5R1x609UxveLeq4QvIAAsPWuq0g/yc7pEg
lOBVaFU5rpi2otcNpFKZSPl3Ua7QqA/lTGGq/nZQb6SUMrA7TOmnVJoTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPumb9zxIqzZoiXo1EsiOHnWI7v9MB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfecK9nY
hRLOHppM+KdKYrN8vCX6VMtcESFdm/h04V+vY8pS/x1Fz+c+nUZ58aa6U/kl9tU5
yhGskKbU6XK5TAn2g3URj4TUA1Q65SmEkEyTWu1ZPAAVkL9BRKTJ34inPvJ8b/oM
hNKI9kz9nlcu57MtjPsIu7MMwMMht4fIDTdc6ibdnz8AW1Nu7w05gmjKnWYo5kKx
QtT0rdTbuyZCXkUAKFzhGDs1QC+dBEDKjWfwYNEODZpUVOsPQ+K24O/TqhFenD4G
zIiEb7CHO7k5wJ1NrG0nQ0cNqDE3GC0AJnZ+aAciMWT2JRSirxzyYAcVOHjPoj7O
OvZ1FN1ADNgdvQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 08:14:18 2026 by rpki-client