Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          0H+lpUN7mWz8l2amo7KXaiGXIbLm4iak+Mo781h3Cd0=
Subject key identifier:   11:93:8E:AB:E1:3F:CE:31:45:4A:C6:E2:7E:AB:EA:4F:E5:3A:BB:54
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019CF5048C10CD0B0A608071C3B5B5D84425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          046F
Signing time:             Mon 16 Mar 2026 05:00:41 +0000
Manifest this update:     Mon 16 Mar 2026 05:00:41 +0000
Manifest next update:     Tue 17 Mar 2026 05:00:41 +0000
Files and hashes:         1: 405VjlxhXrjQ4rP2jz6Bhlhu0JY.roa (hash: 1ZF0JesEnveyURLla94PGW6Dtl2j68OqZQ/5OxigEPg=)
                          2: 47hJsASozRDqhuCU5AfmHwpSaeM.roa (hash: 3xuZAzw3KETa+bwqpnJGB1vDRHOPpTU+lO61TYMy18I=)
                          3: 4ItCS4CpknYhJnSH_o8-k-QnsNA.roa (hash: UbB2Anq4oy7M8ovVCyTEp9NJkA3MTyGN4S19tvEsX+w=)
                          4: 7xOGvUid5wgR_viXaJCs-_E41Dc.roa (hash: scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=)
                          5: CkraNljOqkeSekJdoAbtNjJUZxU.roa (hash: o4lFQ2jvZtAY9Qkbgut69KisZCd4iL38+vgSPqcwEK8=)
                          6: R6XMwFpcp2UJ16Ql8QFVP6Rp9ec.roa (hash: 0t3mzIeTNynKr8VMHod3xlGeVo/HmsNEjXTbtx+kp8Q=)
                          7: S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa (hash: JK/8ld2vkFnKBCJeP74SV+/N5f0fLHlt3L2e82GsaP4=)
                          8: VOMVh_thSJP-NnQuUuaBb_bDrKc.roa (hash: 8AIiAJoD9lmnykKpNP7JQo6/DYsUJUi1SaRT4mNDMo8=)
                          9: YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa (hash: Qq6ogFgDN4EOjnq+f9NCyesKbJbW/svA1UdP0OEqezc=)
                          10: aNNxwXM4RLWcgiojbyE7ayki1ds.roa (hash: aXD5NXX15GN3LeS7Ev04287erJQ10IqS/qwsHUN++xk=)
                          11: ig_VBpviDFPO2k9TLvdj_dWYYIw.roa (hash: WqPhG6OmFgIAQlSVATvrRDw6cG27/lSxwjfUp8XUsZY=)
                          12: jNIo4jwvqz1IelLRu8GvtQg4OJM.roa (hash: NZFhvQtEgj4btkeWoTCHHe2LlPOEV+ZMhUCQO45Afok=)
                          13: mGXcdc3NkS89VR-ehnhFaQ3OaKc.roa (hash: c2VXcpUEdl/AX8z8uYRh5IzdPmWTuNl2Mu8B+2l4c3E=)
                          14: o98NfeDK9CRHez9q6wLGlITiQ6w.roa (hash: knhKVoHKZ9gBPHJ7HZTVX8GdKMHhMGkjA+da43LunF0=)
                          15: oGtomrkF_2guRZRNgunVvIHZqKU.roa (hash: DPK5ezMhNr3aTF5oM42oIZQ2I35fhnQu6u3RGRoCSH0=)
                          16: oua9eFE_AJcMStF2oFe8vadhouw.roa (hash: ert4Il7JZA5XFW1lG5qvKbrDDFIMP2FcrLckySpeZUQ=)
                          17: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: X4Ldw6qUIe0ZcrfxaiIUIbUNT2djzKO/umKl8RX7mnw=)
                          18: s4doa2uCWT8wlElRSQYnyEhb-io.roa (hash: q2luMe75BiPCJy4TtTk1lDnNUZzVDgGLlpHp90uHA98=)
                          19: sAGamYEhbnHCnU7m8PZEoIKvEMY.roa (hash: kYoAzOYWIAnrZzFCKREU7TViuU3EVuBWBB8vGTGQyn4=)
                          20: sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa (hash: W/MQGBKbXxcpb0fgJqS7ufdVgzl0yD0EsDfR255WBk0=)
                          21: vp5TOmg5PSChbTXqEn839qbGjU4.roa (hash: 3ggocbcMjs8++XIEOhfa6mmEv0tRoM8xV2RU3tGAIwU=)
                          22: wZnB7Qjfda0ITgQ2HWutXpolCjU.roa (hash: MXsdTNO05d6fpADf9FEXYgiPgEmRVXldtdKNkmYeKJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f5:04:8c:10:cd:0b:0a:60:80:71:c3:b5:b5:d8:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Mar 16 05:00:41 2026 GMT
            Not After : Mar 17 05:00:41 2026 GMT
        Subject: CN=11938eabe13fce31454ac6e27eabea4fe53abb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:97:42:57:2d:55:c4:c5:72:2e:96:dc:09:
                    3e:7d:2a:c2:b3:e5:02:ad:47:f7:4a:09:d8:a6:3d:
                    9b:85:ee:ff:5b:a2:49:ef:e1:b0:f9:7e:cb:6d:f6:
                    46:94:8b:64:d0:cb:9b:30:e6:c9:f8:e4:e9:af:a1:
                    84:45:86:98:e4:b3:e0:d2:0b:68:28:ab:dc:cf:6e:
                    9b:99:ae:0d:45:4f:7f:bc:ea:40:44:f9:f9:02:c2:
                    7b:a9:80:ef:bc:b8:eb:3d:0f:e5:68:9f:f0:82:bf:
                    2b:3b:bb:57:06:3e:94:e9:39:61:4b:c6:27:6b:2f:
                    e1:b2:27:3d:26:09:47:77:7f:04:ff:a6:01:ae:3a:
                    12:fa:32:07:09:55:de:f2:8d:0d:dc:8d:ab:01:24:
                    c7:44:2a:60:57:9d:fa:71:db:8c:20:96:11:c4:5a:
                    d4:7c:75:06:0d:8d:e8:f0:55:20:34:f6:ae:e3:8e:
                    01:60:9f:d4:39:28:e7:a4:57:6c:8b:b2:bd:28:3a:
                    f9:6c:39:20:21:44:f3:e0:68:ee:e8:a5:21:2d:9c:
                    4c:6b:3a:59:d9:e5:55:e2:79:93:8a:8e:6a:bb:d2:
                    49:97:d1:e3:e7:3a:b9:7e:e6:0b:97:58:04:e9:e1:
                    bf:c6:6a:02:bb:02:43:86:c5:70:ee:6a:84:88:47:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:8E:AB:E1:3F:CE:31:45:4A:C6:E2:7E:AB:EA:4F:E5:3A:BB:54
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:84:df:64:7a:09:c9:54:d2:a1:49:91:27:e5:6e:a0:b9:
         fe:3b:78:3d:d3:ec:b0:aa:c2:a0:16:39:65:f3:f0:bd:59:73:
         e9:39:01:e3:db:1e:89:94:c5:d9:b5:58:8f:89:f6:d5:dc:b9:
         65:ef:c4:8c:34:a5:f6:1b:7a:46:37:86:a7:2a:ae:f3:84:d4:
         98:e2:97:e9:55:5b:e1:79:6a:95:27:cb:4c:13:bb:b5:af:bc:
         99:cb:76:e5:64:59:46:e0:9b:1b:24:fc:52:1c:bb:92:12:30:
         1a:d7:1f:97:0c:50:49:2f:2e:ea:1b:83:55:07:59:f0:36:25:
         aa:2e:f1:97:ac:28:1c:31:6e:a3:b9:d9:ad:37:79:83:09:12:
         ba:3b:ca:06:58:99:90:f2:87:03:4a:a7:97:2f:37:09:1f:05:
         b8:84:a0:da:9c:e9:77:c3:30:07:6f:e4:a6:2e:d0:83:0f:12:
         36:f5:e6:5e:7e:92:fd:22:8f:e2:56:b8:e2:b0:ae:8c:40:51:
         c2:6c:81:01:1c:0b:d6:a2:17:1f:85:59:f6:01:f6:a3:b4:41:
         e1:6d:f0:6d:2b:de:91:fc:74:ce:ce:62:d5:80:76:62:2a:fa:
         e8:11:a6:b5:42:97:85:de:29:10:f0:67:68:c2:7b:a8:2f:92:
         00:c8:e2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz1BIwQzQsKYIBxw7W12EQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwMzE2MDUwMDQxWhcNMjYwMzE3MDUwMDQxWjAzMTEwLwYDVQQD
EygxMTkzOGVhYmUxM2ZjZTMxNDU0YWM2ZTI3ZWFiZWE0ZmU1M2FiYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvOXQlctVcTFci6W3Ak+fSrCs+UC
rUf3SgnYpj2bhe7/W6JJ7+Gw+X7LbfZGlItk0MubMObJ+OTpr6GERYaY5LPg0gto
KKvcz26bma4NRU9/vOpARPn5AsJ7qYDvvLjrPQ/laJ/wgr8rO7tXBj6U6TlhS8Yn
ay/hsic9JglHd38E/6YBrjoS+jIHCVXe8o0N3I2rASTHRCpgV536cduMIJYRxFrU
fHUGDY3o8FUgNPau444BYJ/UOSjnpFdsi7K9KDr5bDkgIUTz4Gju6KUhLZxMazpZ
2eVV4nmTio5qu9JJl9Hj5zq5fuYLl1gE6eG/xmoCuwJDhsVw7mqEiEdgOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGTjqvhP84xRUrG4n6r6k/lOrtUMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbqE32R6
CclU0qFJkSflbqC5/jt4PdPssKrCoBY5ZfPwvVlz6TkB49seiZTF2bVYj4n21dy5
Ze/EjDSl9ht6RjeGpyqu84TUmOKX6VVb4XlqlSfLTBO7ta+8mct25WRZRuCbGyT8
Uhy7khIwGtcflwxQSS8u6huDVQdZ8DYlqi7xl6woHDFuo7nZrTd5gwkSujvKBliZ
kPKHA0qnly83CR8FuISg2pzpd8MwB2/kpi7Qgw8SNvXmXn6S/SKP4la44rCujEBR
wmyBARwL1qIXH4VZ9gH2o7RB4W3wbSvekfx0zs5i1YB2Yir66BGmtUKXhd4pEPBn
aMJ7qC+SAMjiEg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 15:11:49 2026 by rpki-client