Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          PKLV2qfrZx1gRzqITeyGaP6D7gSeq2iEeQc/ZXO9BxA=
Subject key identifier:   32:D1:5A:84:3E:8F:12:92:83:56:E0:56:E5:D8:95:A5:3D:D1:28:74
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019CE3A1B5A4136DC67DC4135607A749B4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          193E
Signing time:             Thu 12 Mar 2026 19:59:11 +0000
Manifest this update:     Thu 12 Mar 2026 19:59:11 +0000
Manifest next update:     Fri 13 Mar 2026 19:59:11 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
                          4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=)
                          5: 47Z6Ijl4snZDpzGTcBWb6wSz44U.roa (hash: PQ4OiK0LGaUldwwdRnQasOlGzvAQnY86J+hvKrPo2OI=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          8: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
                          9: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          10: MJaBHnPBPoiX26U_szdp7RvWUtQ.roa (hash: qFctKJR4yu14bDLmMuycFB3M33Jqb8VwTlP3l9MF2n4=)
                          11: PTBKRflkAumVIBovEGGJlyyGv3k.roa (hash: KI75S3E/iFJtrXREJKkhApzFrnT0bwWxTS/ly+wPgLA=)
                          12: PkTdOvHQpAoLE5-E62yI2NnbOcc.roa (hash: BRkGV2HSAKwuVpy88X5Qo6iT+ihU5FcatMIoPr6oe40=)
                          13: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          14: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          15: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: 63hllj2N6EygfElyUli51oNW5sGJTWzbrEMr9Pid8KQ=)
                          16: TepoQzb_OkN02aVrqQzItNSAQBw.roa (hash: sQa9lUNFIpLbzUpA5kRg5OnEndSxlkazblBiFu60bkw=)
                          17: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          18: ZMw3cABI3jeCzMfqSI0aApS6QDU.roa (hash: 0yaPTYckWtuZprVw19TlXaMtQC9ymP6ykZcR1615rtk=)
                          19: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          20: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          21: iAkNETtom0gkiWbj0z3vKsuDztA.roa (hash: /d5VSCGYwuzOzlm2Sjfqn5/rynmzTJuOmpsqSFsv5AM=)
                          22: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=)
                          23: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=)
                          24: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=)
                          25: pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa (hash: 19H5Cq04EoIbtLtQ6pQZI4NLRRYo9hTA+ljxOZbOlF4=)
                          26: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          27: u_iH0hsKvHsDEAkIEjMt-T_ishQ.roa (hash: U+qkCSRfc7NN/+azevaN2Q42WuEXfLc0ceYNbCHDC90=)
                          28: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a1:b5:a4:13:6d:c6:7d:c4:13:56:07:a7:49:b4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Mar 12 19:59:11 2026 GMT
            Not After : Mar 13 19:59:11 2026 GMT
        Subject: CN=32d15a843e8f12928356e056e5d895a53dd12874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:1a:d3:3d:4f:8f:78:a8:9c:46:f0:bf:97:
                    cd:84:67:ec:a6:60:8d:71:bb:37:bc:ba:72:66:e6:
                    ed:86:98:c4:16:4c:f8:76:86:18:45:28:3b:52:68:
                    5b:8e:62:d6:bb:06:53:93:87:1d:19:1f:d0:41:23:
                    85:b7:50:02:f8:9e:a9:ab:97:80:09:69:92:0a:85:
                    8c:c0:c6:a9:fd:bb:19:7f:fc:1f:63:c3:0c:fb:e2:
                    21:10:a0:4d:6e:6f:7c:cd:17:c0:13:76:87:dd:6d:
                    54:4e:44:6c:5f:cd:cc:4a:cc:ad:49:dd:95:27:48:
                    f6:b5:d3:6a:7c:36:8e:a2:06:46:8c:ca:0f:be:0d:
                    05:ef:e1:25:64:c0:8a:74:db:fe:48:96:25:87:ad:
                    77:3f:27:bb:b9:73:de:19:9d:87:f4:95:0a:66:42:
                    ab:d9:ed:b3:9c:3c:6a:a1:39:ff:ae:48:0f:a1:20:
                    df:83:35:1e:d6:e9:aa:29:5a:7f:85:dc:6a:23:6c:
                    28:7b:b7:d6:aa:02:9f:95:b7:0e:3d:b7:b0:79:f8:
                    71:62:51:c9:74:3f:98:45:16:2c:ce:35:20:cc:82:
                    1e:31:1e:ad:0e:7f:a5:ca:51:60:1d:5b:b5:3d:7f:
                    c9:68:17:e4:e4:b3:cb:c2:ea:01:4d:24:87:ac:d8:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D1:5A:84:3E:8F:12:92:83:56:E0:56:E5:D8:95:A5:3D:D1:28:74
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:52:6e:76:ac:c2:64:51:60:67:45:91:1b:b4:01:60:11:de:
         65:1b:4d:c0:72:da:54:75:e8:ae:1a:da:ec:09:f1:25:5e:ba:
         b4:65:98:4f:78:66:0f:2b:2f:d0:10:9d:6c:1d:8f:b5:18:61:
         9a:2a:0a:f6:cf:84:2f:36:67:69:63:d3:97:8f:56:49:23:11:
         93:6b:11:7f:e6:85:6c:23:8f:2d:4f:4d:68:36:21:d3:33:ca:
         fe:36:c5:bf:ad:c2:01:ce:78:2b:8a:48:78:98:9e:8f:e7:53:
         48:a9:d0:5c:ed:91:d0:ae:a4:5b:72:0e:0b:bd:d6:cd:81:e3:
         1a:ca:10:52:2d:51:db:ad:37:54:3e:34:6c:a2:20:82:88:b6:
         e9:7d:d7:56:a7:0b:2d:46:9b:a3:c3:bd:1d:5b:cf:56:52:6c:
         13:6e:4b:2b:44:c9:1f:19:12:1b:6b:da:06:30:ef:c3:e3:e5:
         99:24:11:4a:87:f0:d5:e4:93:4c:56:22:22:6e:7c:8d:ba:53:
         1a:4e:84:ec:e3:8a:ec:9f:55:ad:59:e5:6c:6d:a3:d0:60:b8:
         d1:27:b9:ea:6e:ef:4c:49:c2:8e:db:10:b1:74:53:21:01:2f:
         cb:df:d4:d9:a4:b7:85:12:f3:b8:ad:36:25:af:9c:94:c5:88:
         fd:4b:3f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjobWkE23GfcQTVgenSbTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwMzEyMTk1OTExWhcNMjYwMzEzMTk1OTExWjAzMTEwLwYDVQQD
EygzMmQxNWE4NDNlOGYxMjkyODM1NmUwNTZlNWQ4OTVhNTNkZDEyODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquEa0z1Pj3ionEbwv5fNhGfspmCN
cbs3vLpyZubthpjEFkz4doYYRSg7UmhbjmLWuwZTk4cdGR/QQSOFt1AC+J6pq5eA
CWmSCoWMwMap/bsZf/wfY8MM++IhEKBNbm98zRfAE3aH3W1UTkRsX83MSsytSd2V
J0j2tdNqfDaOogZGjMoPvg0F7+ElZMCKdNv+SJYlh613Pye7uXPeGZ2H9JUKZkKr
2e2znDxqoTn/rkgPoSDfgzUe1umqKVp/hdxqI2woe7fWqgKflbcOPbewefhxYlHJ
dD+YRRYszjUgzIIeMR6tDn+lylFgHVu1PX/JaBfk5LPLwuoBTSSHrNgUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLRWoQ+jxKSg1bgVuXYlaU90Sh0MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVJudqzC
ZFFgZ0WRG7QBYBHeZRtNwHLaVHXorhra7AnxJV66tGWYT3hmDysv0BCdbB2PtRhh
mioK9s+ELzZnaWPTl49WSSMRk2sRf+aFbCOPLU9NaDYh0zPK/jbFv63CAc54K4pI
eJiej+dTSKnQXO2R0K6kW3IOC73WzYHjGsoQUi1R2603VD40bKIggoi26X3XVqcL
LUabo8O9HVvPVlJsE25LK0TJHxkSG2vaBjDvw+PlmSQRSofw1eSTTFYiIm58jbpT
Gk6E7OOK7J9VrVnlbG2j0GC40Se56m7vTEnCjtsQsXRTIQEvy9/U2aS3hRLzuK02
Ja+clMWI/Us/+w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:16:11 2026 by rpki-client