Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File:                     OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier:          KMuerrdbLPK81ERa2NSBfT2GBiMvgnE/U1EFq0Y/6Fo=
Subject key identifier:   AD:F9:B7:73:6D:43:B3:A2:73:A9:26:68:C6:BA:69:01:18:C5:9A:A3
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       019CE2C6E45A957D051AFAE63DA023D07565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number:          1895
Signing time:             Thu 12 Mar 2026 16:00:11 +0000
Manifest this update:     Thu 12 Mar 2026 16:00:11 +0000
Manifest next update:     Fri 13 Mar 2026 16:00:11 +0000
Files and hashes:         1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=)
                          2: 1k6LBboYndm8KPxxnHHSfyA330M.roa (hash: X46ysx2IUyKm6jXZ7VDJJwqGgs4SwZUKvqkP6KVxSfQ=)
                          3: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=)
                          4: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=)
                          5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=)
                          6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=)
                          7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=)
                          8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: lneZEhXekJWsOgJA5kyANc/FgHxrSEzX2zQCBNkwgEU=)
                          9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=)
                          10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=)
                          11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=)
                          12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=)
                          13: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=)
                          14: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=)
                          15: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=)
                          16: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=)
                          17: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=)
                          18: kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa (hash: 6/BkbF3Xl0wXeX45+UDxiyzqx4P3HQHvsaM0t24sFCU=)
                          19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=)
                          20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=)
                          21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=)
                          22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=)
                          23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c6:e4:5a:95:7d:05:1a:fa:e6:3d:a0:23:d0:75:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Mar 12 16:00:11 2026 GMT
            Not After : Mar 13 16:00:11 2026 GMT
        Subject: CN=adf9b7736d43b3a273a92668c6ba690118c59aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:f7:e7:81:3e:fc:f6:4e:f8:db:8f:c8:64:
                    ea:bc:e1:61:9b:2d:c6:2e:70:8c:09:a6:53:20:a9:
                    ce:2e:ae:fc:df:ca:5f:90:c8:a8:a5:93:77:63:97:
                    ee:e3:75:d8:60:c8:f7:f9:18:ee:9e:2e:f4:44:3d:
                    d6:50:d4:17:c2:31:22:ed:29:fc:f0:c5:88:2e:d6:
                    d2:1b:ee:13:e7:dc:c4:b9:4e:9a:f0:85:a2:78:16:
                    b7:89:f4:c6:15:4a:4d:0d:e7:72:92:7e:cb:a8:69:
                    8b:46:15:cb:4c:67:ca:67:9a:fa:5c:c2:34:51:4e:
                    a8:6e:24:3c:b2:60:f1:d0:01:95:37:77:5c:97:8e:
                    7b:c4:4a:d2:9f:fe:40:50:5e:d5:33:54:98:b7:e4:
                    3f:65:20:d0:fc:c7:d2:ee:65:73:6d:64:bd:da:10:
                    10:af:e1:c3:a0:9d:71:99:6a:b5:0b:74:fb:a2:0e:
                    12:43:42:79:eb:53:76:9c:86:62:cf:0b:cd:61:bb:
                    4f:bc:e1:30:7c:07:4d:a7:0f:39:cc:fb:39:2b:de:
                    48:de:55:be:10:6b:7d:90:49:56:89:4c:06:fe:88:
                    67:95:61:5e:db:4e:a0:01:1e:73:4d:7c:22:4d:43:
                    27:60:8c:61:10:8f:2a:85:ce:64:41:b1:62:22:1c:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:B7:73:6D:43:B3:A2:73:A9:26:68:C6:BA:69:01:18:C5:9A:A3
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:df:9c:88:10:7d:b1:7e:63:27:06:8e:27:ca:34:a7:73:
         a3:3c:f8:06:89:e1:8e:dd:a5:82:1c:cb:05:e2:5b:b3:c2:fe:
         e1:3e:f4:fc:e3:14:d9:c8:24:01:ee:c1:da:5d:70:f6:59:d7:
         e1:e9:96:34:77:c0:b7:84:62:54:42:ac:b9:69:0c:2b:8b:dd:
         0c:6d:70:d9:5a:52:ea:60:71:e7:e7:d6:ae:e0:13:43:57:7b:
         03:ea:51:7f:de:51:f4:9e:96:24:5e:19:8e:7d:0f:bb:dd:ce:
         d3:e1:8d:81:34:c0:d6:27:5e:6b:5e:ec:da:8a:7a:ef:fe:e8:
         ff:85:c4:72:bb:6c:cb:13:fa:fe:5f:68:cb:a2:2b:88:31:a4:
         b8:59:b4:24:bf:b0:de:6f:0c:c1:7a:b6:09:2b:bc:08:df:ae:
         cd:49:31:ce:41:a5:eb:99:b5:d6:59:b9:a3:09:47:8f:84:f3:
         d7:b9:89:70:77:81:e6:af:25:9d:45:f8:90:58:9b:2a:64:8c:
         3f:c8:7d:58:6b:0c:77:89:62:3f:67:c6:d0:75:cc:5e:a0:d7:
         f4:30:12:f6:0a:cc:ad:6b:2f:01:db:ca:7f:fa:ce:33:5f:1b:
         63:fa:b2:df:26:81:2c:85:8d:fa:e4:c1:2e:7a:d0:71:60:d1:
         ea:80:ea:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzixuRalX0FGvrmPaAj0HVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjYwMzEyMTYwMDExWhcNMjYwMzEzMTYwMDExWjAzMTEwLwYDVQQD
EyhhZGY5Yjc3MzZkNDNiM2EyNzNhOTI2NjhjNmJhNjkwMTE4YzU5YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlob354E+/PZO+NuPyGTqvOFhmy3G
LnCMCaZTIKnOLq7838pfkMiopZN3Y5fu43XYYMj3+Rjuni70RD3WUNQXwjEi7Sn8
8MWILtbSG+4T59zEuU6a8IWieBa3ifTGFUpNDedykn7LqGmLRhXLTGfKZ5r6XMI0
UU6obiQ8smDx0AGVN3dcl457xErSn/5AUF7VM1SYt+Q/ZSDQ/MfS7mVzbWS92hAQ
r+HDoJ1xmWq1C3T7og4SQ0J561N2nIZizwvNYbtPvOEwfAdNpw85zPs5K95I3lW+
EGt9kElWiUwG/ohnlWFe206gAR5zTXwiTUMnYIxhEI8qhc5kQbFiIhx5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK35t3NtQ7Oic6kmaMa6aQEYxZqjMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnTfnIgQ
fbF+YycGjifKNKdzozz4Bonhjt2lghzLBeJbs8L+4T70/OMU2cgkAe7B2l1w9lnX
4emWNHfAt4RiVEKsuWkMK4vdDG1w2VpS6mBx5+fWruATQ1d7A+pRf95R9J6WJF4Z
jn0Pu93O0+GNgTTA1idea17s2op67/7o/4XEcrtsyxP6/l9oy6IriDGkuFm0JL+w
3m8MwXq2CSu8CN+uzUkxzkGl65m11lm5owlHj4Tz17mJcHeB5q8lnUX4kFibKmSM
P8h9WGsMd4liP2fG0HXMXqDX9DAS9grMrWsvAdvKf/rOM18bY/qy3yaBLIWN+uTB
LnrQcWDR6oDq5Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:17:51 2026 by rpki-client