Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File:                     xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier:          WhhkuJs9c/Qa/RR8w8HdId1MUnYsvvZdbpFLY336MqM=
Subject key identifier:   67:65:71:4B:00:26:E7:A2:BF:89:50:24:13:3F:EF:AE:0C:4B:A5:B1
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019D265EF583C7645E1A2414749776AC2D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number:          022B
Signing time:             Wed 25 Mar 2026 19:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:50 +0000
Files and hashes:         1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
                          2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
                          3: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (hash: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=)
                          4: 4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa (hash: ITGD8b+FCm11c80KFD5+ZoRZrONhlzxP1zvlRlrSgkM=)
                          5: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
                          6: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
                          7: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
                          8: GICLEj3ymdfbxLRaQ1STYZ1HQm0.roa (hash: R8hNe/xkDTsv6hzz2dGuX7HG2B9Hsj+cN7gQT4HGaWo=)
                          9: GLzvmrFZwtHFe9Z1yEG5XD0OvBw.roa (hash: QOv5YSca4ZcldTa0HFwimRbho38o3TvS8gmdTUQXDWI=)
                          10: GXtyBoKwJa_8udE5jlYgWB7VYaI.roa (hash: 5g97zlCVWlo32hpHqRVgpaG704TgHvygtVvbPhPxh4A=)
                          11: IWX-CNMtLnEwDMU_uuhCAK1EY24.roa (hash: QFvTEXXIi0ZV1gJXbhpa5SnttSZtnVJpB+lXXSI4qeM=)
                          12: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
                          13: Otk0FG79gmtURrbs9qBFw9Z1oYE.roa (hash: a7mLkMf4TxITC/PYCxNaVolYF/WwFtTrcxfr0qmRb9E=)
                          14: PzmgqQ8um9H5hi2VAkYcPSoWEZc.roa (hash: Ng3CEcY0pucPNrNnMyShiiiPUWhrAnQNm1Uu1P+kOs4=)
                          15: RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa (hash: QedY6RKt5ofFsS0wCMN8+wlwQCbLNQao3vI53Hc1xns=)
                          16: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
                          17: VSTvJd5h1fJUpFcDkpWehBmerWU.roa (hash: BJSxFJdEem4H8rI+w02tkL0g2q81qbgek0uq2F+I4QE=)
                          18: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (hash: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=)
                          19: a4c5nDjxUxZzN8-2XTGKKyylEKA.roa (hash: vIspRpTGJa0UmUflc4n43GVwg91z3DdXziQm69Y2zi4=)
                          20: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
                          21: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (hash: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=)
                          22: icij8tzbCB1q5s1zQochnbGKB_k.roa (hash: 5ILc/a0dy416laIUvkxzERmHvyyFM6HRRoVjgXd6PRU=)
                          23: kD9THQqr52-A9HCLqNy2hqhG_kA.roa (hash: ZY3pnD0PUamjgM9FCMYtpaTRi8Ds5YJqoFSs/k+EEOo=)
                          24: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (hash: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=)
                          25: l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa (hash: WH2AV+DKIPZKgJAKlzBT1MXSPWrK7NoPeJmwxvwHWks=)
                          26: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
                          27: n98z2qle9j9RoGcLrh06bUNoVZY.roa (hash: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=)
                          28: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (hash: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=)
                          29: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
                          30: vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa (hash: 9GItr0FbMxsEXBlU8CcW+5gVVGSwBDcp0ugxaQ97mEE=)
                          31: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: LCf79LwzIbAyDsQBAGgKvRzhbpbHOxknclKbclPYgho=)
                          32: xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa (hash: 86Kt24lcILhRy/GfUx34Xk5McTjh1tptJAhmbF8EPxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:f5:83:c7:64:5e:1a:24:14:74:97:76:ac:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Mar 25 19:00:50 2026 GMT
            Not After : Mar 26 19:00:50 2026 GMT
        Subject: CN=6765714b0026e7a2bf895024133fefae0c4ba5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:d5:3e:e5:4f:f0:cc:65:69:bb:c7:58:bb:
                    06:52:21:48:3b:da:18:55:ea:5c:1a:ba:76:39:d7:
                    44:cd:0e:31:4c:09:d8:57:7a:44:87:4b:14:36:72:
                    25:d0:65:5e:71:c0:cb:d5:6e:0d:30:c9:b4:a2:5c:
                    76:7e:18:f2:c5:92:62:94:1a:f1:76:05:eb:96:1b:
                    c2:93:2a:e6:5d:ce:15:97:f9:fe:ea:ae:36:38:7b:
                    c1:ca:1d:d7:23:ae:77:ef:3a:37:d4:2e:c0:30:92:
                    e2:61:50:ad:99:3f:10:86:f6:7e:38:b7:fb:f0:1e:
                    a0:95:99:ae:43:bb:1a:97:de:72:85:2e:ce:a0:ff:
                    93:89:30:b8:d9:40:46:9b:06:fa:59:ec:69:8f:70:
                    54:86:d7:13:4a:be:4f:32:6b:f3:61:81:3c:cd:0f:
                    f5:cd:31:ac:51:84:12:77:cf:63:26:53:25:40:92:
                    a4:2a:28:d9:44:a2:33:30:b0:8a:e1:5c:d5:ba:c5:
                    36:87:5f:61:c1:e5:c2:49:da:cd:35:63:96:e0:dd:
                    90:a0:44:03:9c:d6:ac:da:f4:e3:0b:91:60:ee:5e:
                    60:e5:09:23:07:dd:a4:ad:2b:fd:d5:26:c4:79:4b:
                    fe:57:08:a4:38:81:39:9d:69:30:01:f5:25:59:f9:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:65:71:4B:00:26:E7:A2:BF:89:50:24:13:3F:EF:AE:0C:4B:A5:B1
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:b5:9c:a4:06:d7:13:d1:5a:9f:77:0a:dd:65:15:32:68:
         09:8d:9c:60:20:c0:c7:38:4d:0c:d9:12:9f:9b:1b:81:bb:30:
         5b:80:41:53:dd:5e:9a:57:ea:6e:d8:f9:fd:8c:b9:ba:26:92:
         f2:ad:d7:e6:66:41:5e:cd:7f:cb:08:be:37:0d:94:f5:2a:72:
         9d:49:83:a6:a5:65:db:9d:82:3c:e0:af:4c:86:a5:62:38:a2:
         37:cd:76:55:66:61:69:15:3d:c6:92:79:0d:31:f8:44:bc:78:
         19:c2:2c:8d:b8:21:3f:bc:03:9c:4e:9f:af:ff:f5:04:df:43:
         90:12:12:e3:3a:cf:a0:47:47:e8:bf:68:42:63:17:cb:21:64:
         a5:9a:f1:bb:e0:f4:d1:ee:e8:2b:8f:da:c6:17:31:5f:0c:ac:
         6d:00:16:e5:e3:5a:31:35:aa:63:dc:62:8b:d7:05:3b:93:98:
         54:58:c6:4c:a3:64:0d:03:51:2c:df:7c:f1:3f:b8:2c:c3:16:
         1d:11:fe:16:4b:85:9b:8d:96:37:48:10:8a:2e:2e:ed:0f:02:
         c7:af:e1:8b:42:f3:77:c7:c6:45:26:77:f0:4b:07:78:6b:f8:
         8b:1a:d6:46:65:ab:aa:84:3f:c9:dc:db:8e:4d:c6:56:89:40:
         88:8c:92:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXvWDx2ReGiQUdJd2rC0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjYwMzI1MTkwMDUwWhcNMjYwMzI2MTkwMDUwWjAzMTEwLwYDVQQD
Eyg2NzY1NzE0YjAwMjZlN2EyYmY4OTUwMjQxMzNmZWZhZTBjNGJhNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iDVPuVP8MxlabvHWLsGUiFIO9oY
VepcGrp2OddEzQ4xTAnYV3pEh0sUNnIl0GVeccDL1W4NMMm0olx2fhjyxZJilBrx
dgXrlhvCkyrmXc4Vl/n+6q42OHvByh3XI6537zo31C7AMJLiYVCtmT8QhvZ+OLf7
8B6glZmuQ7sal95yhS7OoP+TiTC42UBGmwb6Wexpj3BUhtcTSr5PMmvzYYE8zQ/1
zTGsUYQSd89jJlMlQJKkKijZRKIzMLCK4VzVusU2h19hweXCSdrNNWOW4N2QoEQD
nNas2vTjC5Fg7l5g5QkjB92krSv91SbEeUv+VwikOIE5nWkwAfUlWfmAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdlcUsAJueiv4lQJBM/764MS6WxMB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNS1nKQG
1xPRWp93Ct1lFTJoCY2cYCDAxzhNDNkSn5sbgbswW4BBU91emlfqbtj5/Yy5uiaS
8q3X5mZBXs1/ywi+Nw2U9SpynUmDpqVl252CPOCvTIalYjiiN812VWZhaRU9xpJ5
DTH4RLx4GcIsjbghP7wDnE6fr//1BN9DkBIS4zrPoEdH6L9oQmMXyyFkpZrxu+D0
0e7oK4/axhcxXwysbQAW5eNaMTWqY9xii9cFO5OYVFjGTKNkDQNRLN988T+4LMMW
HRH+FkuFm42WN0gQii4u7Q8Cx6/hi0Lzd8fGRSZ38EsHeGv4ixrWRmWrqoQ/ydzb
jk3GVolAiIySNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:16 2026 by rpki-client