Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          iceg1k12bPioyX0i0GzpS02IZe12oMCyTf6Pv0iEDyY=
Subject key identifier:   CB:17:4A:06:80:35:B8:C5:42:D2:B2:E5:9E:4E:A2:19:F3:7D:1A:17
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019DFF864D132C5CF7BDBC6876357F4DF467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0825
Signing time:             Wed 06 May 2026 23:01:24 +0000
Manifest this update:     Wed 06 May 2026 23:01:24 +0000
Manifest next update:     Thu 07 May 2026 23:01:24 +0000
Files and hashes:         1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
                          9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
                          10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
                          14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: pPkE6akI0oDHXGsr5eIpwZTAk8zUCa095LsoRe7OUnw=)
                          16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
                          21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=)
                          22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:86:4d:13:2c:5c:f7:bd:bc:68:76:35:7f:4d:f4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: May  6 23:01:24 2026 GMT
            Not After : May  7 23:01:24 2026 GMT
        Subject: CN=cb174a068035b8c542d2b2e59e4ea219f37d1a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cb:51:5b:03:02:72:0e:72:bb:d7:7d:0e:a5:
                    7c:73:20:9e:6f:9c:cc:ba:4d:0d:67:af:79:28:82:
                    9f:52:77:32:91:63:25:99:7b:eb:9e:bc:d7:d2:ad:
                    6d:0f:d8:2f:66:e7:bb:51:fc:1b:d5:e2:13:d3:f1:
                    c1:6d:2c:4a:dd:0f:ff:25:4d:d1:e1:51:38:fe:13:
                    e4:0e:9a:f4:54:ab:55:e6:25:cc:16:f6:1c:3e:31:
                    d8:5d:0f:db:8f:e9:f6:ad:02:db:a6:63:c0:01:2a:
                    3d:2a:9b:ae:50:9e:ad:78:4b:94:d2:af:e2:17:8d:
                    1e:10:62:5f:d3:17:06:6b:b9:ad:da:c4:27:37:53:
                    db:4a:56:c5:67:80:22:cf:9e:fe:86:2c:5f:7b:ea:
                    ea:a4:e2:81:7f:ea:d9:40:5b:f6:aa:86:e7:db:e6:
                    84:e2:e5:91:59:3c:ad:93:b8:7d:08:c1:27:b8:f2:
                    7d:b5:33:79:a3:ae:f2:fb:bc:b3:9b:f2:7b:f9:1f:
                    f7:a2:d2:c0:28:a2:9d:28:e1:4a:ba:2f:31:30:84:
                    cf:23:51:18:ee:e1:7b:57:f2:02:f1:93:1b:2f:50:
                    d8:38:f1:18:a7:59:5e:8d:83:78:79:4c:f5:81:90:
                    89:56:51:65:90:a5:d6:43:73:79:8a:8f:b2:0a:f5:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:17:4A:06:80:35:B8:C5:42:D2:B2:E5:9E:4E:A2:19:F3:7D:1A:17
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:57:c3:98:0b:08:3f:3c:67:03:c6:9e:cf:a3:86:bb:6c:e1:
         30:f5:a8:94:a9:21:9f:47:be:b7:07:61:5d:1a:3c:78:82:84:
         93:d9:aa:97:87:6b:2a:4e:5f:71:a4:86:33:bb:78:27:a2:c8:
         91:89:5d:f7:80:29:5a:c2:5d:c8:d6:ac:57:11:b7:02:5e:2a:
         9a:a2:0a:70:66:74:b3:2d:54:c6:84:52:b4:24:fc:07:90:fa:
         1d:1b:e3:55:f9:26:20:05:a5:e1:47:94:80:74:c7:4d:da:2c:
         c2:cd:6a:63:cc:e3:ca:12:9e:0f:79:6c:90:05:40:0f:ea:19:
         8c:df:0c:0a:50:15:41:6b:73:14:92:19:6e:0f:f0:a9:8c:5b:
         99:91:2c:65:98:fa:3a:99:01:7f:c0:b2:89:64:8b:ec:00:fb:
         b1:d1:07:7d:2f:ef:54:72:46:81:e4:89:bc:22:06:f4:bc:50:
         1d:7b:9c:2e:c8:98:9c:09:70:9a:a2:3d:3a:15:f0:4e:82:dc:
         4e:10:c0:8d:48:0b:05:56:dc:f9:db:0b:6a:b4:07:b3:44:c7:
         cb:15:44:fc:43:c4:36:9d:b4:51:0c:a8:a0:7e:2c:cb:62:50:
         69:c2:6d:bb:6a:38:8a:93:61:ca:e9:07:fa:30:4b:92:c8:28:
         6c:00:40:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/hk0TLFz3vbxodjV/TfRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNTA2MjMwMTI0WhcNMjYwNTA3MjMwMTI0WjAzMTEwLwYDVQQD
EyhjYjE3NGEwNjgwMzViOGM1NDJkMmIyZTU5ZTRlYTIxOWYzN2QxYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MtRWwMCcg5yu9d9DqV8cyCeb5zM
uk0NZ695KIKfUncykWMlmXvrnrzX0q1tD9gvZue7Ufwb1eIT0/HBbSxK3Q//JU3R
4VE4/hPkDpr0VKtV5iXMFvYcPjHYXQ/bj+n2rQLbpmPAASo9KpuuUJ6teEuU0q/i
F40eEGJf0xcGa7mt2sQnN1PbSlbFZ4Aiz57+hixfe+rqpOKBf+rZQFv2qobn2+aE
4uWRWTytk7h9CMEnuPJ9tTN5o67y+7yzm/J7+R/3otLAKKKdKOFKui8xMITPI1EY
7uF7V/IC8ZMbL1DYOPEYp1lejYN4eUz1gZCJVlFlkKXWQ3N5io+yCvU4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsXSgaANbjFQtKy5Z5OohnzfRoXMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1fDmAsI
PzxnA8aez6OGu2zhMPWolKkhn0e+twdhXRo8eIKEk9mql4drKk5fcaSGM7t4J6LI
kYld94ApWsJdyNasVxG3Al4qmqIKcGZ0sy1UxoRStCT8B5D6HRvjVfkmIAWl4UeU
gHTHTdosws1qY8zjyhKeD3lskAVAD+oZjN8MClAVQWtzFJIZbg/wqYxbmZEsZZj6
OpkBf8CyiWSL7AD7sdEHfS/vVHJGgeSJvCIG9LxQHXucLsiYnAlwmqI9OhXwToLc
ThDAjUgLBVbc+dsLarQHs0THyxVE/EPENp20UQyooH4sy2JQacJtu2o4ipNhyukH
+jBLksgobABAJw==
-----END CERTIFICATE-----
Generated at Thu May 7 06:04:31 2026 by rpki-client