Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          rbPOHZ2/yk8vs8eHV4lURLRepXMcqmljzV3d7NQx0WQ=
Subject key identifier:   18:A4:F7:17:80:34:AB:08:A4:24:9A:A1:B0:58:A9:16:D1:EA:B7:4A
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019CE47F405A4B96540F552BA9E14107E240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          0C81
Signing time:             Fri 13 Mar 2026 00:01:10 +0000
Manifest this update:     Fri 13 Mar 2026 00:01:10 +0000
Manifest next update:     Sat 14 Mar 2026 00:01:10 +0000
Files and hashes:         1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=)
                          2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=)
                          3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=)
                          4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=)
                          5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=)
                          6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=)
                          7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=)
                          8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=)
                          9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=)
                          10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=)
                          11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=)
                          12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=)
                          13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=)
                          14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=)
                          15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=)
                          16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=)
                          17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=)
                          18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: /EanJmFtwXdz/byVhNxVleR4DiUtyAkyjO9Nlv9ic1U=)
                          19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=)
                          20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:40:5a:4b:96:54:0f:55:2b:a9:e1:41:07:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Mar 13 00:01:10 2026 GMT
            Not After : Mar 14 00:01:10 2026 GMT
        Subject: CN=18a4f7178034ab08a4249aa1b058a916d1eab74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:ff:20:8a:3c:f8:21:69:db:58:ab:9d:64:
                    ba:66:76:34:bf:86:2a:78:30:35:5e:1a:d4:9b:1a:
                    cd:53:68:c6:19:28:b6:00:44:66:33:53:26:33:58:
                    1d:cf:f6:8b:3a:df:16:3c:aa:5e:f1:9b:eb:c3:ac:
                    51:70:cd:7c:df:b2:3b:9a:bc:2b:07:c5:55:9a:ef:
                    7d:9d:3c:ab:e3:7c:f6:ef:7d:d2:76:eb:43:49:c0:
                    87:de:c0:5b:1e:5b:39:b3:22:61:20:72:44:f0:d7:
                    87:8a:b4:7c:9d:c3:9c:b3:1e:46:f2:51:fe:49:5e:
                    4d:a9:23:71:89:a2:8a:92:c3:a8:51:dd:98:ab:8e:
                    f2:3d:a5:d4:ac:0a:82:22:d6:c1:e2:0d:32:67:c0:
                    ac:b2:bd:64:7c:c6:13:a1:4b:3d:59:b8:3c:e0:4d:
                    ce:30:ce:4c:d4:46:35:1e:05:43:44:d2:c4:3f:bb:
                    ec:ba:50:c4:c7:9b:e0:88:df:b4:91:d6:2b:e1:75:
                    a0:d3:84:35:d6:6b:df:06:61:6d:6d:d9:27:fc:65:
                    62:24:0d:8e:b6:4e:73:12:2c:f6:cc:20:d5:64:4b:
                    d7:37:05:bf:85:78:14:13:29:76:ef:29:5f:d4:2f:
                    95:81:b0:f6:86:14:0a:ad:f4:5f:18:53:8f:2f:27:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A4:F7:17:80:34:AB:08:A4:24:9A:A1:B0:58:A9:16:D1:EA:B7:4A
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:40:6e:07:f1:60:9f:ae:0c:3b:8d:7e:37:94:8a:f2:9e:
         e0:7c:af:e7:57:59:eb:26:d1:8a:38:e3:3f:45:56:4f:bb:d1:
         5a:09:ef:23:99:a0:ee:d2:bb:d4:31:c3:8e:f1:39:65:14:1c:
         b1:ec:5e:6f:7c:d7:8f:ab:2d:d5:b6:b6:36:e5:07:c1:ae:31:
         1c:04:74:97:95:7b:96:fd:69:f2:f4:b4:0d:8b:70:3e:6e:ee:
         45:73:24:10:ae:c0:31:fd:5f:ea:0a:3a:52:33:9e:13:cf:7d:
         a2:f9:76:e9:c4:c4:73:63:29:8b:dc:da:69:ed:10:08:44:81:
         0a:d3:49:c2:2a:3f:ee:8c:33:ae:5d:8f:3a:b4:d8:ab:86:b4:
         5a:fb:fc:4a:0b:ac:be:62:0d:69:63:f2:b1:bd:b8:f5:72:ad:
         7f:97:dd:dd:09:27:bf:0d:0e:55:f5:0c:70:05:cf:3f:36:62:
         b9:94:95:02:61:3f:f0:35:f4:dc:91:7d:4e:b7:ce:7d:61:e5:
         6a:fa:25:24:f7:f9:69:71:9e:e8:40:43:b7:2a:b0:04:14:6c:
         7b:bd:55:ae:a4:f0:8a:16:85:23:20:d6:eb:bb:64:07:52:7c:
         82:92:c3:d2:95:ed:a5:65:e0:25:93:cf:25:cc:b5:91:b6:2e:
         a2:ba:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:05:15 2026 by rpki-client