Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          oy9voUePYrcyAGljwe6ueiVQpvbOcXkTbB1vVKJ2o1Y=
Subject key identifier:   B2:22:E8:35:95:D7:9C:DB:EB:27:2D:71:A0:A9:E2:AD:C5:A5:07:0E
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       019CE410EED8A81D63909C8DB78B5651552F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          1459
Signing time:             Thu 12 Mar 2026 22:00:40 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:40 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:40 +0000
Files and hashes:         1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
                          2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
                          3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
                          4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
                          5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
                          6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 8Q6qAymSmZlKNYGVgJKzvnBKDW2Q2isyj4G4XOCe5iI=)
                          7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
                          8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
                          9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
                          10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
                          11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
                          12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
                          13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
                          14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
                          15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:ee:d8:a8:1d:63:90:9c:8d:b7:8b:56:51:55:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Mar 12 22:00:40 2026 GMT
            Not After : Mar 13 22:00:40 2026 GMT
        Subject: CN=b222e83595d79cdbeb272d71a0a9e2adc5a5070e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:59:14:43:5f:a5:82:30:ca:6c:2f:53:5d:
                    2c:22:b9:11:4c:6b:d1:cb:7b:0e:94:1a:5a:14:f9:
                    8b:3d:1c:5e:ee:f3:a4:4f:6f:f8:4f:d1:b7:53:1f:
                    dd:6c:ee:86:a4:8e:38:3c:f5:73:10:fe:5c:4e:af:
                    51:14:9a:0f:45:83:c5:75:95:c1:5f:f8:35:ea:bd:
                    30:8c:33:2f:8e:64:f0:3e:6f:29:e2:3a:6a:2b:79:
                    16:f1:fd:67:c0:2f:56:89:82:89:53:be:6d:0f:0b:
                    ab:d6:4b:fe:98:a3:ec:5d:c4:13:93:38:38:9f:45:
                    da:44:c3:32:be:a8:63:ae:ae:f3:84:06:40:dd:59:
                    a7:a2:37:f2:57:8f:64:70:c5:ef:e3:fa:a1:fb:3a:
                    91:19:5d:66:96:03:f3:5e:d4:0b:1b:ad:31:4e:b5:
                    be:a1:73:ac:0b:a3:3f:ef:ae:a1:50:e1:99:79:aa:
                    56:3a:04:4c:58:e7:21:47:fc:8a:3e:f3:ea:d1:dd:
                    4e:c3:d9:dc:4a:b5:00:58:22:58:d0:6e:c8:b8:28:
                    2c:ac:3d:41:03:20:3f:9e:b2:00:8a:58:19:3b:e3:
                    ac:4b:93:23:f3:4c:90:08:be:1e:8b:f3:7d:3f:60:
                    e2:26:8b:6e:9d:e1:b4:ee:fc:65:b5:fc:39:c6:a2:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:E8:35:95:D7:9C:DB:EB:27:2D:71:A0:A9:E2:AD:C5:A5:07:0E
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:05:a6:74:e4:17:a1:c1:78:7e:30:4b:fe:35:79:bf:7f:de:
         a7:92:c1:b3:b9:ae:2c:c6:df:95:f9:a7:cd:0e:0b:7b:68:78:
         c5:d8:ee:4e:43:f9:f2:0b:af:15:66:4f:4d:a6:4f:a2:53:f0:
         61:0c:ac:74:66:2d:a0:ce:26:4b:a3:6e:3c:f4:42:33:b4:a0:
         e4:37:d8:0b:fe:c7:61:79:26:b9:51:30:e8:4b:04:da:9e:0e:
         e9:5a:f5:db:0d:b7:ed:9a:8b:2a:bd:db:d2:9b:e9:f5:3e:3b:
         6e:1c:09:a7:86:46:2d:19:d6:37:eb:5f:6b:4a:87:89:9c:69:
         c4:94:57:9a:a6:4f:db:f8:6b:67:ab:06:ac:63:dd:9a:2d:d4:
         dd:f8:d5:be:fc:12:86:52:90:1e:e7:0d:9b:8d:cc:1f:c2:20:
         d9:59:e9:ff:a6:b4:9c:78:ab:3e:41:e5:39:5c:be:46:74:bb:
         af:5e:9f:a2:f6:57:d6:70:bf:d9:c5:1e:8a:23:68:4e:3e:70:
         b9:4c:db:19:4d:6d:52:84:9d:68:29:0c:cd:c5:db:75:58:96:
         3d:20:db:4a:d1:52:39:68:f1:34:2d:6e:87:3f:fd:c1:f8:ab:
         d1:ea:54:ea:09:52:37:74:cc:c5:c5:42:63:e0:49:44:5f:44:
         f5:fc:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:04:06 2026 by rpki-client