Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          VcwMz8ibaEXUvoL2XZfYEufWUsP6SLyp51Kdy1q6RUE=
Subject key identifier:   F4:21:24:BE:35:77:D4:CD:BF:C2:FE:B4:DC:05:37:65:2A:02:F5:E6
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       019CC63DFCB7878CE6679CAF6C0485ED317F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          1204
Signing time:             Sat 07 Mar 2026 03:01:17 +0000
Manifest this update:     Sat 07 Mar 2026 03:01:17 +0000
Manifest next update:     Sun 08 Mar 2026 03:01:17 +0000
Files and hashes:         1: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (hash: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI=)
                          2: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: R4IqsMXG+aMxv8J0ZGRvXSFQuOSAUVeZLovdD2iNIL4=)
                          3: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (hash: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME=)
                          4: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (hash: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w=)
                          5: HClmRpwZ5qb-6Tw5Lpkkp6vUq24.roa (hash: R6anRTSdgq6QM25eUKnQ4vUTar0ktx5VjKKHjNUMua0=)
                          6: Idn5X01I8ewaC6lH5aMO8qDPZR8.roa (hash: inaT9YDkDzXeVmAusXdqKqfZJOTOaFo7hAptlKwjJcY=)
                          7: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (hash: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ=)
                          8: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (hash: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ=)
                          9: TiqcBX8Xr8pCHaLkUx1X8iTEFj4.roa (hash: 3bwGL1/nE8oEOwOy0jR0e8JowdddSDpqjg7t1twul8Y=)
                          10: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (hash: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=)
                          11: XOw8JNJO-uIg9HHlnw548ZJ5LdI.roa (hash: jEOkOMDISMGQm6lDZ5S6iuPlerKdJ4lpqsbuzz6ZhmY=)
                          12: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (hash: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA=)
                          13: _muqkDefxMn6elW9A6x3-u89qsI.roa (hash: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU=)
                          14: bXpAY6oapcJJSsH74H_lsZNy-FA.roa (hash: lyF3GT0AHqEUFHykQSaeBtexwb64bMUL9++L8uFcKf0=)
                          15: b_TRZnQbpKGGr7WruYBNW7N39mI.roa (hash: vbQnurk8ZzdTBK99uDa/ZNS1iZlMBI/qDpBfj+6WAww=)
                          16: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (hash: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8=)
                          17: ffQ9wRR3lmZ7SrnLaJ08cFzb4uw.roa (hash: jojS/hwBp8bJCEys0uBEnShnLC0EMlO6n+Kx5AShBU4=)
                          18: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (hash: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=)
                          19: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (hash: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM=)
                          20: hYRrlG4ePJA5Yx73qthpN3BdmIY.roa (hash: i1ovuAdJSnvNJTo743kB/D+xmK1EozUSuKfnkZOGoUY=)
                          21: j6Nq6nF9Z8-h3762-SK6F9kbZ24.roa (hash: +E6cfZwDmEhqN4LgxzzWb5rW4D9f35K4n16nWWHKoCE=)
                          22: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (hash: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE=)
                          23: yPPudgQzJCUtVTuuzqJps2ZZOcg.roa (hash: ps1MAAJtV3fUVlLrQIgjyj1ZoNoHchwEw8Y92fP5Qps=)
                          24: zsWUC_e9yhKUrFPIEUkIvI5aHHA.roa (hash: NI+95z1P6YBvuLPF/+hkyTmgVTfETjJIbBe1gLRv9dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 00:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:3d:fc:b7:87:8c:e6:67:9c:af:6c:04:85:ed:31:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Mar  7 03:01:17 2026 GMT
            Not After : Mar  8 03:01:17 2026 GMT
        Subject: CN=f42124be3577d4cdbfc2feb4dc0537652a02f5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:0c:b3:62:f7:b3:d8:bc:16:4f:f2:bf:6b:
                    f6:4c:17:2c:5a:03:c5:8f:a7:41:a4:5a:da:39:1e:
                    ce:f0:42:72:96:a1:bf:4d:83:13:26:7b:4a:bc:ef:
                    08:2f:81:1a:4c:93:ce:c2:b5:8f:d5:73:f7:5a:ea:
                    92:bf:d5:5a:b4:52:52:d0:b7:6c:ae:fa:ab:35:8f:
                    34:5b:ff:13:f7:75:98:ff:81:a2:43:78:71:e9:b1:
                    0f:91:cd:9b:1b:97:1b:1e:39:55:27:ec:10:d0:3d:
                    c8:e7:29:b4:c3:a0:7a:d3:b8:b0:97:3c:3a:07:8c:
                    73:56:e9:75:60:75:22:91:9c:47:3e:5d:98:49:01:
                    7f:36:d5:d9:98:72:a1:46:5a:e9:97:87:30:51:f6:
                    42:30:cc:a5:0e:0e:9b:b5:47:de:0e:f5:37:74:f3:
                    61:fa:98:2f:9f:b7:2d:ec:48:90:31:a7:ad:da:72:
                    06:37:b2:37:39:8f:89:45:34:9f:71:49:2c:86:21:
                    b9:22:b8:1c:dd:8a:5a:23:6a:05:e9:d4:6b:3c:81:
                    e2:7f:b6:f7:19:95:9d:7b:90:1a:63:13:a5:ea:32:
                    81:f9:9e:c5:17:df:4b:9c:29:ee:ec:f2:a6:9f:3c:
                    a5:aa:b2:c5:ae:ed:e4:b6:73:31:4a:58:77:64:d7:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:21:24:BE:35:77:D4:CD:BF:C2:FE:B4:DC:05:37:65:2A:02:F5:E6
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:7b:a6:6a:71:87:41:fb:de:2b:18:1f:5e:78:d8:a2:e1:
         42:c6:62:fd:6a:60:43:2d:00:e4:ab:b6:39:96:ad:e5:79:85:
         aa:0b:6e:73:92:00:72:31:24:8e:71:60:1b:17:d3:4d:b3:4c:
         5a:29:47:63:b0:47:0f:44:8a:2a:36:a9:ed:a3:e5:0d:50:f7:
         50:5b:1d:d6:7e:89:61:cd:c0:f0:21:d2:e2:64:45:86:f5:8a:
         96:35:a5:3f:fc:f1:76:d0:75:50:cc:b2:f3:48:fa:50:ef:e0:
         d6:94:2b:77:d5:ca:d4:fe:a2:3c:07:e9:24:60:37:54:b5:9d:
         43:b7:e8:5f:2e:69:9e:64:1f:15:04:60:e3:b6:77:20:95:a6:
         1d:5b:b0:f7:b1:54:1c:8e:18:26:b7:52:b9:fa:ee:0a:72:64:
         dd:9b:ec:f2:22:28:39:65:6e:6b:7a:b2:cc:a2:6b:2c:81:82:
         ae:db:fd:09:34:52:69:4a:79:4c:b9:e5:b6:36:fc:4c:a1:a5:
         c4:75:a5:0c:db:71:5b:97:cb:8d:aa:53:9c:92:f0:3c:34:5c:
         37:fa:4f:13:53:78:3a:ec:98:9c:e4:3b:46:d2:6b:07:4e:74:
         82:3f:9e:e6:3e:e4:c3:21:d7:cf:29:f2:72:a3:e2:20:7a:f5:
         96:d5:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:27:10 2026 by rpki-client