Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          FDq4TEEPQZOksfbBpYK4ZXFcwRPEnmb9TOgdUAHa2eo=
Subject key identifier:   A3:41:01:2B:FD:1B:A6:A1:D5:21:63:DB:8C:24:71:8B:97:16:FD:27
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019D419F3C0768FA3B8017D9B7D4AB63D928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          07B3
Signing time:             Tue 31 Mar 2026 02:00:47 +0000
Manifest this update:     Tue 31 Mar 2026 02:00:47 +0000
Manifest next update:     Wed 01 Apr 2026 02:00:47 +0000
Files and hashes:         1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          7: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
                          8: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          9: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=)
                          10: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          12: QM4eCkyDgUQUaNYsMa6hs_kAVcU.roa (hash: UAOfSMFm4LbZaTYwegWPfQuKvmKGvtB1Xco7PaWmufQ=)
                          13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          14: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
                          15: V30LAUIEMJuKBEQCGV3OZGmIB14.roa (hash: +8oZMvJe3e6QYtsCv+/2sJyZxT/rJgAo204q009TkGk=)
                          16: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          17: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          18: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
                          19: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          20: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: DtbylO0W3dAFvJHoVJMiC+n8CLhqK9EuApSe6i4XWZw=)
                          21: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          22: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          23: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Apr 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:41:9f:3c:07:68:fa:3b:80:17:d9:b7:d4:ab:63:d9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Mar 31 02:00:47 2026 GMT
            Not After : Apr  1 02:00:47 2026 GMT
        Subject: CN=a341012bfd1ba6a1d52163db8c24718b9716fd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:2a:73:fc:f9:22:12:6d:a9:a0:e4:40:a6:
                    da:7f:ab:90:fe:a4:c0:6b:12:ce:ab:62:43:c2:42:
                    50:9a:ea:92:8b:d0:d6:96:f7:a1:d5:72:88:54:b0:
                    4e:95:09:05:44:c4:c1:b5:da:c2:38:fa:aa:0b:eb:
                    da:7f:5f:a9:de:c3:e6:b9:b9:53:db:2e:60:f6:cd:
                    82:cf:d5:0f:32:84:56:4f:06:c8:21:3c:bb:b6:4f:
                    ad:cc:70:9d:e4:00:ba:c3:76:79:12:99:36:60:53:
                    4c:b3:83:bc:a1:61:1d:e7:b6:bb:0e:5a:7c:60:f9:
                    e8:63:7a:45:ea:19:0c:ff:80:1d:89:52:dd:9d:47:
                    f8:df:95:66:5d:83:3e:78:90:13:13:bc:8f:9d:46:
                    f1:13:b4:2f:63:38:da:39:19:37:ce:1a:2a:0f:3b:
                    4a:8f:e0:e4:99:6b:ec:eb:c1:b8:85:8f:b4:9d:22:
                    a6:60:08:aa:2e:a3:43:23:ef:f6:e6:ba:49:36:35:
                    19:67:ef:f9:59:2c:cb:61:0d:bb:dc:b1:56:79:e1:
                    bd:88:16:d1:f0:be:bb:20:ed:c3:f0:b5:2c:45:cb:
                    22:91:d6:73:e4:16:ce:6e:8c:0b:06:3b:90:65:78:
                    4a:f9:49:87:13:c5:8e:85:eb:e3:11:f8:54:37:57:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:01:2B:FD:1B:A6:A1:D5:21:63:DB:8C:24:71:8B:97:16:FD:27
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d0:09:7e:f0:90:28:06:6f:08:59:bb:cc:85:13:f8:50:59:
         99:a6:1b:58:89:89:e8:92:59:f4:21:df:d2:24:52:fe:18:50:
         30:3c:40:57:44:f9:00:be:85:95:b6:f5:d0:ac:43:e0:19:dd:
         fc:b1:4d:d0:c1:45:27:c4:69:54:f8:82:84:7a:f3:b5:39:24:
         70:65:a1:d0:c7:41:4b:75:d1:6c:6f:ba:f3:65:86:4b:0b:33:
         80:55:b9:d1:82:61:a3:42:f1:21:fd:d5:ce:df:2f:6d:38:3c:
         4d:f4:d4:0a:a4:e6:da:96:9b:e1:d3:bd:b3:80:eb:81:99:4b:
         46:d0:5d:6c:66:6e:52:fb:74:06:ba:5c:ce:23:30:2b:63:a0:
         14:28:0a:1a:f9:4d:9d:35:27:94:40:3d:cb:47:1c:56:1a:db:
         53:ee:81:e2:4c:45:d9:e3:f6:cf:2b:24:d4:28:d3:a8:86:27:
         e4:b5:dc:6d:79:42:9f:7c:bc:38:a5:20:c2:f6:86:8e:ac:15:
         86:8b:77:ac:b2:82:81:03:9c:c2:29:59:87:ea:c7:a6:44:75:
         ed:c1:4c:7c:1b:19:d8:dc:37:24:c0:00:15:03:fd:be:7c:5d:
         fb:67:e8:12:18:ca:c1:78:21:9f:10:f1:d8:3b:29:0f:54:67:
         22:1f:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 10:16:07 2026 by rpki-client