Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          Xq6C9MVwfSfnTgjFqDBluBCeQPDOs1TQoJBRfufNk30=
Subject key identifier:   66:50:1E:7B:31:B3:4A:C1:3E:0B:49:64:7A:7B:8E:48:C1:E7:15:F2
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       019CE4B65122A4DE1993CF1253B52CE9EC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          1888
Signing time:             Fri 13 Mar 2026 01:01:19 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:19 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:19 +0000
Files and hashes:         1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
                          2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
                          3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: yD6z5y5sb1rTDr1FMcX+/oOO/rBM16B2tobAcVEEleY=)
                          4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
                          5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
                          6: AUmE2YbKzYGKohczr4jMETToilY.roa (hash: HU9CxUgtmqm30Tk4KPw7deDUwU0eCp+soz3LnSEevJY=)
                          7: D9ueYQAGeLx75Euk-RV6ER30CIk.roa (hash: UMB0udBkU8ic9PwtzEJZCPjDGJvIv61IcjNxyKBRmOM=)
                          8: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
                          9: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
                          10: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
                          11: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
                          12: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
                          13: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
                          14: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
                          15: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
                          16: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
                          17: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
                          18: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
                          19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
                          20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
                          21: hCuigtGnGrmGxt4fb38OXAzWTfY.roa (hash: iil9Ij6qPFCaMYbGlEBHWiblDDvzQIMW27VYLojp5iU=)
                          22: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
                          23: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
                          24: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
                          25: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
                          26: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
                          27: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:51:22:a4:de:19:93:cf:12:53:b5:2c:e9:ec:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Mar 13 01:01:19 2026 GMT
            Not After : Mar 14 01:01:19 2026 GMT
        Subject: CN=66501e7b31b34ac13e0b49647a7b8e48c1e715f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:9c:ba:19:63:c8:67:e0:23:dc:35:e9:3b:
                    1c:c7:de:28:48:62:bd:75:13:d2:4c:59:b5:5d:19:
                    31:9a:af:80:16:b2:a8:14:ab:27:20:3b:d5:a8:fd:
                    ae:0e:e5:19:de:8e:6c:c4:15:d8:c9:d4:20:dd:f9:
                    a7:31:e3:bf:9f:06:9a:8f:de:0f:8d:32:a0:7d:f1:
                    6c:49:65:7d:db:83:cb:4a:4f:6f:3b:fd:10:ef:5b:
                    ca:ba:8c:8d:6a:ce:ca:e2:43:26:70:14:2b:21:a1:
                    20:25:fb:b8:80:b4:40:2e:b0:a5:d8:3b:23:dd:6e:
                    b0:1d:d1:bd:ca:a0:26:c3:64:60:46:c1:e2:dc:11:
                    80:5c:57:dd:21:e1:62:51:df:bb:2b:bd:86:de:8d:
                    f7:33:b9:31:08:f6:3c:64:58:33:12:3a:a1:3d:87:
                    62:8c:22:e5:4a:5a:2a:24:73:3a:1f:4a:5a:df:51:
                    fa:81:d7:4c:ec:d0:57:0e:67:0c:4d:3c:a6:6e:1e:
                    bd:fe:f5:54:83:a1:f6:d6:24:0d:81:97:8d:3d:45:
                    e4:79:6c:6f:f2:3e:29:33:c9:1b:73:46:9d:cc:df:
                    f5:1b:1d:3b:15:61:89:54:66:69:ce:aa:37:e0:15:
                    a4:ad:f8:f4:52:19:c9:43:65:6b:ac:7d:29:66:07:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:50:1E:7B:31:B3:4A:C1:3E:0B:49:64:7A:7B:8E:48:C1:E7:15:F2
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:52:9a:a0:b9:32:3f:80:9e:ac:a3:d7:17:51:a0:df:ee:
         5a:7f:fc:d6:5f:58:c5:a7:44:24:ca:cc:f0:ad:2d:f7:96:6d:
         73:bb:1b:12:c0:da:10:f4:ec:fd:97:69:d6:d6:13:25:9a:0d:
         7e:e8:6e:82:3f:7e:c0:1f:d3:76:77:f7:d9:33:ef:79:c4:d7:
         72:12:3f:03:85:ab:79:e3:34:dc:0d:c1:f6:ac:7f:f2:64:75:
         fa:44:84:22:9e:9f:98:69:53:52:3a:e9:59:17:9f:e8:a5:c3:
         49:00:6d:85:c9:5d:3f:9c:b2:a7:ce:20:64:91:85:e3:d3:f4:
         bf:ab:5a:be:aa:e4:7a:54:13:d3:c8:46:51:54:e4:61:8e:69:
         27:f7:0f:0c:d7:f4:e8:3b:92:b8:f3:a6:ca:7d:ce:02:39:df:
         aa:aa:2a:81:a8:35:0b:db:1e:fd:f8:ad:9c:21:a0:37:7a:96:
         d0:31:99:a0:fb:7a:6f:ff:07:da:39:d7:92:fd:a4:3f:b5:82:
         a4:a8:1f:df:20:76:6a:ea:f6:3f:32:a4:d4:2e:3b:99:fb:05:
         57:bd:5a:6a:e6:fb:ae:45:4a:7e:a8:c4:aa:eb:9a:56:e9:90:
         88:84:3f:d9:f4:44:ec:92:83:52:d0:15:4a:c8:43:54:e3:8e:
         b4:5b:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:07:37 2026 by rpki-client