Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File:                     52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier:          UnCu7ehOo6VKPL0U4wTsNY1Y0Wmw6/8VG13m8SHmo/E=
Subject key identifier:   73:D9:D0:22:8A:51:15:0A:6F:D2:C5:73:7B:F1:3D:71:CD:96:F9:44
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019D0E568739FAECC3FB8E2DF4EF36BACB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number:          18C6
Signing time:             Sat 21 Mar 2026 03:00:44 +0000
Manifest this update:     Sat 21 Mar 2026 03:00:44 +0000
Manifest next update:     Sun 22 Mar 2026 03:00:44 +0000
Files and hashes:         1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
                          2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
                          3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
                          4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
                          5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: Yjb9+3avUyHFc4cTa9gL31jip7uYR3R3HjG26cXCED4=)
                          6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
                          7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
                          8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
                          9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
                          10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
                          11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
                          12: PG5gaW6QKtR5JzL6q5eBke0iYq0.roa (hash: CI7oeUgCJQOVE+/gNMHsZoUM76jLEBj4sJYAooPBpw4=)
                          13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
                          14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
                          15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
                          16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:56:87:39:fa:ec:c3:fb:8e:2d:f4:ef:36:ba:cb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Mar 21 03:00:44 2026 GMT
            Not After : Mar 22 03:00:44 2026 GMT
        Subject: CN=73d9d0228a51150a6fd2c5737bf13d71cd96f944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:5d:5e:d6:16:cf:3d:a4:4d:25:e6:b4:70:
                    85:d0:f9:f9:41:4e:56:17:d1:70:e0:a4:8e:1c:4b:
                    9a:69:77:a0:89:b0:19:7e:4b:b9:9d:ba:f9:8e:95:
                    6d:f2:ce:ee:1c:05:51:1d:0d:7e:ba:c6:ce:2a:13:
                    23:e9:45:18:37:69:bb:f4:07:72:3e:4e:0d:c9:61:
                    6d:12:c6:6f:9f:37:d9:21:59:c0:c3:33:c6:26:24:
                    bc:9d:56:33:45:8d:98:3b:7c:3f:4e:3d:fd:43:7e:
                    65:0f:5f:62:60:14:08:01:f4:83:3f:37:95:68:d4:
                    12:28:aa:ff:0c:a2:d9:05:2e:ec:05:59:26:60:4e:
                    a8:2a:19:13:dd:c8:5d:cb:25:f8:24:50:cd:aa:bc:
                    2f:1f:9e:46:8e:10:64:d6:cd:41:69:00:c5:88:95:
                    af:17:5d:8d:f1:4f:05:64:5b:d7:f1:3d:12:3b:59:
                    ec:d4:0a:9e:c0:18:1e:f2:6b:a7:be:35:9d:12:11:
                    a8:28:f2:9a:8a:30:fe:bb:df:b9:b9:57:26:b6:e8:
                    b9:f4:f1:b0:2b:0a:56:ff:1b:df:47:e6:bc:2a:1e:
                    d8:65:e8:28:19:5e:34:a2:90:43:37:bd:9a:08:14:
                    54:43:a5:f0:72:f6:dc:a0:99:25:8f:d7:0c:aa:17:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D9:D0:22:8A:51:15:0A:6F:D2:C5:73:7B:F1:3D:71:CD:96:F9:44
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:47:4b:03:eb:9f:b6:68:67:1a:cc:a9:c4:6e:94:e0:fb:
         2a:d3:04:bd:57:03:bc:6e:a0:8b:6e:c0:3e:c5:d6:83:2a:d8:
         56:59:4c:a0:ce:10:26:ac:85:31:93:af:52:a9:db:70:d4:f7:
         a8:45:f7:f7:f3:62:46:3b:19:38:96:15:fa:22:c1:50:f8:98:
         6b:03:5c:54:6a:c5:37:bc:f8:5a:54:76:54:0d:86:08:61:26:
         6e:99:d6:b7:9f:99:da:08:d3:42:8d:f9:09:4b:5d:65:b3:fd:
         c6:9a:9b:02:03:43:94:db:e8:89:85:80:c9:cf:5e:61:12:d9:
         67:67:97:f4:64:57:70:d5:48:73:1f:09:1a:be:5a:17:a3:65:
         df:69:64:d0:43:b4:d3:d2:75:49:9d:4b:fb:d7:55:c8:6d:4a:
         ee:09:26:83:23:dd:ee:c5:1f:7d:9d:9e:31:30:b5:9b:e3:d0:
         57:58:d0:92:04:01:81:ff:44:0d:e9:8f:84:e5:d1:2d:46:5e:
         98:f7:90:6e:33:29:7e:51:07:8b:a6:d1:a7:56:6d:f4:df:fb:
         44:96:98:84:63:87:04:57:62:3b:04:c5:c0:d8:58:4c:f4:f6:
         a7:57:d1:37:da:47:9a:21:6d:13:ab:22:63:2a:17:7f:8d:7e:
         4a:12:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:04:48 2026 by rpki-client