Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          deICLyIHFVydfQCVfBy9awy1H8jErhW9d59TR6A9Qmo=
Subject key identifier:   0A:7F:32:80:BB:43:76:1D:EA:55:7B:FC:17:78:38:BE:9D:04:5C:9A
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019D0FD77EFCAD08C2E601753DE72CDEA79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          07FD
Signing time:             Sat 21 Mar 2026 10:01:14 +0000
Manifest this update:     Sat 21 Mar 2026 10:01:14 +0000
Manifest next update:     Sun 22 Mar 2026 10:01:14 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: thMx2KNoOgFIxl6KJUEeuBso8sreR9b/QSNCwZ0uGGk=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa (hash: kECzxgTvYO+PrdxQixZUCF66WT+yJQBNEFYIJiJ2PsM=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: CkCDhPbCna91c--nA7KEJZUC0FA.roa (hash: SCFhK7kq7enPygOGahP+XtF61sybJv999OYFUdH7i+M=)
                          10: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          11: Dry5fmI7vbYODg3IRPL7HNkMZEE.roa (hash: pqWEYcMTMmr2xp+JOotJI+53hcGjaHkqIQLS6j9AKUU=)
                          12: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          13: K67tfvE4FRSPvLt2l542G0220Hc.roa (hash: b1V/he+PINE8CRmplDLJWQIH+333uWnJMPhoYbftnuE=)
                          14: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          15: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          16: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          17: gj04uIHrV_C75Lz74FAYqP9RICg.roa (hash: g0/xETr32Yp8RgO9lzjP5xC62gdaahVlkFWHIAJsqhA=)
                          18: jThJ8zyPfDON0l1aonw1ID8g1mg.roa (hash: jThi472vhZRzgny5FoiQHNxN0cWcyfPRCG/AaRi78ZE=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa (hash: 6ImAyjB++uGSJlAdPGguoq0Hb1TaQ164wmSn84u2CX8=)
                          22: ucdt-9U9uLgFKY9KoDahOi5EY1o.roa (hash: 4MR+A0UJDoXwvizY/3LZE7fqk6s46995FJs3DydY+O0=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0f:d7:7e:fc:ad:08:c2:e6:01:75:3d:e7:2c:de:a7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Mar 21 10:01:14 2026 GMT
            Not After : Mar 22 10:01:14 2026 GMT
        Subject: CN=0a7f3280bb43761dea557bfc177838be9d045c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:24:62:6b:8f:5d:5f:16:a3:d3:68:78:3c:
                    73:13:45:c9:bd:0f:d0:cc:c7:a4:ac:15:45:fa:28:
                    21:1a:25:8a:c5:a5:52:71:55:97:d4:d7:0e:d6:2e:
                    30:65:48:4b:85:9b:81:e8:c1:12:4c:5b:34:bd:a3:
                    91:79:5b:06:48:ce:9f:79:1c:c2:64:2a:61:d4:81:
                    f8:ad:94:0f:c9:11:cd:cf:79:b9:ae:d8:ad:28:df:
                    63:5b:d7:0e:88:e6:37:17:59:54:d5:59:44:c1:64:
                    75:bc:34:a3:96:aa:ed:9b:69:ae:c3:78:28:fe:cc:
                    cd:4a:a6:55:38:31:c9:74:fd:0e:b0:72:17:6b:6e:
                    1e:4b:45:db:2d:79:df:37:75:54:ce:8b:b4:2c:cf:
                    9b:22:86:09:1a:98:1b:16:9d:5b:c5:97:7f:29:1a:
                    53:37:0a:32:0c:ed:7a:60:f0:d1:25:e5:4c:eb:61:
                    08:97:92:f7:43:ad:2f:39:75:eb:6d:84:d5:80:7a:
                    0a:2e:8d:93:b0:d8:2f:ae:90:ff:0a:a9:be:4f:af:
                    96:49:71:40:88:5d:3b:ac:0d:c8:f3:ab:36:fe:99:
                    13:bd:49:47:98:55:43:29:e6:18:7b:ed:24:d9:e2:
                    82:16:01:84:34:59:f1:e8:dd:66:3d:d7:f4:53:ff:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7F:32:80:BB:43:76:1D:EA:55:7B:FC:17:78:38:BE:9D:04:5C:9A
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:da:51:76:54:53:df:be:ae:8f:4d:54:ab:8f:db:ec:df:ea:
         f6:78:fd:28:41:c1:11:30:69:51:2b:e0:80:5e:a3:de:c9:d5:
         b5:35:c8:fe:bf:b1:9e:e7:bf:0e:8b:44:95:e6:eb:58:0b:72:
         33:77:42:a9:a7:c8:bd:85:9b:4a:0f:17:cf:4c:86:8b:1a:f9:
         c0:07:3a:e7:f7:05:37:28:c8:58:f0:10:7a:a3:b9:12:1a:89:
         ea:1d:a2:da:56:53:3c:a2:02:20:ce:78:cf:65:39:77:d5:2b:
         83:5c:96:52:60:67:7b:4c:0e:81:5d:30:63:aa:e9:6e:31:c8:
         7a:ee:08:44:8e:bb:66:a6:38:3b:4e:7c:d5:f5:1c:e7:76:fd:
         c7:aa:95:66:c0:cf:f6:f7:f8:05:bd:29:32:62:ed:f7:24:63:
         ae:a6:2b:1a:bc:50:38:f0:b0:a1:d0:12:64:2d:00:7b:db:dd:
         1b:27:54:6c:01:5b:77:32:35:af:a9:e3:c0:07:fc:be:44:84:
         ed:ef:d2:38:4e:0b:52:68:1f:22:e5:2c:43:aa:eb:fa:ca:dc:
         a8:0e:5b:ff:2e:d8:30:bd:53:aa:ca:12:d1:29:4e:e4:86:ea:
         d2:c2:57:ef:a9:76:87:5d:c8:0a:60:84:58:b6:4a:55:be:09:
         d0:15:36:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0P1378rQjC5gF1Pecs3qedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwMzIxMTAwMTE0WhcNMjYwMzIyMTAwMTE0WjAzMTEwLwYDVQQD
EygwYTdmMzI4MGJiNDM3NjFkZWE1NTdiZmMxNzc4MzhiZTlkMDQ1YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUkYmuPXV8Wo9NoeDxzE0XJvQ/Q
zMekrBVF+ighGiWKxaVScVWX1NcO1i4wZUhLhZuB6MESTFs0vaOReVsGSM6feRzC
ZCph1IH4rZQPyRHNz3m5rtitKN9jW9cOiOY3F1lU1VlEwWR1vDSjlqrtm2muw3go
/szNSqZVODHJdP0OsHIXa24eS0XbLXnfN3VUzou0LM+bIoYJGpgbFp1bxZd/KRpT
NwoyDO16YPDRJeVM62EIl5L3Q60vOXXrbYTVgHoKLo2TsNgvrpD/Cqm+T6+WSXFA
iF07rA3I86s2/pkTvUlHmFVDKeYYe+0k2eKCFgGENFnx6N1mPdf0U/+V3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp/MoC7Q3Yd6lV7/Bd4OL6dBFyaMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNpRdlRT
376uj01Uq4/b7N/q9nj9KEHBETBpUSvggF6j3snVtTXI/r+xnue/DotElebrWAty
M3dCqafIvYWbSg8Xz0yGixr5wAc65/cFNyjIWPAQeqO5EhqJ6h2i2lZTPKICIM54
z2U5d9Urg1yWUmBne0wOgV0wY6rpbjHIeu4IRI67ZqY4O0581fUc53b9x6qVZsDP
9vf4Bb0pMmLt9yRjrqYrGrxQOPCwodASZC0Ae9vdGydUbAFbdzI1r6njwAf8vkSE
7e/SOE4LUmgfIuUsQ6rr+srcqA5b/y7YML1TqsoS0SlO5Ibq0sJX76l2h13ICmCE
WLZKVb4J0BU2hA==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:37:24 2026 by rpki-client