Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File:                     UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier:          P4gujBtEUwNj9EduRRpmA3ddbZgYlGN6PaIf6gQ9sks=
Subject key identifier:   C6:7D:93:2A:E7:09:E1:E3:78:1C:0A:48:C0:CC:1C:F4:B8:FD:E4:47
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       019CBE843C1E812420C9A57057D124E62A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number:          14F0
Signing time:             Thu 05 Mar 2026 15:01:02 +0000
Manifest this update:     Thu 05 Mar 2026 15:01:02 +0000
Manifest next update:     Fri 06 Mar 2026 15:01:02 +0000
Files and hashes:         1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=)
                          2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=)
                          3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=)
                          4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=)
                          5: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=)
                          6: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=)
                          7: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=)
                          8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=)
                          9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=)
                          10: IFlrGlpmIktdxpOhrR8xYveUsbg.roa (hash: n6YOE+skPlRQCEnNvMFsjoFLedlTUeiE/VC0h2vyyho=)
                          11: IHQ60fO3PiKQ3-XtXnQ8-tKlFo4.roa (hash: VUY4u2fqVh4aaq4h0Od2hP+Dwz4kdETj3l9n1FLl2Os=)
                          12: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=)
                          13: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=)
                          14: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=)
                          15: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=)
                          16: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=)
                          17: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: 1PCEcWkyxUkk1cjteeuwirWNAl6OBIKStgz1coC34y0=)
                          18: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=)
                          19: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=)
                          20: aaHpIpUNJCPLemmyB6IfQXXyPEE.roa (hash: OldkvNHI3e3Xq22g7tLXVjk3zVZxwtRnCQyVA3M2gx8=)
                          21: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=)
                          22: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=)
                          23: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=)
                          24: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=)
                          25: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=)
                          26: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=)
                          27: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=)
                          28: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:84:3c:1e:81:24:20:c9:a5:70:57:d1:24:e6:2a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Mar  5 15:01:02 2026 GMT
            Not After : Mar  6 15:01:02 2026 GMT
        Subject: CN=c67d932ae709e1e3781c0a48c0cc1cf4b8fde447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:56:6e:da:90:ba:0f:47:d5:e8:13:16:39:
                    a0:9f:00:fd:22:d3:a4:1d:9d:e3:24:84:6f:62:6e:
                    9f:bf:f4:2f:3a:91:f9:c1:27:fb:8d:2c:e6:8a:73:
                    09:15:51:34:38:7c:6c:20:d6:25:33:dc:9e:00:96:
                    65:e8:7d:7f:fc:5c:17:bb:cb:5c:86:e8:a6:a0:4f:
                    f3:d5:6f:36:f5:03:ae:82:2c:e0:83:cd:e5:31:96:
                    43:c5:34:50:b3:f9:ee:b9:54:81:c6:4e:ee:d0:2f:
                    6f:52:f6:9f:03:70:9f:0d:c2:0b:02:c4:74:f4:10:
                    ec:b7:46:4f:05:0d:f9:46:94:50:b2:b5:a1:7d:d8:
                    05:f1:5b:67:d9:2a:70:dd:2b:76:15:53:8f:66:65:
                    a4:83:ce:7d:7c:6a:9d:78:e7:f5:59:68:19:b0:69:
                    a6:2d:0f:c1:43:79:0d:7e:28:3c:73:c6:52:8b:1d:
                    08:72:4b:3e:10:d1:61:1a:df:5c:cc:be:51:a6:0b:
                    ee:6e:e3:83:68:5d:e9:29:eb:4c:03:a4:da:ea:34:
                    7a:ed:e5:f7:51:db:41:ef:d5:ac:d8:b8:0e:9d:6e:
                    21:50:58:7f:30:2f:de:e6:f2:9b:61:f8:ed:43:6b:
                    a7:5e:92:bd:db:15:1e:2d:9c:0f:ed:f6:eb:9d:ef:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:93:2A:E7:09:E1:E3:78:1C:0A:48:C0:CC:1C:F4:B8:FD:E4:47
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:f9:42:e4:0a:99:9b:4c:f5:da:56:93:a9:25:44:e5:ad:
         cb:24:d8:e0:1c:a7:05:64:6e:4d:06:75:90:22:c0:b8:0f:7f:
         86:ea:0c:f7:19:4e:d4:e3:28:db:db:59:e2:4e:b5:5c:62:ab:
         d1:0a:15:98:cf:82:32:78:9a:b6:fe:ce:a3:9e:3f:ae:49:23:
         d2:29:b7:0b:64:d4:bf:1d:d3:76:80:41:f8:23:89:1f:a1:7a:
         c9:f1:2f:cc:40:45:56:7a:aa:5f:f4:65:dc:a8:0e:14:65:12:
         94:db:b4:2c:c6:e1:2e:57:6b:b7:6a:99:f9:4d:21:76:5f:4c:
         fd:0c:46:bc:00:65:0e:fd:7e:2d:5f:a0:cf:be:5e:a8:1c:02:
         6c:47:b5:83:74:07:3b:cc:23:68:81:90:f1:0f:5a:49:dc:23:
         d6:f0:59:86:df:cf:0d:0b:cc:28:2a:c3:92:0e:88:50:26:ed:
         27:a1:7f:e0:1b:3d:f8:eb:8d:a3:37:89:1a:0f:b9:b7:ef:ac:
         fe:d3:94:2e:8d:8a:84:45:db:2a:a0:f4:f2:ba:11:f2:88:ef:
         ad:b5:04:a7:b4:72:42:11:11:4a:e3:4c:5b:0c:5a:2b:bb:48:
         6a:92:eb:07:fd:96:16:95:8e:a3:72:93:95:37:2e:3b:bb:9c:
         d2:b6:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:06:13 2026 by rpki-client