Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          kMwMI/3rPYSAr9RTCnxC0GN+Jfz+Qa4XX44mIbLxnaA=
Subject key identifier:   73:8E:50:BE:EC:6D:FF:8A:6B:AE:82:7F:EF:C0:9D:72:55:23:58:81
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       019DCE99AE0171490CC02CE60A4160AA64B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          10D3
Signing time:             Mon 27 Apr 2026 11:01:11 +0000
Manifest this update:     Mon 27 Apr 2026 11:01:11 +0000
Manifest next update:     Tue 28 Apr 2026 11:01:11 +0000
Files and hashes:         1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
                          2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
                          3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
                          4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
                          5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
                          6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
                          7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
                          8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
                          9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
                          10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
                          11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
                          12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
                          13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
                          14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
                          15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
                          16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
                          17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
                          18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
                          19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
                          20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
                          21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
                          22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
                          23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
                          24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
                          25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
                          26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
                          27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=)
                          28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=)
                          29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: ucz6jTL4rrFWoYrZVvFhKEsexv8pBJRmS6CDjZrchDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:ae:01:71:49:0c:c0:2c:e6:0a:41:60:aa:64:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Apr 27 11:01:11 2026 GMT
            Not After : Apr 28 11:01:11 2026 GMT
        Subject: CN=738e50beec6dff8a6bae827fefc09d7255235881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:b1:8b:65:c7:4e:c5:68:c7:6c:48:88:d7:
                    16:29:b0:f5:ea:c0:b8:be:b1:0d:1d:25:9f:c5:03:
                    a7:81:f8:64:4e:b1:a6:46:8a:0d:2d:2c:61:3e:a7:
                    e7:51:e9:b7:cc:c0:df:3d:08:3a:7b:38:a4:ef:d2:
                    04:26:08:c1:70:2c:45:ae:06:5d:d0:89:a7:bf:11:
                    f2:0c:61:eb:c1:54:ed:14:63:5a:73:66:52:3a:12:
                    55:c4:01:71:00:89:85:e9:68:e3:f8:f8:7e:43:89:
                    5c:23:1d:f1:e4:5c:ab:8c:c4:d1:28:01:65:4e:cf:
                    82:6b:17:b6:ec:0e:d2:e1:69:65:d8:ff:36:91:48:
                    f1:62:98:6b:53:b2:00:7e:62:83:86:13:5f:7c:89:
                    26:e2:3e:5d:c2:1c:6b:9b:ed:ef:60:21:04:88:45:
                    91:98:f8:fc:a6:b8:bb:ce:41:7d:c4:cc:68:eb:a5:
                    a6:ed:1d:0e:1b:a3:c6:2a:ba:48:38:58:5a:c0:73:
                    38:d0:66:8f:ce:b5:84:2d:17:43:9f:78:a8:cb:22:
                    56:1b:10:c7:e5:0a:f4:07:63:33:c3:8b:4a:2f:50:
                    b2:f1:b1:9f:f4:9b:01:74:be:c0:2c:d9:d2:ef:9f:
                    6c:ac:a8:70:2e:48:be:73:26:87:01:13:1c:03:66:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8E:50:BE:EC:6D:FF:8A:6B:AE:82:7F:EF:C0:9D:72:55:23:58:81
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:93:20:47:5c:4a:d2:dd:b1:6e:35:32:af:e0:ae:8a:ce:
         11:49:39:26:1e:28:be:aa:34:8b:95:39:36:6b:c0:c9:ef:c1:
         fb:5b:e1:2d:d2:c6:d5:54:df:f7:b1:ab:c2:51:00:21:e0:72:
         ea:9d:a4:ed:62:2f:3a:9d:da:03:cb:3e:0c:a8:8c:22:d0:28:
         58:f8:85:af:66:05:9b:0f:57:a7:b4:9a:86:8a:ec:66:9e:f8:
         e4:3e:ce:66:ae:5d:91:63:7d:e1:b0:95:2e:bb:93:b1:0a:e3:
         b0:9f:05:24:55:2f:64:b9:05:16:03:a1:09:88:c4:7c:d0:52:
         27:ae:85:f0:e1:e7:0f:c1:c1:63:d0:23:20:75:9e:15:2f:c4:
         64:94:d9:5d:4a:fa:a3:72:57:56:7f:17:8c:35:90:cd:ef:c7:
         43:08:e3:0b:02:5b:04:da:5f:04:1d:35:00:c8:46:2b:3f:9a:
         d9:5e:19:60:a5:36:c9:25:10:79:5b:4e:f7:94:d1:92:6c:61:
         cd:b6:09:5f:78:e8:c2:b6:88:18:f5:bb:21:b3:03:2c:8f:ba:
         88:a4:75:fa:ac:6c:0b:40:38:9b:7f:12:b0:b2:7d:f6:59:ab:
         c5:4c:cf:6f:1c:4d:5f:bf:3e:2e:47:08:57:f0:28:98:f0:ac:
         88:85:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:32:13 2026 by rpki-client