Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          RilPkBXHe44iZueZ2g3sXbVjoWbGZBrV4ieg3+xA6n0=
Subject key identifier:   36:A8:F0:73:1E:76:98:A7:6B:AC:02:9D:77:03:49:00:27:1B:BE:4D
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019CBF5FC3C24A08D11195D6EFA563802B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          0297
Signing time:             Thu 05 Mar 2026 19:00:50 +0000
Manifest this update:     Thu 05 Mar 2026 19:00:50 +0000
Manifest next update:     Fri 06 Mar 2026 19:00:50 +0000
Files and hashes:         1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          3: 4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa (hash: GKRpPV/E1hNbYjuWh9w1ms8zKc2uw/7DUOZK8HvTW2k=)
                          4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          5: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=)
                          6: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=)
                          7: In9fUZ6_laTBK3Ny_2v45J-DRyk.roa (hash: AVqBR/4RXTDFlurKJYXZ2mUzQ6COZ0Mw32Yf6crahoY=)
                          8: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=)
                          9: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          10: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=)
                          11: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          12: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          13: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=)
                          14: keSJdnMwcVK2FtcwzmCvVNU79JQ.roa (hash: /rXHdI2JjhjhwAIXDwev1G3+2EHSEVpVeCwEeEhKfkg=)
                          15: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: wQOz1NlBrlBVEEMI0sKgIoPI8uCrD6EDf4YRByCF2TE=)
                          17: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=)
                          18: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          19: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:5f:c3:c2:4a:08:d1:11:95:d6:ef:a5:63:80:2b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Mar  5 19:00:50 2026 GMT
            Not After : Mar  6 19:00:50 2026 GMT
        Subject: CN=36a8f0731e7698a76bac029d77034900271bbe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:19:2f:b0:19:e3:fe:03:c8:46:75:04:e2:
                    7c:c7:61:f6:bf:2e:ce:3e:9f:57:21:f9:de:c3:29:
                    91:ef:c7:df:18:8a:44:e8:f3:1d:34:1f:e5:fc:c3:
                    43:0f:e1:79:e8:20:a4:ac:c1:6f:9a:9d:73:d7:a7:
                    d6:25:85:f3:ec:c1:0b:bd:5f:e9:e9:be:cf:8c:ce:
                    c8:f5:c9:26:9b:a7:b9:26:3b:2f:74:6c:1d:cc:65:
                    c6:45:bb:92:17:9a:cb:e8:09:50:2f:3f:bc:d8:91:
                    2f:5b:80:d0:fa:12:4a:49:b6:46:2b:80:cb:ae:7a:
                    e9:80:f3:68:4a:68:ec:44:f5:a3:65:e2:b0:d5:ed:
                    5e:57:b8:65:00:60:46:82:e5:39:56:a8:3e:6b:49:
                    b8:5c:f4:b8:79:06:5c:2b:0c:3a:bc:c5:b3:11:36:
                    70:1b:df:ed:45:c7:04:27:43:40:a5:54:97:dd:c2:
                    0c:e2:d6:2e:67:c7:a3:30:8c:82:83:72:5c:07:ff:
                    31:88:2c:da:a0:8b:37:0a:5f:dd:68:77:58:ef:93:
                    5e:1f:6e:c7:6b:89:8c:bb:86:b5:78:a2:7b:85:fc:
                    63:75:5f:0d:12:69:2d:c1:e8:f1:d9:e9:86:9a:25:
                    c6:39:bc:09:74:a5:d4:5e:51:50:26:a2:6d:5b:20:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A8:F0:73:1E:76:98:A7:6B:AC:02:9D:77:03:49:00:27:1B:BE:4D
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:e0:cd:e9:41:2b:6b:1c:3f:ce:e2:28:bd:1a:19:b4:c0:
         6e:72:95:ed:48:9e:2c:29:6a:b4:9e:3b:ae:6b:18:3a:7e:fb:
         28:d2:a5:26:2e:82:51:91:0a:5f:18:2e:34:b4:50:6d:57:19:
         1d:47:46:1e:64:87:77:6b:c7:b7:84:13:2b:0e:66:68:c1:b9:
         2b:98:65:a2:53:f4:9a:96:cf:49:91:37:6a:7d:5a:be:27:78:
         af:e0:c4:3f:25:48:0f:32:37:8f:e8:69:e0:bf:ad:24:d4:df:
         36:c2:c0:ef:36:8b:60:22:4a:72:4d:ef:f3:98:3e:85:27:c6:
         ef:d0:ed:5d:54:73:0c:cd:f5:19:b8:9d:90:1f:45:87:e8:33:
         6d:63:3f:1d:07:d9:88:a0:66:62:91:cb:7f:ca:16:ae:ce:1b:
         af:c5:cf:4b:bf:8a:97:8a:e3:b3:68:85:7f:f4:54:56:e3:77:
         0c:6e:63:94:fb:46:ec:6a:ad:79:d3:ef:4a:a3:06:75:ef:01:
         fd:31:5c:29:ea:66:ff:5f:5c:e4:1c:1e:df:12:bb:bd:bc:22:
         a2:bb:23:11:64:c0:60:a7:a8:dc:d0:a6:0e:8f:0a:35:43:d0:
         aa:6f:33:94:6a:7d:b4:55:30:de:e9:13:57:20:19:d8:aa:c6:
         45:79:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:46:46 2026 by rpki-client