Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          a8eP/pcyE2oEnCNTkminGMzn0YdTmw/dZFmwLD1ogak=
Subject key identifier:   2D:01:04:34:47:BB:9D:1B:65:F5:FF:70:D7:DD:E9:F4:2B:98:BA:53
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019CBE4D6E33445743120E74C9BB9FF551DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          10D7
Signing time:             Thu 05 Mar 2026 14:01:11 +0000
Manifest this update:     Thu 05 Mar 2026 14:01:11 +0000
Manifest next update:     Fri 06 Mar 2026 14:01:11 +0000
Files and hashes:         1: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
                          2: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
                          3: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
                          4: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
                          5: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
                          6: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
                          7: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
                          8: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
                          9: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
                          10: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
                          11: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
                          12: En94w1aoQT2Df-plLIO5o_mJDiE.roa (hash: T1Z8KGa2hhTOXx23lLVrR7iImIAiFGfiumitd/czjbE=)
                          13: G1copBYS9CmMlX2FVwkbhIhbgBo.roa (hash: iiTpPKuQy+sIvxdb8BIjv61/rd0bo75wTrkKcwU7rb4=)
                          14: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
                          15: HEEBNvj21luiVf4won7bq4ZQmKE.roa (hash: udPIy2ibL7Vj2lt8/UkNkqdezAjsD65iSObaDZOKY84=)
                          16: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
                          17: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
                          18: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
                          19: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
                          20: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
                          21: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
                          22: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
                          23: NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa (hash: aPMqHiIhFTors8hWctYIEhCCvjVaLha58IZgbJT4DOs=)
                          24: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
                          25: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
                          26: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
                          27: SFMYlN0Z7j7jTfVInMfOAfp757A.roa (hash: 61Le/u2BZHTj8JLBDMpSTN47fQq6QVqFLHjwtsxh4go=)
                          28: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
                          29: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
                          30: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
                          31: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
                          32: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
                          33: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
                          34: Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa (hash: bKumZUvmKCZ3xxOhEBADxpM32rg2Z2evEh7LsRdeEbk=)
                          35: aU79596Umtw5a2Y_Rg03LRPN1BA.roa (hash: Bph1g6U7CLK3f0xOwmuRbjpNfRPSDtTfRbBVZmBYogI=)
                          36: b3obsj7bhISGV2ic8E0aogm2GNk.roa (hash: HS7Xi+YLjjvjjAzScsRz2J0IByu2Q4w1qMjo4TBFOow=)
                          37: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
                          38: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: Gz3gx524RElwus2O+VaLxw1IP9m03cU+mqyCfAfVoPw=)
                          39: dwnSi6hIkl-B0bCu7DnKPlNZzLg.roa (hash: sXUyQ4gvIeZM16LhUWSfjJwXhynuc9X7oDXpD7bSzjI=)
                          40: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
                          41: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
                          42: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
                          43: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
                          44: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
                          45: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
                          46: nj2pOoHsnxLSwBMEz46es6E8aJQ.roa (hash: 9ocmHznuYBwRl00/FYysmNA+ri8ZhVq4SmmJlDSAi+M=)
                          47: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
                          48: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
                          49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
                          50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
                          51: tdaCTk5QRVdicj0QuaDdSd6pJjo.roa (hash: 7xOTzrfWW4EN0rCBfaTQHYFLvtO6j6UDwvQylOWAlk4=)
                          52: voN8vwWvhtrarGbETBOSasXNWSI.roa (hash: ceFvyVvNqry/EnDK9LeHP842A/ozch+GOGZX3poJEIE=)
                          53: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
                          54: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
                          55: xtsdMsyk002qfF3jIDsOOIwPf58.roa (hash: OcuaPeFEZzFGGp0t/Q7RlUFdkUOuvpjJGoKZbeYJ8m8=)
                          56: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:4d:6e:33:44:57:43:12:0e:74:c9:bb:9f:f5:51:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Mar  5 14:01:11 2026 GMT
            Not After : Mar  6 14:01:11 2026 GMT
        Subject: CN=2d01043447bb9d1b65f5ff70d7dde9f42b98ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:2a:59:3e:ff:74:f4:63:07:07:66:8d:26:
                    62:38:a3:4b:5d:af:b5:ba:36:c4:19:b3:c3:84:ac:
                    4f:10:40:55:ec:a3:ec:93:7c:ae:eb:cf:0a:2b:00:
                    75:88:89:18:a8:ef:05:15:aa:62:5a:9b:c9:4f:77:
                    4f:9e:d6:09:02:13:d3:d3:6d:f3:25:36:b4:73:4a:
                    66:81:39:dd:5e:8f:17:8f:c0:94:25:c1:44:48:ea:
                    6d:7e:80:04:be:39:be:5e:f2:3b:f3:ca:64:fb:ae:
                    60:72:7f:eb:40:19:7f:7c:5a:d9:82:25:7f:70:b1:
                    a3:de:9f:ab:bb:cf:5e:80:49:ed:36:60:a5:f2:b4:
                    7b:c5:44:64:34:4a:40:54:53:c6:2b:c2:b3:69:cb:
                    63:38:95:ec:f7:af:47:61:e2:38:9f:30:ef:e6:6b:
                    fc:75:54:9d:46:23:91:e0:bd:db:ba:93:d8:f9:af:
                    88:fc:11:5f:7d:e1:b7:ff:e9:c7:74:23:8d:c1:d8:
                    be:fb:1a:38:7b:b6:0c:2a:36:c4:ff:78:82:2f:b4:
                    3a:57:0e:48:b2:3a:e2:80:ca:02:4a:71:24:97:e1:
                    ca:22:6c:6e:e9:26:2c:0f:a9:9e:cc:13:f1:1b:d9:
                    10:da:66:26:ef:b2:c1:9d:ea:7b:db:e4:b6:74:b7:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:01:04:34:47:BB:9D:1B:65:F5:FF:70:D7:DD:E9:F4:2B:98:BA:53
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:09:00:d7:e4:2c:52:b0:51:da:05:1d:e8:46:46:1f:7f:
         46:1f:39:02:1f:a2:42:d8:48:f1:80:0f:4d:65:c8:b8:b1:7e:
         b5:52:33:8f:0e:ac:14:94:d8:32:af:8d:00:84:0a:ff:c3:c6:
         f7:43:fc:23:28:0f:55:f9:1a:bd:66:c8:ca:54:ff:d2:14:14:
         0b:18:19:85:8f:7a:1d:98:be:a2:5a:33:45:3a:b7:b3:96:35:
         f6:c8:b1:4c:c6:64:55:43:d0:65:97:21:a6:5b:b3:f4:38:06:
         04:15:af:da:9c:fd:52:7d:87:6b:e4:57:f6:7a:e2:ff:57:85:
         22:fc:a8:9a:ad:c5:01:38:3c:fe:be:40:28:ef:7d:01:d4:0a:
         e3:c5:28:cf:c2:4b:11:46:bc:5c:f3:7e:df:52:82:7a:69:68:
         cc:dc:3e:a5:82:48:b8:f9:e5:d8:d4:bf:71:f3:ee:31:bc:13:
         f0:3f:ae:86:56:6f:2d:42:82:f0:6e:d4:d2:95:e7:d2:92:e2:
         23:d2:14:18:10:34:fa:12:45:84:91:47:15:b7:44:2e:cf:82:
         41:01:32:f1:34:9e:2d:27:f2:0c:c0:f6:37:a9:3d:ae:6e:ba:
         e0:7f:3a:bd:88:70:24:ba:71:cb:e3:7d:d8:f3:f1:91:b1:86:
         02:f7:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:18:24 2026 by rpki-client