Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
File:                     gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft (raw, json)
Hash identifier:          +kvIU2swFtHCwXDgYYJUmDZD6YpSXiKrUSjIC/WQAwI=
Subject key identifier:   FC:DD:4D:9D:32:1E:F2:65:6E:84:92:B1:F2:AF:5F:19:19:E9:C8:71
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019CCA88697678B42306DFC899E5807CD2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
Manifest number:          14BC
Signing time:             Sat 07 Mar 2026 23:01:03 +0000
Manifest this update:     Sat 07 Mar 2026 23:01:03 +0000
Manifest next update:     Sun 08 Mar 2026 23:01:03 +0000
Files and hashes:         1: 1LvDD_BZRnvvGf1sfqTO_100fVU.roa (hash: 2Miol9a7wXh/xaI1zT3x2+RH8dQMQn9cHhv3Yai3Ws4=)
                          2: 2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa (hash: 2DEDWpJ7SE3vVfpuMvn1i8m6ipkkzB3x7E0ogUZSs8I=)
                          3: 2zlMgtzyu-Z3PQV3_FKqG0hE9Bo.roa (hash: nnMP95GAZ+DjD/mecEGCJ28xkRqwMeqhPltnEbq4eyw=)
                          4: 4AWwNlZeQ52vOp_U-usrOE2w0gM.roa (hash: lx/A7tX4mN00OfMd85cY90olYEHfTnrPnmp79+DZP8k=)
                          5: 59mU0fO4soeHmxbRTRLssCzw3tg.roa (hash: Y+1/kvZAd5yOQ/XjkG06quE+FPB8q+QatTd31h4BzXM=)
                          6: 9ApfopST5XecrXNX5W_Af-tjDIg.roa (hash: RHQdxjL8Bu7HEwKPvDMBrwq6IiTNX6h4q2f8yg/1TnY=)
                          7: AD6JtVgrEpex3YXg49I2S0j_9qc.roa (hash: 2NwmpEf9xxJ+wfu+ua+oOE/q4G+dxZtYDJ728w4u4tY=)
                          8: Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa (hash: FrTMQ7KbXoviPjsdmZdAMqS74Hi4YJDUcARzZd9rKkk=)
                          9: G2xdfzs3wQJv9zZFB0dIYE1wP40.roa (hash: Kb0gJzw5SmbhJGivaLvicWRV0EdJSpkk1X0zcVEuKm8=)
                          10: GPyCzr214BPkOg06tc6yh_rJxQ8.roa (hash: kdGhYWmwjCp7vCKV28oYmwJv0pozjJPvR7deJo2RH58=)
                          11: Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa (hash: 5BTj8NBQJZuTgfnofdntPmd8NUBWuOYk2ttRiYNiVbM=)
                          12: La0BhNU4VvmgRSm8ubnQEzR2vNo.roa (hash: 1zOaGF7LRM3VElFTI+Ny6gzAVWNGd19+/gg7PLSZJBk=)
                          13: UpjGE674s_k9Iv1gBCVazhi7CUc.roa (hash: 87ue4C4cllbiUGBoWnQPxG8trSEi9IkhaFFPVs+XbBs=)
                          14: X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa (hash: 6AsU1KzAtb8yktF/NBT5ZyVg0dsVVnFJnmDhHSx+xJw=)
                          15: X2iLay16x5QksfE9JjxyC7WVu-E.roa (hash: yT/oNJ7y4V01Lho2cqA94Tff1USrKA6sWC03Mms2Ges=)
                          16: eWXuhLZOzQSkVnakv6XDZbQm47k.roa (hash: 7jNn7zEJAzsZccVFp+ntzTl1B+U5CsfTk+0fguXEWaY=)
                          17: f1XxKSOwgfOmC8P37MUBgW8zIF0.roa (hash: 1s4OkHRdEaBC8RyIRnYuhJ9aFTUMNBJFdizTtu2a1lg=)
                          18: gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl (hash: +66hIVZzoIVh9OUhArfM+j+kMyDh7DZTp3MkswkYVgg=)
                          19: m6rJiLleGqSjvebHYwPobhqpRnI.roa (hash: ShgXTWxethW6+KMOzI+kaz0tURD514B5b269VfuNT/4=)
                          20: m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa (hash: raOzCXfv2gIYL0xQb0f/9ZqowcC2F2r8bzgcoks8gKQ=)
                          21: pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa (hash: 3074qQKnytP+H130uNFdcnZrdHZY2zcxKO2AmdzYhJM=)
                          22: rCHZqnKTLnkV-IRvPVyjvCMImcc.roa (hash: SGcPhuVDulI6n4Hi271QHa+uDx+5hY6mc1NVrLuOhF4=)
                          23: sQvPybtma9tvSwqB-AosSvIjwzY.roa (hash: tGlmhMYvSMpHbovXQ1w4dxEff+1tXSKUNI8zYaqHCcI=)
                          24: tnOvqbiqo6KcISm2Z92wnQLo7AA.roa (hash: xwsx+sSVYc3HTkslJcSA74X9wr4O1+vTlAG6cVjM+So=)
                          25: w07IS6VwbFT7C45jHwNSzVbwcR8.roa (hash: lDpW+bIbUHoYEkbMa43ojnpgVM2clYFDS8nSWRgzTl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:88:69:76:78:b4:23:06:df:c8:99:e5:80:7c:d2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar  7 23:01:03 2026 GMT
            Not After : Mar  8 23:01:03 2026 GMT
        Subject: CN=fcdd4d9d321ef2656e8492b1f2af5f1919e9c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:3d:79:72:bc:9b:f7:96:82:3e:28:3f:bb:
                    a0:cd:74:d7:d1:89:6a:92:26:61:b1:cd:1e:32:76:
                    b1:23:fd:6a:66:00:7b:66:18:18:23:a7:af:9c:6d:
                    da:61:d9:8f:dd:bb:65:19:7d:8b:08:80:60:51:5f:
                    3b:0c:35:85:6f:22:6e:19:ed:a2:8a:2a:51:a0:fa:
                    48:8c:a2:4b:7f:79:96:f7:b9:45:07:0e:53:b3:37:
                    a4:ac:0a:87:b3:4f:b0:7e:26:40:8c:f7:2d:70:6d:
                    1e:ad:8d:76:e6:87:94:8a:d9:0e:3d:83:cd:59:f1:
                    39:d3:c4:89:a5:04:9b:ac:30:da:41:52:ec:52:42:
                    19:81:4f:3c:8e:75:fa:4d:c1:c9:d8:2f:75:1a:3b:
                    70:b9:ba:c6:45:ac:df:91:ab:80:b1:39:bd:ff:b5:
                    5e:00:80:8a:da:30:de:82:8b:89:0d:37:f0:c3:f7:
                    88:c7:8d:20:6a:c6:91:eb:75:49:d0:d1:51:91:3f:
                    13:63:f6:40:b5:07:7f:f4:96:b5:f5:53:15:93:98:
                    9a:d9:f6:c4:b8:80:83:f7:8a:f0:9f:34:7c:8d:74:
                    c7:2f:10:04:16:8c:e4:a3:b4:37:c2:cc:8c:cf:3a:
                    be:ff:5c:64:6c:51:fa:2f:73:98:93:c5:af:22:44:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:4D:9D:32:1E:F2:65:6E:84:92:B1:F2:AF:5F:19:19:E9:C8:71
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:34:93:41:e6:c4:cd:70:9d:09:1b:d9:b4:c7:a4:ef:6e:
         af:5c:37:e7:de:ae:f7:3f:ea:10:63:e1:29:e5:9f:a9:de:96:
         7a:00:83:dd:27:a4:c4:62:8a:b8:8a:5b:be:89:15:bc:fe:30:
         73:74:93:bc:11:91:a4:b7:45:06:97:94:de:41:68:7d:63:94:
         8f:be:2c:74:f8:96:e9:89:0c:e4:6c:5e:bc:0f:45:48:ad:aa:
         49:bd:78:7e:7e:28:44:f6:0a:fb:74:4b:15:cf:ae:db:d0:71:
         c6:ec:0d:99:a2:5c:9c:24:8b:7c:5d:07:1b:99:d5:af:96:f4:
         03:ef:79:c1:86:e0:32:9e:e1:af:06:49:32:fa:2a:2e:a8:2b:
         ab:da:ad:21:58:a2:3e:43:30:54:18:18:6b:50:88:70:45:e2:
         f0:30:2e:3f:62:d1:00:f0:f9:22:4d:8c:1b:81:13:b3:3f:c8:
         4d:7d:7c:e6:97:d9:d1:37:6f:a2:48:f3:be:01:03:0f:93:61:
         74:70:98:6d:fe:ed:a2:c1:99:ac:8e:37:dd:c6:5e:a9:c2:8e:
         f6:7b:4a:c4:f2:22:b0:93:f8:9b:64:fa:36:ba:de:16:7c:63:
         89:64:d4:ef:61:14:92:e0:e7:20:00:df:6e:19:b8:e0:db:15:
         98:ca:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:07:30 2026 by rpki-client