Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          AZ9CbSjgcA/gp5YVlGY2FC1xpL4NSMM/UL6n1dmIBFo=
Subject key identifier:   14:3C:54:D3:FC:FC:64:26:0D:85:15:51:3B:8D:61:9F:78:CA:82:AB
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019CA41F881DC607F7F7C2B08CC5C0BEDD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0756
Signing time:             Sat 28 Feb 2026 12:00:55 +0000
Manifest this update:     Sat 28 Feb 2026 12:00:55 +0000
Manifest next update:     Sun 01 Mar 2026 12:00:55 +0000
Files and hashes:         1: 0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa (hash: nAX22x5LZPcFuwmumoiB6l6vDoqVxTHeyYCue4WKY+Y=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 7UOO4k4Zq2DJBIH7tWwLjr2nB-w.roa (hash: nTcrUbr5u/berqohC4ga7k6wljP1uQR96ROF4KN6bMQ=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa (hash: ftH8WXmCe7E5NBIPoJRYR7JenBvr3AQxF7w5t5Bh+jA=)
                          8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          9: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
                          10: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          11: IsBBsngSbH8D8ll-zq-eILoo78k.roa (hash: IhxGipNDNaViG3gc042e0dM0fgWzrITGBsZ2jJSSTNs=)
                          12: KQADPW4owxweNKfg2K59-o0aLv8.roa (hash: K4s/3hL7SRQbmE+iSSxyvalPmcaK7KFBbuUY95NP3Mg=)
                          13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          16: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          21: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
                          22: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          23: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 1LEiMkI4U016NBGUDWrxc213EdwvyPV+7mwqg1fEFUo=)
                          24: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          26: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          27: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a4:1f:88:1d:c6:07:f7:f7:c2:b0:8c:c5:c0:be:dd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Feb 28 12:00:55 2026 GMT
            Not After : Mar  1 12:00:55 2026 GMT
        Subject: CN=143c54d3fcfc64260d8515513b8d619f78ca82ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:49:c3:75:05:15:3d:d2:d9:b8:be:b6:59:
                    92:b4:81:50:4d:53:15:6f:3c:f3:45:30:ec:bd:d7:
                    5a:2e:cd:7e:7a:4b:e8:11:06:5e:05:d8:17:66:a8:
                    b8:84:e5:7b:6e:0b:b5:cb:08:af:64:84:ab:9a:73:
                    8d:c1:5b:71:10:af:0b:19:ea:f4:c8:cb:a0:5f:be:
                    c3:85:79:e9:ac:8f:e4:c9:9a:b5:ce:bd:15:47:14:
                    77:f8:3d:74:d3:5f:d4:60:46:b2:bc:9f:f8:85:37:
                    7a:eb:b2:16:e1:f5:a1:db:10:43:41:96:78:c9:57:
                    88:2d:2b:99:86:7f:ba:d0:e3:47:56:bb:11:5f:c9:
                    61:5c:97:e7:ba:63:86:9b:94:1c:e8:73:eb:0e:50:
                    54:32:a0:3f:86:89:a0:f6:69:d3:5a:09:7b:b7:c6:
                    5b:a2:9e:99:51:0b:f9:eb:95:a1:80:be:fa:80:af:
                    95:92:37:c4:8a:ba:6e:ed:ca:18:b9:bd:00:06:cc:
                    6f:cb:0a:48:3e:89:70:50:a7:9a:ab:53:ac:bc:88:
                    82:60:6d:3a:4e:1c:bd:a6:96:8c:41:92:4e:02:84:
                    bb:1c:90:56:59:ad:46:5b:b5:c5:87:8c:96:65:13:
                    66:c1:5e:b5:77:d8:73:1a:1b:3b:2d:5d:6f:46:ce:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:54:D3:FC:FC:64:26:0D:85:15:51:3B:8D:61:9F:78:CA:82:AB
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:19:9c:dd:a1:f4:9d:f2:3e:9d:86:67:73:d5:09:4d:55:
         db:d9:21:d8:15:f3:a2:ca:94:ec:92:5f:e6:1c:9c:92:89:69:
         f9:87:90:ab:65:2a:b5:96:42:8e:1c:8f:ff:1c:9c:92:72:c9:
         58:3f:42:09:c0:30:a9:d2:73:0e:41:4f:da:61:67:68:27:02:
         47:d6:6b:f6:41:de:9d:21:be:0b:20:b0:10:44:b2:e9:48:86:
         1f:bb:18:f0:19:7b:83:fe:48:11:2b:e8:23:44:7f:d5:a2:ac:
         80:1c:d4:5a:09:4b:ee:8d:3c:70:cb:a9:53:3e:db:dd:37:56:
         87:d2:19:75:88:a3:91:52:9c:ea:54:ca:15:7f:ea:8e:d7:cb:
         9c:23:87:0c:63:8f:d4:9a:aa:47:96:26:9f:a7:11:52:9f:bf:
         64:e4:d1:df:85:59:44:9a:52:95:4c:c3:19:c0:fa:22:00:d5:
         78:30:0c:96:dd:c2:4b:6e:d3:b8:c6:c9:90:35:4c:69:9a:c0:
         69:38:95:b0:0b:ed:ab:14:6e:b5:6b:5b:44:c6:4e:96:1a:0a:
         13:88:f3:93:af:4b:b4:7e:1f:46:af:ca:90:22:a3:f4:01:1c:
         f9:2c:93:9a:20:b5:e6:03:e9:55:22:eb:3d:64:84:96:26:90:
         54:3a:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 21:33:47 2026 by rpki-client