Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          Lx+tPoIaV4XRHmNy9ptmI/p8LdvM9YHhDrzgNAsKJiQ=
Subject key identifier:   69:26:7F:B7:B1:52:8B:4B:D8:05:B6:7D:E4:02:2D:9B:58:E8:B3:E8
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019D2E0A43628B0F2EB8142BFB347F21BA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          07A8
Signing time:             Fri 27 Mar 2026 06:45:17 +0000
Manifest this update:     Fri 27 Mar 2026 06:45:17 +0000
Manifest next update:     Sat 28 Mar 2026 06:45:17 +0000
Files and hashes:         1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
                          2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
                          7: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          8: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=)
                          9: K5-HQlYAX4oy7vAiFIPQp2y58OE.roa (hash: KMjrZv68U4KYEtaNT6Lm6jMdckEPHP0Z26nnJoe9+oA=)
                          10: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          12: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          13: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
                          14: V30LAUIEMJuKBEQCGV3OZGmIB14.roa (hash: +8oZMvJe3e6QYtsCv+/2sJyZxT/rJgAo204q009TkGk=)
                          15: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          16: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          17: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
                          18: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          19: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 4s0rlCTLAj+xJB5VyyKHt/Gi2Z0srOCHlBDpVuxFsu8=)
                          20: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          21: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          22: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:0a:43:62:8b:0f:2e:b8:14:2b:fb:34:7f:21:ba:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Mar 27 06:45:17 2026 GMT
            Not After : Mar 28 06:45:17 2026 GMT
        Subject: CN=69267fb7b1528b4bd805b67de4022d9b58e8b3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:cd:77:99:60:17:45:df:27:49:a4:9c:b3:
                    83:40:30:6f:fc:7e:b4:c5:3a:78:3a:02:e4:5c:84:
                    a1:f7:f8:87:6e:06:52:10:4b:28:52:b2:c8:c9:e2:
                    07:d5:74:1b:ff:24:d6:18:d3:56:c4:39:ae:8f:09:
                    f6:a8:cb:8c:d7:a4:d0:73:8e:5f:68:78:9c:b8:82:
                    d8:24:0f:34:a0:16:b9:08:d1:66:99:6b:c6:c5:21:
                    42:38:c2:67:a2:29:35:b5:f3:e8:56:0a:df:ae:2a:
                    3d:2b:48:e0:c9:e5:17:86:89:9f:63:19:7a:be:e9:
                    f3:d3:2f:da:45:6e:f5:81:b3:bf:c2:7b:0c:c4:b6:
                    82:c4:1a:6a:dd:69:a5:21:9e:54:46:8b:a2:81:89:
                    c5:ed:aa:a9:0b:72:c7:6f:bf:4e:e5:ab:91:d1:c2:
                    fd:27:d2:61:ac:47:9c:d9:dc:c4:7c:f3:fd:2e:24:
                    04:45:da:d1:eb:b9:89:56:ed:70:92:8a:5d:64:d3:
                    cf:39:66:86:c0:45:dd:c5:f1:8a:5e:f3:54:a4:8d:
                    81:14:07:c1:18:27:aa:ed:c3:64:9a:e1:93:1b:55:
                    c1:6e:39:73:45:c3:fc:64:d0:e6:59:34:a6:79:a3:
                    92:ec:8a:8d:e0:17:bb:1d:e9:5f:d9:5e:d1:ba:c8:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:7F:B7:B1:52:8B:4B:D8:05:B6:7D:E4:02:2D:9B:58:E8:B3:E8
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:c0:0f:fa:ff:63:aa:9f:4d:2d:80:cb:8d:e0:89:d7:5a:
         90:7c:ed:5c:e9:3d:d7:57:f8:a3:72:81:c0:af:39:75:f7:88:
         31:19:2d:ef:d7:02:d8:37:80:da:6e:67:88:fe:3d:11:45:cd:
         2f:87:85:dd:f3:3f:8d:5c:ea:29:ca:30:f1:54:db:7a:38:a9:
         3a:b3:6c:e9:c4:13:eb:a7:ac:51:b6:23:dc:a5:c3:4c:33:19:
         da:a6:f9:fb:c7:8b:8c:c7:2d:53:25:e7:97:f3:c8:73:df:04:
         39:53:6e:1c:e7:f6:7d:d2:1d:23:dd:f4:33:c2:6e:63:87:11:
         97:1f:4a:f8:b9:8c:e7:2c:8b:eb:84:cb:47:36:a2:e2:d5:68:
         b8:75:bd:b6:b3:13:99:12:ee:8b:62:4b:74:10:72:dc:bd:ed:
         a3:fd:c0:43:22:c3:a6:66:bd:c9:e5:9c:d1:2a:1a:ba:e6:c1:
         29:a0:6a:51:1b:4f:1e:6b:ea:c3:b8:1d:35:d7:06:fa:64:57:
         84:14:09:11:96:fc:9f:2c:93:66:b8:02:c8:7b:73:13:67:10:
         af:58:e3:4a:16:e0:f5:f0:57:89:ae:b8:09:9b:f0:fb:52:58:
         76:ee:8f:92:3d:5a:57:9f:aa:d0:94:51:e4:8f:12:b8:8f:e7:
         97:4f:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 14:51:12 2026 by rpki-client