Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          OODcWHriHT1cooEhZ7ng/xdlvuRwjvsLC6azJvRwOUU=
Subject key identifier:   9F:91:A8:85:3C:57:62:B9:4F:A0:BD:DF:A0:C2:4B:48:0B:74:8D:C0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019E751CD7228304D4A3DA9E3B18416013C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0865
Signing time:             Fri 29 May 2026 19:01:24 +0000
Manifest this update:     Fri 29 May 2026 19:01:24 +0000
Manifest next update:     Sat 30 May 2026 19:01:24 +0000
Files and hashes:         1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          2: 3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa (hash: hZgmhd7rTwkIKlbrCrKQZLJjwcORc7pG4gvvo+Rcs3Q=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          10: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
                          11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          12: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          13: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          14: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
                          15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: wPAnpV8xcmLjqIq61xLLLh9yximY5tTROFwhD99rfac=)
                          17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
                          21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          22: x0w0SJYyBODLjpKGKi2OvtCd5BY.roa (hash: /oU3eS+zy0/9a9tpbxNFxOY3NXEHHhBLy521R4xGw7I=)
                          23: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:75:1c:d7:22:83:04:d4:a3:da:9e:3b:18:41:60:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: May 29 19:01:24 2026 GMT
            Not After : May 30 19:01:24 2026 GMT
        Subject: CN=9f91a8853c5762b94fa0bddfa0c24b480b748dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:9c:b0:61:28:dc:81:d0:75:eb:e3:ed:d1:
                    2e:6a:7e:1f:f4:de:d3:e0:79:5c:a8:d9:cb:74:ed:
                    66:af:90:e1:89:f0:e3:05:3c:e4:60:fc:c4:02:2c:
                    e2:12:4d:14:08:b8:27:ac:56:9e:0d:b8:ba:31:60:
                    59:1b:94:fb:d6:2d:ff:9a:13:b5:7b:2f:52:fa:9d:
                    f8:29:33:d3:99:f5:7d:63:05:f0:c5:e3:07:1b:f0:
                    90:41:97:5e:c8:87:54:00:67:21:8d:b6:21:5e:9c:
                    d3:b7:bd:e3:08:8d:a1:29:e2:e7:e1:a5:61:86:9e:
                    da:29:95:47:3f:a7:f8:9d:e6:c3:e4:1f:70:4c:d6:
                    ec:1d:e3:c1:1f:45:a4:9b:dc:07:83:a3:49:16:56:
                    9d:2d:3d:22:19:f9:e1:ab:47:f4:36:df:ee:07:d8:
                    59:1b:b0:97:20:8e:d6:fd:eb:f7:6b:46:45:c1:0c:
                    57:bf:5a:69:c2:20:93:a6:bb:77:4c:bb:9e:e3:33:
                    f9:08:a8:62:9f:9f:a5:d9:3e:a7:fd:04:96:75:cf:
                    50:85:33:48:d1:ae:68:8f:69:24:cc:a8:aa:ad:a8:
                    c6:5d:80:66:e0:36:19:73:4a:21:99:e1:5e:16:c8:
                    5e:fb:e9:19:32:a3:19:e5:f8:23:2a:23:24:ca:3f:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:A8:85:3C:57:62:B9:4F:A0:BD:DF:A0:C2:4B:48:0B:74:8D:C0
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:49:60:1d:ac:04:36:72:1f:cf:56:80:e3:42:ee:28:d0:8b:
         66:b7:b6:5a:84:10:e3:9d:0a:76:c9:31:64:6a:de:da:d0:89:
         b1:0a:6f:51:ab:3d:a3:ef:05:64:de:67:3f:c8:8d:cf:cc:ad:
         d8:2e:00:bf:0c:95:53:8f:ca:7b:9d:a6:82:b8:00:67:d5:df:
         2e:10:dd:d8:bd:c4:85:64:db:68:94:e0:b2:ae:5d:de:4e:3f:
         c1:4d:8e:74:99:c0:61:5a:97:b4:6f:92:f9:95:5a:fa:4e:44:
         a4:48:4a:a8:7c:ef:cb:6a:aa:64:a9:69:de:02:26:41:7b:bb:
         d2:ed:af:44:a2:7a:9c:14:1f:7e:37:75:3e:fa:a8:cb:8c:23:
         97:78:05:cf:c6:4b:25:04:9a:5b:2a:fb:62:89:14:06:1d:49:
         65:fa:a9:c6:ab:d3:ed:35:49:1e:a3:0e:d1:ac:88:db:73:9b:
         2a:27:60:1a:0e:cd:3f:01:70:69:18:2d:11:4a:c5:0d:fe:1d:
         52:4b:3f:8a:d6:3e:29:d7:f9:b1:de:96:c3:35:a1:62:6d:fc:
         a9:66:38:f1:75:77:e0:6c:09:cf:51:a2:7f:6b:73:a6:70:66:
         89:0e:ef:4c:cc:86:4b:ec:d3:de:95:c0:e7:e6:8e:ee:0d:37:
         7c:09:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:47:06 2026 by rpki-client