Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          0M9WmWutjj/03lnQORSSM1T9GW9nnJ7dXZdgF3AlWsc=
Subject key identifier:   2F:37:B0:F4:D9:FF:7F:99:68:8A:26:D2:0D:C7:2B:C3:2A:2C:8E:B5
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019DF9BAF07CA05ACE3F92155DB8852E4E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0822
Signing time:             Tue 05 May 2026 20:01:11 +0000
Manifest this update:     Tue 05 May 2026 20:01:11 +0000
Manifest next update:     Wed 06 May 2026 20:01:11 +0000
Files and hashes:         1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
                          9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
                          10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
                          14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: XmocJCkiyR1gPd+mq/WpOZu6fC/pkbfCmn6v8L5DoFk=)
                          16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
                          21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=)
                          22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:ba:f0:7c:a0:5a:ce:3f:92:15:5d:b8:85:2e:4e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: May  5 20:01:11 2026 GMT
            Not After : May  6 20:01:11 2026 GMT
        Subject: CN=2f37b0f4d9ff7f99688a26d20dc72bc32a2c8eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:bb:41:58:a2:ab:2e:5c:72:ae:00:9d:49:
                    f5:38:12:40:22:17:41:93:c7:95:6e:e7:26:e4:e9:
                    00:5e:45:7d:a6:cd:b3:98:7c:85:00:a0:66:36:9a:
                    b1:31:e2:62:46:2c:38:4c:e5:dc:bb:22:36:d9:ad:
                    d0:fe:3c:95:da:fb:e7:7c:0c:3c:79:42:08:1b:e9:
                    3d:7e:01:9a:96:b7:80:67:ee:73:f2:21:eb:dd:bb:
                    c8:81:84:39:b2:e7:02:89:47:68:3b:50:7d:4e:98:
                    37:3a:4f:81:80:85:72:50:30:91:0b:21:35:ce:b8:
                    9f:ef:5e:29:35:3f:84:b2:75:c3:96:3f:dc:8c:e3:
                    ce:d2:fe:3d:37:0d:56:9a:5c:50:63:7d:af:b4:03:
                    ab:31:59:e4:ba:ef:48:b9:67:cc:fc:52:27:03:77:
                    66:58:7c:92:c0:79:cc:f3:e2:1e:19:33:f4:35:95:
                    e7:94:0f:ed:ed:f8:cc:0f:03:d4:0e:8b:93:1d:a7:
                    a1:61:bf:94:de:5e:08:f0:22:2c:89:16:dd:1f:1c:
                    fa:b2:86:35:c6:1f:d1:39:89:d3:b9:7d:25:34:8b:
                    1e:57:b4:0c:59:16:87:0d:6b:06:2d:52:03:f2:0a:
                    9e:d5:d8:ce:ce:3b:1c:73:00:11:0d:09:d5:4d:d9:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:B0:F4:D9:FF:7F:99:68:8A:26:D2:0D:C7:2B:C3:2A:2C:8E:B5
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:2a:1f:b6:35:72:3e:ad:e1:e5:e4:fb:1f:36:c2:94:a4:
         b2:84:91:16:c2:f7:24:cd:65:88:cd:23:da:38:67:9d:0c:b9:
         1d:f0:27:7f:6b:af:52:24:68:84:96:4d:95:77:97:56:b6:dc:
         72:39:90:25:c5:30:b6:6b:e3:af:b0:20:40:eb:0b:2d:00:11:
         e4:80:cb:fb:9c:98:54:25:a6:83:09:19:3e:78:33:16:15:0b:
         7a:c0:3a:8a:62:97:04:67:f3:cb:aa:b3:2c:81:a3:8b:96:bc:
         ed:38:59:a3:60:a4:3c:6b:fa:0a:bb:ac:c7:7e:35:c7:bb:48:
         65:93:90:f6:fb:82:f4:5b:ab:6a:e7:1e:3a:49:7f:72:18:77:
         b7:ef:7c:a6:04:f9:c0:f4:6f:17:79:46:6d:b1:23:7f:18:b1:
         0c:a6:c6:b0:6f:48:11:8c:49:23:5d:d9:b1:7f:90:06:df:ef:
         ff:da:5a:be:26:90:18:21:d8:0b:b5:d1:8f:0a:cd:09:84:fd:
         64:1c:a7:73:c4:1f:60:02:8b:2b:44:a4:af:e3:01:96:2d:b9:
         31:87:a2:cb:82:67:a9:5d:e2:e8:b2:91:71:15:7c:ea:21:bd:
         18:04:c1:00:74:ee:ba:93:f0:77:d0:e6:02:30:0c:c2:cc:65:
         a9:02:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:00:14 2026 by rpki-client