Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          mR5QjbjdMphNcVn4Cgq6iiB7p2FtNu7FSl0wlVXgl48=
Subject key identifier:   79:04:6C:EA:1D:3A:51:D9:9A:46:2E:4B:B7:95:96:BD:B9:F8:95:7B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       019CE3DA267D6ECFF372A0A5275AEA45A8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          19C7
Signing time:             Thu 12 Mar 2026 21:00:50 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:50 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:50 +0000
Files and hashes:         1: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
                          2: DDQuSRchUsTONQFDXN241i8makQ.roa (hash: 9Bakhxfn/ZSz8KdwGJaTawgcJWGxI/ZViAwYdC6JLp8=)
                          3: DZlCXtJccLP5CvH1IidVE75-VBU.roa (hash: GSRgLFliaDL+yaLYBTmTuTWDmh/1GTiBHJVvOOeVvME=)
                          4: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
                          5: Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa (hash: h/3w7HTeHzCXjM18AkUy2ZC4OLV5zp/8BEXLvTQ7pKs=)
                          6: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=)
                          7: J0hUsRCIsJxqBDRWowURVzD64X4.roa (hash: He+iX00zjq0nvLNeHU3AImzUnMzLPp3BFiM+8qRicMw=)
                          8: JsIHfHpPQrnekdFAPCzTMnYw164.roa (hash: UKlA4LZ7sAnV+fNaTjO88sVLgs0VMiuV7lCEsjs5P4E=)
                          9: MsSlk3WQ80ETXzZv-_xFc70cB4o.roa (hash: UXtaZaFGO7Pek5r3b1Q7L+7LS6p3gDK8oAU7N1F6XHk=)
                          10: Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa (hash: pgdQfCVii0tZJ2RyRo580T4O0JCC2mcRd1QEO6ECB2U=)
                          11: QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa (hash: bXd6j/Agfn0Rdepo1CUkaCAq5JVFgCLN7MB9bLtEyjg=)
                          12: QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa (hash: JLC6T3gloruu7glMw++YQSZ+CxmCxYVfu7O7HVXEONg=)
                          13: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=)
                          14: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
                          15: cmiAdI9ABY20r1DL-iK7mP_ABOQ.roa (hash: GVlILV9edBQcEnREaTXDYU83MwfyP0dZPoDbZHRuwLg=)
                          16: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=)
                          17: jiIhZii3j4Bqym72DQeyWI_m29Q.roa (hash: +SPdj+zBKoxWRkJS1U/YY6cllApr1BpaKaVGD0dmzRo=)
                          18: kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa (hash: ZgKOQA+PHq9i2ji6e+ts+3wSCdikkWfp1S4fKo671JU=)
                          19: kUL_GvYXS_94QSofdFlMNZdISv4.roa (hash: Mxp3nUXiwwphpooQtwG7jgdbNv/OEx4oNKjtwZp8Mv8=)
                          20: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=)
                          21: qmF9fRcumk7X2oJN5OkS-C8FSYI.roa (hash: kNN2YWGRgsIQUTPdz3mbK/nIsN9Wk7Pw3UUk2fdqFdo=)
                          22: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
                          23: s9XpH50IUJBDqGm5liaMw7s6Njs.roa (hash: 3HgZKcrh15EUGsnYKA6GPUieZc8k28J7WsTmBzdNTZs=)
                          24: sfIFa_zvIWFeaikhlC8p9lzyiak.roa (hash: JmdJqAk29N9Jb2v4hQ9hbp/VRCQfMA8RIGy2N4vYuEA=)
                          25: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
                          26: ulNfXAbUCn0EIzzAH-fg_QLGm7I.roa (hash: qj6bZX/kfBz2h0JS13N+LxoFybMNI2V0ojpMRowCNJQ=)
                          27: yVrNXqNEpQPVCD5-s0QzcdjfSt0.roa (hash: MPF8hnJnGT4tCUF+yYI/sK+YJjujYjlpvRajTbmYFa4=)
                          28: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: fxSs0BFGbo+dpZYdlfqDY7fOxKREgoXtNJKsUOTGOv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:26:7d:6e:cf:f3:72:a0:a5:27:5a:ea:45:a8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Mar 12 21:00:50 2026 GMT
            Not After : Mar 13 21:00:50 2026 GMT
        Subject: CN=79046cea1d3a51d99a462e4bb79596bdb9f8957b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:3c:37:be:d7:ea:12:c0:9c:da:38:61:b7:
                    7a:a1:c5:22:d8:1f:61:3d:bd:81:88:1a:6d:28:a8:
                    e3:e5:76:ae:8d:15:50:ae:28:4a:36:12:2e:74:59:
                    04:5c:22:12:6c:d8:5a:88:50:d6:89:85:cd:26:71:
                    81:b9:09:42:d9:1a:d3:9f:5d:c0:a0:21:59:19:1f:
                    80:c4:7c:78:ae:85:df:56:a4:3d:64:e8:3f:3b:90:
                    e3:ff:c5:f9:5d:5a:aa:18:eb:e5:3c:ff:04:80:4d:
                    2d:f9:18:4c:6e:10:4f:aa:e2:d1:47:72:e4:70:46:
                    e1:a2:7c:48:5b:63:cc:ac:1a:9a:db:30:d5:19:0b:
                    1d:86:82:b1:fb:ae:fd:94:b3:0e:6e:09:83:fa:75:
                    3f:75:4f:2a:35:87:c6:58:0e:cd:83:ad:94:ce:ba:
                    eb:e3:7d:bc:e6:61:99:76:1d:5e:82:12:6d:5c:d1:
                    eb:b7:9e:ef:8a:15:55:96:b1:63:47:dc:0f:26:1f:
                    ad:6f:4f:f7:be:4d:1a:6b:eb:e5:37:84:a6:a0:d9:
                    98:b4:0b:bc:fb:57:35:b6:31:75:21:ae:e7:8b:cb:
                    4c:61:66:e0:f8:10:bc:0e:4b:0e:46:7d:b7:9f:d4:
                    9e:39:39:91:35:de:d3:27:d1:95:38:1c:dd:64:6d:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:6C:EA:1D:3A:51:D9:9A:46:2E:4B:B7:95:96:BD:B9:F8:95:7B
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:5a:99:a5:f1:62:ee:8e:a7:c8:59:39:60:ed:30:c0:5f:
         97:09:a8:c6:89:0b:01:f1:70:f0:ea:ca:4a:09:02:c1:10:82:
         e3:55:ec:c6:fc:e2:3d:9a:14:c5:25:10:0e:71:b2:fa:b5:dc:
         5b:b8:f4:16:e9:73:77:77:5e:a9:ef:ba:56:7a:26:26:af:cc:
         fe:5c:cd:4a:7f:be:8c:bf:de:58:c2:c0:4e:84:c2:6a:df:66:
         09:0c:3a:e5:f8:eb:d8:19:25:37:0c:7a:d6:af:d3:2a:85:c2:
         40:76:b1:e1:d9:a0:0b:ea:d0:bc:ea:af:89:ad:e8:f9:f6:2f:
         7d:3e:96:e5:4d:48:9a:5f:ae:5f:bb:32:5f:fa:b1:6d:af:4b:
         44:54:e5:01:18:9b:1c:b1:c2:35:fd:51:20:72:9b:fa:aa:a3:
         f4:fa:d8:61:ac:69:e4:24:b2:12:52:3a:3e:22:df:ef:8e:e9:
         ab:f4:3e:cb:0c:46:9b:65:32:56:c5:21:b1:f3:0c:6a:68:9c:
         af:7e:65:20:4f:71:9b:69:bf:a5:cb:82:00:86:3d:e4:ce:2b:
         36:06:b9:35:bb:85:73:bf:38:0c:b6:a3:92:f3:e8:74:80:cb:
         4f:1d:00:23:7a:cf:a7:03:58:df:c4:1e:69:98:03:66:f2:59:
         b8:7b:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:17:32 2026 by rpki-client