Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          tkmt+WzNcj3yokgLyivskPphJInnHkgeVRIkCFXTGtE=
Subject key identifier:   06:B2:44:DE:0C:90:12:2A:52:6D:AB:59:8E:C3:B8:B1:D3:9C:74:61
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019D861417222B025DB8FB90ADB7E6C7CA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          07DC
Signing time:             Mon 13 Apr 2026 09:02:36 +0000
Manifest this update:     Mon 13 Apr 2026 09:02:36 +0000
Manifest next update:     Tue 14 Apr 2026 09:02:36 +0000
Files and hashes:         1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=)
                          4: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=)
                          5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
                          9: IWbk6zNSYB6WM0Y5Z6-XcPx7fTg.roa (hash: lD3YgQPEcJ+Lsldpe4bbaxPUzCjTvoc7u6pwJwRKzSw=)
                          10: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=)
                          11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: sjAZFXRDhbA1+GVLKAMLEd4PpH4r2EkrcYC4SxTj4vo=)
                          18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          19: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          21: qfYseX0GpDJ3nwbZkrDDY-_lcTQ.roa (hash: 9SV1r203DsffZLFBuKYeAWKCRAM7udUdpGOOPSGi5Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:86:14:17:22:2b:02:5d:b8:fb:90:ad:b7:e6:c7:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Apr 13 09:02:36 2026 GMT
            Not After : Apr 14 09:02:36 2026 GMT
        Subject: CN=06b244de0c90122a526dab598ec3b8b1d39c7461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:4e:2a:b4:5a:c6:3d:39:e6:ef:0a:60:37:
                    7a:fe:a3:f5:32:cb:f0:fc:6a:ca:5a:fc:9c:20:ec:
                    cc:7d:c9:5c:5d:3e:92:41:82:80:c2:b0:f8:48:e7:
                    69:75:c8:34:7e:32:57:36:14:88:da:6c:63:f0:bf:
                    6c:57:8d:f4:4f:9f:a7:af:7c:bd:bc:f6:85:2b:15:
                    31:05:d9:28:df:fc:4d:c2:d5:66:56:92:3e:73:30:
                    73:cd:2c:d5:56:1a:b2:5a:de:1c:15:52:14:82:11:
                    a9:b2:d9:19:cf:1e:4a:ab:ec:4c:03:1e:7e:de:e1:
                    08:d1:89:fa:91:9b:b9:fd:2a:e1:50:3b:d7:b0:43:
                    85:b6:66:01:3d:58:d7:b4:37:4b:4a:e8:90:43:77:
                    29:86:13:4b:68:20:da:c3:62:4d:72:f8:f0:ef:84:
                    79:b5:2d:f8:fc:73:99:d5:8b:55:c4:3a:18:a8:dd:
                    be:55:a4:c5:37:fb:b1:c0:f0:6c:27:e0:35:de:93:
                    25:6b:d0:ef:37:25:af:ee:86:20:4c:97:78:c8:40:
                    f9:92:d6:05:31:cb:15:13:6b:15:5f:06:92:b4:55:
                    f7:02:6e:bc:38:d5:c7:fc:f9:b8:95:37:c8:35:dc:
                    80:e9:f0:b8:df:74:aa:8d:7e:11:0e:01:10:93:bc:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:44:DE:0C:90:12:2A:52:6D:AB:59:8E:C3:B8:B1:D3:9C:74:61
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:90:74:cf:95:64:70:ee:da:d9:c6:eb:37:c8:df:ec:36:67:
         18:6e:ec:cd:72:4e:9e:48:9b:2b:c9:b7:7d:e7:92:6b:e2:4e:
         b1:f2:be:d5:a9:54:53:b7:92:1b:41:70:20:7c:87:2b:6f:33:
         c2:c6:01:c9:40:ed:cb:e9:10:e5:9f:be:71:c3:05:82:88:4f:
         c4:11:85:8e:5b:62:e1:29:19:48:6f:9d:ff:90:be:32:c9:04:
         3c:49:b4:fe:41:9d:45:86:4a:ab:f0:af:5e:ea:3d:16:45:36:
         03:f1:6c:8b:14:55:40:c0:62:55:74:09:33:75:26:8d:06:de:
         8c:fc:23:be:99:95:fe:71:ef:38:ad:72:d8:ed:89:1a:a4:3c:
         fa:95:6c:27:fc:f0:ad:4e:a2:94:b6:bd:a8:80:06:fe:71:81:
         20:47:f6:e7:80:a4:ba:d0:1f:05:12:40:f1:07:7c:12:0f:98:
         8d:b2:47:a3:40:3e:1d:fc:7c:95:ce:5e:30:18:9f:67:41:45:
         14:2b:0c:67:ae:c6:cd:8e:89:45:e7:f4:69:51:b9:22:1d:08:
         c8:1c:a4:63:61:11:14:61:84:fd:d7:9a:b4:0f:5e:57:09:43:
         c9:49:ba:b0:7a:09:b5:44:75:a9:98:bf:70:59:50:42:91:aa:
         ca:d7:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:49 2026 by rpki-client