Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          FD9fjioD3fd+fiGC5J+gzIlD8KqD2apaPa0CCUSvWJQ=
Subject key identifier:   C8:48:10:D9:D9:74:37:71:9E:0F:73:77:B1:8A:FF:A0:29:61:E5:08
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019CC4F418F760A40C81E08E816566426102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          9B
Signing time:             Fri 06 Mar 2026 21:00:57 +0000
Manifest this update:     Fri 06 Mar 2026 21:00:57 +0000
Manifest next update:     Sat 07 Mar 2026 21:00:57 +0000
Files and hashes:         1: 1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa (hash: iuLlbVe+JPEeIey84sRvj5Y7gApk0UlSqaLt4U2QnZI=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          4: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          5: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: ApQrBW1MupjmqFarR14QuPlptqAlND+kUhOJkI9wuLg=)
                          6: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          7: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          8: MjH7rYvcoIBIIXOCcWnHyYzaWGU.roa (hash: A7+Nj4h3vWqBFhVvrrR+Y6W3dHM5p+6Sf560u65fizo=)
                          9: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=)
                          10: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          11: USubDOC3xDx87K_ZTK3Z8oHsnzk.roa (hash: 9vyXWFhXgTXFACbWChjUbuv0OPwPRlxioKYF+gj4N1w=)
                          12: VmanDZNFkgEbOQupfK0om4KXePI.roa (hash: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=)
                          13: _6ixJuOyBdDWsrg7PfndJ2TSGK0.roa (hash: F0rHZIZZ2rx/QrDQPKEtB+najpsBYGjbpBhGiX4HEZU=)
                          14: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          15: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          16: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          17: oEzd70GBc89wuPrghjleeGdo8sA.roa (hash: XTx9ORtlLm/ABttZFmHynm9a1AsxWcX+O0c3olAJQ7A=)
                          18: pXQUKLQGLhckSIvpsa2VL54Uxa4.roa (hash: pxVzwowTxbXt7CA8ylAQ8NwPwJGfKJGc5L84cDe95WA=)
                          19: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=)
                          20: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:f4:18:f7:60:a4:0c:81:e0:8e:81:65:66:42:61:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Mar  6 21:00:57 2026 GMT
            Not After : Mar  7 21:00:57 2026 GMT
        Subject: CN=c84810d9d97437719e0f7377b18affa02961e508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:11:ad:0f:ba:04:5d:c1:27:30:d1:e1:e9:
                    07:1f:47:ee:1e:85:03:72:b3:eb:4f:ba:4e:08:4e:
                    5f:8f:14:61:3d:a1:c3:e8:19:0a:fc:32:54:ee:6b:
                    4d:8f:09:32:44:6b:c2:35:37:3f:60:51:20:8c:a4:
                    e0:e0:28:2a:12:c8:76:af:37:33:3d:4c:52:85:be:
                    ae:28:58:56:7a:59:d4:a5:e9:d9:bc:23:ec:c5:c8:
                    ab:ec:22:41:45:74:1f:ca:3c:f3:c3:a2:30:32:34:
                    b3:44:b7:05:5c:0b:de:e6:69:59:ec:ff:4d:99:a2:
                    05:4a:98:b7:06:dc:6d:01:64:31:96:da:ce:c1:6c:
                    15:83:0a:8a:30:f6:39:aa:a7:48:55:bf:84:de:1e:
                    11:76:35:80:36:46:68:65:8c:a8:60:87:73:36:be:
                    5d:99:c3:52:05:6f:64:ba:bb:5a:91:47:33:90:83:
                    b2:ff:b1:c4:6c:16:9a:69:65:40:bf:9c:d3:e4:c4:
                    37:e1:00:c8:d6:0f:23:30:e3:5b:a1:5d:eb:08:6c:
                    1d:31:34:1c:ac:e7:9f:f9:9c:a2:ff:97:96:03:3c:
                    db:1d:12:67:80:1f:df:91:61:2c:45:8f:5e:7f:47:
                    20:9f:8f:59:10:c3:4d:f1:08:22:ae:d5:28:ad:b9:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:48:10:D9:D9:74:37:71:9E:0F:73:77:B1:8A:FF:A0:29:61:E5:08
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:09:50:ba:75:b6:84:40:a1:c0:46:79:d2:35:56:fa:67:f2:
         d3:79:dd:48:3e:1a:dc:e1:53:41:09:f2:0d:a2:35:20:6b:0a:
         a8:e2:e9:cb:60:bb:b4:d1:ba:62:2f:55:7d:f1:3d:a3:70:0b:
         ec:46:aa:bb:df:7b:c8:99:6d:29:c6:29:67:c4:f4:95:c1:52:
         65:75:2e:d2:6a:b4:81:0a:49:ac:61:3a:f3:b4:49:40:1e:14:
         ea:31:c7:17:db:8e:07:dd:25:05:91:ab:ed:6e:1e:2c:90:56:
         6c:a9:c2:11:bd:a8:d7:a6:41:c1:32:40:27:d8:ab:95:43:64:
         64:ef:f6:90:e6:0f:c2:0b:18:78:a4:29:e7:24:4c:e9:3f:03:
         13:93:50:fe:7d:bb:fa:22:65:17:bd:55:96:2d:70:9e:a3:4c:
         f0:44:99:6b:50:34:26:12:9d:79:fe:d2:b7:22:db:e3:8f:a5:
         8b:d3:df:81:a0:65:0b:cf:c1:a4:59:ae:09:e9:a0:9f:ca:2e:
         3b:ff:b3:7e:8a:e3:9d:78:8f:63:af:f9:c4:0a:14:d6:89:de:
         01:81:98:22:45:47:47:58:56:be:69:87:2b:0d:18:91:e1:f3:
         96:3b:ee:9e:33:49:23:66:01:76:7b:8f:6f:82:9c:5d:7c:7e:
         12:c6:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:27:10 2026 by rpki-client