Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          8Gg1hBE6dVejm13MuHEognCs6uleGBT7xXG9gtdoWzE=
Subject key identifier:   DA:8D:FB:DD:EE:86:FE:59:DD:83:44:44:67:F9:D5:FF:B8:7E:3B:99
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019CE3A3552D829247EC7B412EED32EA9A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0C21
Signing time:             Thu 12 Mar 2026 20:00:57 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:57 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:57 +0000
Files and hashes:         1: 1-cVf8eeKXCEQK8TREHL3pvOVlJ4.roa (hash: 6xb8adt+Cq8dGBV+dEVWMVOB3aEPAl4inrU5zc1A6qU=)
                          2: 3GEF2hYrlXZ8b-VOqEKCQXCXFyk.roa (hash: E7Zbh2m3VO8pQZbfhsDonIsPDkFCljU9D5boTigsMyo=)
                          3: B8sy3_ktMjmvz_Vx32lg_nQccTc.roa (hash: bK5/40BeY6wg8mqdMQ18mLOTKqKSB1YnA9Zq5nJtUEs=)
                          4: ECtLWMVzwOZgCeREOIEtd2ceymI.roa (hash: fHGaNvUIUj3FjoH0hKJ1fC57VETbpNrkjc9oXVCr5zU=)
                          5: F743Yhy2Kn_kF745KRVYgrkdMeo.roa (hash: szQfhB+zJsnW1gIc3ei9F3Cljh+wqTrql840+VUgJIM=)
                          6: Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa (hash: 4yFVsWASC2DVldLBh1GiEJzBLWl9NLqEFtgBbzD84bE=)
                          7: GcXUBMRI705Q44EeftjKO6ZRHa0.roa (hash: Nt523wru8Yk2hQK21epRLZYpEV6lsuQZRQHYr9xfhys=)
                          8: HadOqbA-zW7zuAMsfZ5snCO_uJI.roa (hash: c383oFdITf3uYihF/VSMwy3YXg/GVpIdA63Ws7pcO3U=)
                          9: K3K_I-Dc8ENn6TfKPBPKLKot-Ck.roa (hash: kwAP+l26jz5UjvHCOYHXO8LDdJVxpPlMT5Wh19k0w8Q=)
                          10: NCHumvKgs7NfR8041SZJklVd2qI.roa (hash: F8xI+1meNgniC7FEVl+GsQ49N42uPqVuC2fo0vtO9Yo=)
                          11: NbOSHl-maqtSswfVh22N2HzFBks.roa (hash: B+1iWPfnnXvEUNfYtxq3DMNfsrMFykPwhCyoIYzPDmM=)
                          12: NbcI4f3nr-LlP0WjObSw1c3DwAo.roa (hash: Z70k402H+gXJoea55XT/D7IkMhxZNkwbcIeLQcU3ovo=)
                          13: Q1cIxRkGly1GF2hc9mnjGBYP5qA.roa (hash: AeO2mPF3zltuXVVKNaQgNNyQq8sxigRkXL0aEpGEp7I=)
                          14: S2uqhGd5VIemjik2qHeVybZJomc.roa (hash: XK9+/uD+Iw2orGdtdQp1Ic0RyG3Erof5uesouhGwg38=)
                          15: T8vj1RSK3XjGjOyucs5SLVUbGP8.roa (hash: p4wvYNFnRzMTOmgEcHUG95lgnAhpAaiJ0fl+AHDV7M4=)
                          16: TimoeSCPdX-gHdMv2hJX493O9W4.roa (hash: MOmNhp4f5xwYJw6JYccCVt8FKYSxTzOXPkNU6qAhVO8=)
                          17: WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa (hash: BnsEIW4rKKjSae4ZFuOrsK7zlfaSefyGTIAaHnaM8ZU=)
                          18: YNOoVHCcWGOrumTIt4QqkF1fRy0.roa (hash: D1/rRmk3LZamsgxPE84rp8oQbA0nmq0KIGoH4OKfkko=)
                          19: ZQnjKzMiLPska4NwmS-KarsB6hc.roa (hash: VaTyMYTVE9hwdwkKtBVMYjo3+Z7dKMCqeU0/sZhoqXQ=)
                          20: aVqBDFRHvQquH4WOMH7SkguLIW0.roa (hash: xqz8kq1PxD+Yc0TBepDBB8uWliWrri11n4EFK4fu+vI=)
                          21: d0nUCyy8HLeWP-PCCXeY0G5DHew.roa (hash: j33DDEUgls9Qo7DMMSTZC6ONvqVPRISMZMWPrGVz7XI=)
                          22: eDrzAi9GXEThXh3no2isq2mC-CU.roa (hash: ie+gOn7WFCYqk08KjmqkWdVS8AJtXsDT2UQNmYU+Lto=)
                          23: fOoxZZXoKfFKbUE_dojmHZZTrYE.roa (hash: gdRRDFEZsVqAvwZiFRI39sMYXzD71uw48Ip6EXeGQbw=)
                          24: frGFEFnYHlwmSdEkEqNzcEerZos.roa (hash: CqpfiWHaI8Kpucdq3i4AO0nS9qt5T6lpy/A13dF/CwU=)
                          25: guFbtlOz-cVdnWuwUwSINPp7svQ.roa (hash: BNaICbUM99PP5akZrL/wYa4QckctHFIRaBrJZEL3Ams=)
                          26: jOpQFZewmPq2pi8ogPmFximkzeg.roa (hash: FOMOmzLBvdOaek+CYOQB+g3G3vMvPUuHvzObKY0ixQw=)
                          27: jaBG7e9Cb4KBqFZY1U62rAci_ls.roa (hash: FJmJRU9u8joLPmDJQpVlYHO82qpK/PwuXfnAZz3bSv4=)
                          28: jm8-QyC64SKLapzPwKdGSEmZh-U.roa (hash: K7cfnaOIUk4PYAiHfabhksTWW34e4ilJQVdDrMouZJA=)
                          29: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: lKeWA6nEwqF1pYcg2IADKfMLJ8Srqt3jWL9RUGQBaQY=)
                          30: jtbJmQG6scpQKy9LQshvC4S6vVo.roa (hash: WGTdvOmB94rKqvZ1x2HJ/agkaGLiBbn3XIVZyM7FJ4Y=)
                          31: koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa (hash: vHwbWKarLLDrFkXHBPDr+Eb8BnaoGU6cB871++he+oc=)
                          32: lj4RgfhoyG5FiDBGDcvbHwFSisE.roa (hash: G/rcqCrsUKzf0c9Y+MEtsvNLT/iwh/sn4otQrQpHRRA=)
                          33: mFGlMTudwn7ALdrNv8GvOwztHCc.roa (hash: umuXgH6LuLdmDkv0+oZev5T0HPHguUPdHaZV3FGnLJk=)
                          34: oDkuZgiVBUC0oZUhkN_q5YvTU_k.roa (hash: 5H6SIrAPK+aOMKRs0Kuie5rBYh412cqHeWTDl57w1EI=)
                          35: pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa (hash: 8UYNtf7B63yOwod177cqEevQ5oC6um/ojCWeUy8Lku4=)
                          36: q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa (hash: tANGaCvjNSRnjvMKOyr9yjsokMbVWAtZxPPxrnZVq4g=)
                          37: qUsAx2DraAMa8Y5SzlSNQuP2bY8.roa (hash: V4y7uRpiHHEvs+KyRNbN4UiObrLMrthyO3Rv6xbOhyQ=)
                          38: rmfOCXUngu6VbsrOjC8BylUA3Gg.roa (hash: 2tWzXgc3FToTGxYr/7T7kqlA+8uMb6f05pi0Ge4rIx4=)
                          39: sums97Uvm7TdFRWjmVcnOwUzGJ0.roa (hash: RYDFTe1U6hfRaniHkflaE3dJG498svgy21eDqy+x7AM=)
                          40: t1vvR2etKWem9U1A-ahbjlUHopg.roa (hash: G0AJWIVPkm4mok9di6lghZD1/XZGAXhTR1Pi6vIGk0I=)
                          41: xTRu_tyayD9TCcxsinHLfOj03pc.roa (hash: +uoJZ25NPRo6h6sjEmam2SV9RmTRqXG+rOsQfHYwAF0=)
                          42: za-LnExB795o0ADlEf73NRgBV8g.roa (hash: lixci9OgIWVaYV96kzzTCwvRA6VguOmrjErH/pjJQdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:55:2d:82:92:47:ec:7b:41:2e:ed:32:ea:9a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Mar 12 20:00:57 2026 GMT
            Not After : Mar 13 20:00:57 2026 GMT
        Subject: CN=da8dfbddee86fe59dd83444467f9d5ffb87e3b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:ac:e0:a9:77:5f:0c:69:1f:bf:00:a8:b3:
                    2e:79:ac:03:ef:9e:f6:00:40:a1:78:95:d5:48:6b:
                    be:96:0f:d1:28:6c:0d:6b:25:f2:47:81:5e:9c:d7:
                    76:59:c2:0f:76:7f:94:7b:2b:ee:3e:f1:ec:5f:4f:
                    91:6a:e1:41:e1:c3:e8:17:b5:0d:1d:97:bd:64:35:
                    a8:9e:57:97:d0:6a:29:cc:32:84:a0:3f:43:d6:d7:
                    14:85:35:b4:cb:0e:72:cb:f7:38:89:9d:a7:8b:ce:
                    7e:01:13:01:18:9a:ff:cd:dc:4a:a5:2b:a5:a1:16:
                    a3:19:2f:70:7c:b0:f3:5f:4b:31:dd:69:cf:a5:5d:
                    ec:d4:78:b6:c1:00:f1:71:c2:1a:7d:12:cf:ba:2f:
                    31:54:45:12:f0:04:1e:be:2a:4c:ef:a3:cb:43:ec:
                    f6:5e:ae:7b:57:4a:15:e8:d5:0d:b1:ff:16:26:9b:
                    48:96:af:fc:1b:95:77:44:02:8c:a5:a9:bc:39:58:
                    c0:54:07:de:ce:5a:c6:23:b1:7a:35:60:51:35:bf:
                    4d:93:48:83:3e:81:e1:05:8e:92:f2:90:57:12:3b:
                    5a:34:65:6d:c2:28:4d:bc:0d:fa:01:6b:8e:ea:26:
                    1a:5b:be:a4:71:5f:5a:18:1a:ad:85:03:78:0a:5f:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:FB:DD:EE:86:FE:59:DD:83:44:44:67:F9:D5:FF:B8:7E:3B:99
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:47:41:bd:e8:6a:7c:f1:2d:e8:1b:67:eb:be:2b:9b:2b:
         ac:00:09:43:d8:a9:e8:00:91:e3:b5:ea:b9:03:41:27:32:e6:
         b6:bb:74:af:19:cb:44:b0:49:93:05:ee:ea:02:eb:23:c0:68:
         68:00:e7:8e:ee:84:2a:60:94:2d:ca:2f:35:e0:b4:5f:1a:71:
         e9:93:2e:ff:8a:7c:ab:66:24:f9:2b:b8:47:26:b0:46:69:56:
         4e:9e:50:a9:5e:36:c3:4f:a8:56:45:4b:21:03:33:10:aa:d7:
         f1:93:a5:30:aa:cf:a8:34:87:65:cb:51:46:10:e8:87:0c:a1:
         0e:ac:86:9d:49:f9:4c:58:6d:80:26:cd:f9:84:33:2b:69:3a:
         c8:cd:a5:f2:12:5f:aa:58:9d:8c:47:89:18:ad:f9:26:81:cb:
         76:e5:85:d3:a2:b4:d9:09:18:d7:1b:74:67:d6:ac:ae:1a:7f:
         a6:0d:6f:d8:14:f9:f5:dc:45:5f:75:da:73:06:fc:7a:c5:ce:
         25:26:bc:ff:29:7b:21:88:44:e5:7b:16:1c:07:37:bd:bb:ac:
         21:8c:9c:2f:18:ee:0d:1c:4f:a7:55:ec:77:78:1a:5d:54:b3:
         72:22:6e:2c:29:7e:2c:20:b9:7a:89:cf:74:71:0b:61:b6:ec:
         bf:f2:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:23 2026 by rpki-client