Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          JRabjXs+kn/EB7Ne9vj6flxxLoo7FPIurIepybug2Ag=
Subject key identifier:   41:2F:61:AF:46:F8:15:04:17:4A:97:1D:16:BE:40:35:1D:C5:BF:C9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019E98BAA549418B0573D788B9646094394C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0879
Signing time:             Fri 05 Jun 2026 17:00:29 +0000
Manifest this update:     Fri 05 Jun 2026 17:00:29 +0000
Manifest next update:     Sat 06 Jun 2026 17:00:29 +0000
Files and hashes:         1: 0-M2wHYVJo6WO_dOM_FrtWqv32g.roa (hash: Syur9QoTGjJsrlDvPR/2jwpPclrs3Zqpe7DQd8jDoYk=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: Oko1YP5tpeDrzsuiNd9bZ5in6Bs.roa (hash: LJirmuvF99O8P/5zMgSqW3l3fmH04iW0l/pxAf/sz1w=)
                          10: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          11: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
                          12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: fPnisVCGbGr7ojR4bJ5ztL12I9MvyiPeyY0FrXFTuN0=)
                          18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          21: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
                          22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          23: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:ba:a5:49:41:8b:05:73:d7:88:b9:64:60:94:39:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jun  5 17:00:29 2026 GMT
            Not After : Jun  6 17:00:29 2026 GMT
        Subject: CN=412f61af46f81504174a971d16be40351dc5bfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:ac:05:9d:46:09:ff:f9:04:14:a4:a4:ef:
                    37:49:84:2b:6e:60:e7:79:72:8b:10:cc:b4:eb:ee:
                    42:7d:7d:9f:5e:f8:fb:8d:23:94:a8:dd:a4:5d:92:
                    38:de:6c:2e:c3:f3:a7:4e:e6:aa:f4:40:24:e7:43:
                    32:fa:e8:0c:f5:a6:e7:3a:72:73:71:74:20:ce:8c:
                    e9:d0:e5:92:74:4d:61:2e:54:c4:57:1d:eb:a2:f2:
                    69:c8:1b:23:22:c9:1f:9a:14:8b:a6:69:63:6c:10:
                    68:ef:37:0e:28:3d:08:bc:a3:1c:1b:08:c6:16:ef:
                    ed:02:25:f7:c2:88:60:83:7b:35:dd:32:71:35:fa:
                    f6:ae:89:18:26:3b:7e:c4:6b:33:24:25:60:4b:4e:
                    ad:ec:19:98:14:71:e6:af:28:f0:7b:38:55:60:d9:
                    f3:a2:ad:6b:34:a8:99:b9:27:b1:56:8c:3c:35:0e:
                    82:b6:fa:7a:72:b9:8c:86:b7:35:f5:f8:bb:11:81:
                    3c:a3:9a:88:fd:ac:73:fd:e7:b2:34:31:6c:ad:41:
                    eb:5a:7f:eb:90:1b:7e:f0:f8:db:4c:30:ce:29:9f:
                    d0:a0:38:15:b5:01:de:5f:86:d5:e3:94:30:98:e3:
                    e1:dc:d5:9c:9a:2d:5c:11:f5:e3:ed:0d:4b:5a:89:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:61:AF:46:F8:15:04:17:4A:97:1D:16:BE:40:35:1D:C5:BF:C9
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:bd:ea:5e:e2:8a:5f:d6:ce:d3:6f:f5:0e:af:d5:15:dd:
         35:6d:9b:83:cd:ee:c8:1a:85:a6:a0:f6:4c:e7:48:1f:96:7c:
         cd:c1:9b:96:b8:c0:86:80:92:1e:b6:a8:43:57:85:6a:28:1a:
         48:99:db:3e:71:4a:30:0d:fb:f7:21:c9:21:08:3d:10:45:c6:
         2f:e0:c9:e2:c7:71:ee:40:0f:da:3c:e9:49:c4:73:c1:c6:ce:
         58:23:6b:69:87:09:37:7d:ba:99:e3:00:29:a4:c2:1f:76:1d:
         34:f1:8c:3d:08:63:50:8b:2e:ac:92:39:77:1f:58:6e:b6:c3:
         01:95:f6:e3:77:77:e7:35:3a:9e:c1:8a:1d:78:bc:fe:10:ce:
         6e:a4:aa:61:36:06:f0:7c:38:d6:bc:ee:ec:13:8d:e7:13:f5:
         68:9e:90:70:29:d0:ee:f7:e1:38:6c:f0:6b:9e:8c:38:a3:ad:
         c2:76:86:cd:a2:e1:a3:15:87:16:b2:a8:92:85:72:35:78:6a:
         00:27:ce:5a:a0:99:54:63:25:ac:71:24:22:81:35:72:04:29:
         0c:a9:c8:9c:89:ef:3c:ec:a4:73:98:00:12:f4:b6:d7:f4:98:
         81:82:04:e5:fb:b7:f1:a2:65:a7:2e:b1:5d:0c:98:2c:e4:7b:
         cc:5b:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:51:10 2026 by rpki-client