Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          ss80hPSb1rl9ikc4O4nVnxRKpj3eQ101ak39PwxPYhg=
Subject key identifier:   A3:7B:93:A8:67:5C:B5:62:0E:71:CD:25:B6:15:26:8E:63:31:41:65
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       019CE3359ED9DA143EFCA885DD41D0431424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          18C7
Signing time:             Thu 12 Mar 2026 18:01:07 +0000
Manifest this update:     Thu 12 Mar 2026 18:01:07 +0000
Manifest next update:     Fri 13 Mar 2026 18:01:07 +0000
Files and hashes:         1: 1Uo76hmvh5FzNDo276Zm4m_BT0s.roa (hash: N6dkUQu86zvoRHT3ompLiDGklhcKWt0L+DfJn/M9Ues=)
                          2: 60PmQRc6KqumCF_7Z7zTsYcdYaY.roa (hash: y1QSPcuJ+pW6ofu1/70Fq1yGPon+kU5iDXnDLtw/Cpo=)
                          3: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: fET7U8YKSeBbrKpe372VFg2xUDvbe2xbt8p3Z7fuQzk=)
                          4: C2bNUeB_0zECbd22GOKk7y57b7g.roa (hash: l0IvAbIHaEOPaTPBP3rxLmVfNAJqlgTHUbxhQD/Bm6M=)
                          5: D5NkL44tDna5iq5TxBiDoayyR7w.roa (hash: xpIWln43hlWk8qKWLoKR9JJ/noHx7dA0xrLy34N2PV8=)
                          6: I96PBjrYup8aPv2pR7TdLFEHJHk.roa (hash: WYpW9pgQH+tfWd38rRUvQVayJbzQqdLy/3DGSA3PmaA=)
                          7: IzuhPSU32UBjVKA2bk0v7_QU1uE.roa (hash: Hv1nXeZ09K6FcuDi7GWgb1nfVre9Ok5EpyqMWBjT5zg=)
                          8: Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa (hash: 6MBrxW0BKA+vioWFxO1PZaS20qgrgGxGwFg9B23P52o=)
                          9: QM8VI98PqlANgb9tPw2FAs0LwAM.roa (hash: JeUyAKH1L4usZx4jxBTMv0q5gpiSUok50P68tyWxjhI=)
                          10: RMSbReZxAHoFg9QhadNO9TahUm8.roa (hash: f0AnUWtxhrAYYQTYCZDIqQ5s08RCO7RTaWlG1CYAjZ0=)
                          11: SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa (hash: h00bQB9oTUE+4PsAJHu/xyixXuN3G9fmaTv9iiJ4iOw=)
                          12: U4jYXa33eK2_Y2WdmHCAOH75bvM.roa (hash: ejTGELQ7zjtDoNb9o1n2deFNC4+qkFo4zCvOGfp57X4=)
                          13: YPjsb2BZZVlwkheQ4-BXMyYUx8A.roa (hash: BuSmPU+cmorFIW2mrVOPHrLfL0dn0EfxJIzzSyE9HX4=)
                          14: ZYExCDXlMvLvbu9PyCtvwKVx1wg.roa (hash: 80JMqq0F0tUOvFwE2Iz/kNdGxy/t5IdoU4H7dyp6pDI=)
                          15: aW3M8On5MmS81nR314v2KAMjhWo.roa (hash: 9ZW0rFhmByfJbfB+yP9UIWPM/yI+swsdrl4gzJqco04=)
                          16: bjFSQtRF34AqVafFJtFqhxgWQZc.roa (hash: yES7m7w5zSaR30emDz0+YUk1mwW3sg3fxIM0I4pVGRw=)
                          17: bnpIDhTze01wESG9I3vUuYbGv80.roa (hash: pCKaqyPuY+WplwCpDPRA6ZUWqAhou47BgnY6GoKoew4=)
                          18: c7IXsqmxdhAG_jJYtud9EP72qOw.roa (hash: Mym9yT5oPGpT2N2HtTmvnEaPNnpQ4t08pH6QuUqEjls=)
                          19: dO3ondwwLGbrI_vEcsL_cnUVyk4.roa (hash: zcZPr9SNFN/r/TTxtdIr0uKIimZwXcjbyUmDYN6jAtY=)
                          20: k9qT9L4oiwVVutgZqw2789sZSpM.roa (hash: 4bUe/2Ktq9Rh6ybQkPrFIzkqDQmO7L4EaOmWWLO3Ybw=)
                          21: ljwpW_MXZm-BJRwn1Jjte3DRq38.roa (hash: AJnLn/P5WqYS8NOh6UP6VDDKHZJB50IROKVNlFo2134=)
                          22: pWknCXIQAFv1BFVjsRmSr0NGTn4.roa (hash: Uq48b0jv4rRLlijsx/raaenPXKpfmSHTN+zFN1ZqwHY=)
                          23: qff7q2HzSGSSyiMg2SYgZicp8RA.roa (hash: she65TZNRufZfodlMnGAteeu8BxuGXHft9ScMacnGLI=)
                          24: yyxSxrF4ZcFyCTbbapEmZHvC14M.roa (hash: 9k1t3MVGGwaihFQgwuGr+VC3Y19Wd6fj+le41WnzZYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:35:9e:d9:da:14:3e:fc:a8:85:dd:41:d0:43:14:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Mar 12 18:01:07 2026 GMT
            Not After : Mar 13 18:01:07 2026 GMT
        Subject: CN=a37b93a8675cb5620e71cd25b615268e63314165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:43:ca:a6:a9:ec:86:6b:2b:74:10:91:c8:
                    98:ce:5c:9d:b0:65:20:62:36:71:66:94:3e:e2:22:
                    e4:75:c1:22:f1:a6:5b:aa:f5:75:3e:4a:7e:db:56:
                    6e:a2:2b:ba:78:0d:8c:66:71:7b:66:71:fa:29:d0:
                    61:fd:1c:bd:4b:4c:6b:20:61:0c:00:64:a7:95:61:
                    37:9f:36:8c:84:cd:00:07:d8:86:01:53:35:9f:eb:
                    6e:ed:ec:be:e8:2d:d8:4d:bb:43:6e:6c:ce:f4:b9:
                    d3:dd:c1:ec:54:fe:eb:5e:61:33:ee:32:2b:76:28:
                    5f:78:38:d0:82:dd:3b:85:37:90:ce:4d:35:32:e4:
                    26:c0:de:aa:30:6c:22:c9:80:94:06:65:f8:b8:6f:
                    7c:2e:13:7b:b0:d7:4d:f2:e4:39:9f:44:18:c2:e0:
                    e1:09:07:63:a1:52:fa:df:d9:71:8d:e2:57:35:a5:
                    56:39:09:59:77:b9:86:28:dd:c6:17:3d:18:e9:09:
                    fb:0a:60:90:da:53:b3:34:03:2f:88:99:83:cd:1d:
                    94:57:86:ba:26:52:86:d4:c8:c6:39:fd:5a:e0:0d:
                    c0:13:9a:84:58:84:0e:c9:6b:7e:f0:c3:56:47:9d:
                    e1:e2:c5:19:bc:ff:4a:5a:f6:b1:fe:86:c4:77:5c:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:93:A8:67:5C:B5:62:0E:71:CD:25:B6:15:26:8E:63:31:41:65
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:b1:84:38:15:19:71:a3:ac:e1:9e:02:7f:11:da:6f:50:
         e0:2c:89:ab:48:b2:01:15:b4:99:bf:ac:65:e3:2d:fa:2a:1a:
         24:10:d6:63:19:5f:ef:56:2a:02:29:d7:ab:15:30:14:25:93:
         bb:4b:16:ca:02:06:b2:4f:a5:cc:ec:c8:5e:b7:42:4d:b3:dc:
         47:5b:08:63:97:cd:f8:f1:d6:65:49:5d:7d:66:f3:03:f3:50:
         bc:62:7b:af:ec:d8:1a:72:f4:e9:56:72:3c:ec:02:09:08:8b:
         5a:dc:e7:61:10:b2:ab:0c:7b:3e:11:36:bc:09:6f:81:01:2a:
         f1:00:13:a5:6c:4d:5a:b7:5f:de:7a:2c:cd:a0:2f:3c:4e:fb:
         37:6b:db:56:98:85:30:d8:43:80:5c:b4:77:78:95:61:5d:ff:
         30:5f:16:83:9b:de:1a:72:40:c4:79:a8:12:89:97:14:76:ec:
         35:b8:f2:c3:15:18:53:c5:9d:dc:85:0a:a7:5c:f2:b4:a4:f2:
         98:a3:ae:59:2e:4f:6e:57:6f:62:fd:cd:14:38:8c:4a:aa:00:
         21:7a:b4:24:0e:6c:1a:ca:03:ce:45:dc:67:32:26:41:87:31:
         60:ee:8a:8b:f0:b2:3b:18:25:0f:55:7e:bd:0d:49:f0:65:d3:
         e0:35:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:21:15 2026 by rpki-client