Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          NQhbG5MGsyPllJpt480S+8p7j+2a1b+ouRqHR04dKiE=
Subject key identifier:   72:9A:BA:85:33:96:A3:BE:CC:97:FC:22:8E:7E:9A:5E:D3:04:91:8B
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019D329A8B710E74283CDCF0485947838D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          0A3F
Signing time:             Sat 28 Mar 2026 04:01:22 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:22 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:22 +0000
Files and hashes:         1: 2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa (hash: HdYdfg7KzjjDTOgVzLOr5/bwdXvaXOYOwg34rUKYE80=)
                          2: 3je-aW-N7TvXwWseA0AZU1zFFbU.roa (hash: IdXSTpJKcEEFlZieOlZ7QaPLx04CvmXi14I+4Wr2hXA=)
                          3: 8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa (hash: XGi2dMcjiow8SPFk+dkz5coR9Tc9b4OF22dtNkjQ4js=)
                          4: 98tD6JWHqp0ypI5bbPGuX_UIwfA.roa (hash: 6KvAEkDtoICEwzMgBywfxZUr+Ojo3kPDVBSheW2+ZSo=)
                          5: 9P0_uQ9PiRWmZc_maEYyWbMW7lE.roa (hash: xH+2A3aP3ny6AN/qjM0x91L6v7H5jOztfLlqeuWe2mI=)
                          6: AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa (hash: mP9r5bHKqvTF04z/muFWJWKezK9dgv4QboSZ9CrEMjQ=)
                          7: AtTsCBxocJYnVAs43sOHtjGuox8.roa (hash: 6rodAK3l9JGAkmSOq2mMluQTtVgP8JgwhuN5k6JfBmE=)
                          8: BNZ_MY-fMChkHDbhvbjEMp0c0t8.roa (hash: 746qN8aNB6fTzUU62cmMC/s2b6wiWhQ9PI/3H6uSCYw=)
                          9: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: zTbm2hdQKwyZBIsKNnilEy9vl4Z3k/SunELwI1pQxWU=)
                          10: GPDp9plmScdMQY8Xt7PLltMqyFk.roa (hash: kn5LMZ9IDimoqU2fH9sXquKqrIXG35nTc0YpDs18ygU=)
                          11: LNkI4m5Q6DkR7A1HiJYQftYyohM.roa (hash: cpYgRe8eut0U8jQJ6MFVl+er//uQSbxsiZcNyxgf3go=)
                          12: LXBrSrTbWxCLQwSlu1CSMgpzQzY.roa (hash: ut2Yo4CXKzY3og1v6O0mewlbFfET3qAR4TUH8Yt/rpk=)
                          13: NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa (hash: hACJLXbiQQybEmA2FC3ErE869vzK4Czo2p45asoCTqw=)
                          14: O5-viCq097sF3_cL7F4wSdYUS9U.roa (hash: eSmerYP3We0BPChWFCRb6LjkZ9xAJBhVg995TBWuALU=)
                          15: PkHhyk16iXPkVs8JIxspom8O8uI.roa (hash: nOzNMNHq9+YfHt2144BtLwNcyjKCG7zDH+CDk93kqV8=)
                          16: U1wExHgLqik9ennJ-zCwA8QG0Es.roa (hash: +krTPLmLg567MpkwQKDO1W1rHWzpDCH1WMo44ZmuLW8=)
                          17: Uc0QtV-Uy9ROM9Lagf0zyddqO-A.roa (hash: qBob1+hxNu0E82je6stJlqm+eqW1Kxk60iKRE0AMvSE=)
                          18: Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa (hash: 4yN2dlHzReD/a8HNsMDp9YD/82UrxIQcLwXYi54rfcY=)
                          19: _Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa (hash: roxx1jTurtbiqD7dYa6cwT1bGXKctEf1858p88Dv+vo=)
                          20: aQL-QgzBoFHwD6FPBMOxZizIfVI.roa (hash: sVeXUiCfsCZvClsm84u2EWIKU3Bpl8jTIXuMZA3WpDA=)
                          21: d1OmJ5EbUHtADnyIohLW9jC5Wjo.roa (hash: yBVfSKcBt77ogbUo89PUUnSGbbNLrBsb2eo4WCv4VgE=)
                          22: dO6zV5tR1mjYjK3NE1xspA5W7Oc.roa (hash: PR/d7x3njWIlWQENR2nqDkLzkZSholFpUEUOVU9nk9Q=)
                          23: ffydp0NOmFPZ72JXoCt3YGU40zY.roa (hash: kw9RERQyHNlAIwT4DYgjP3QdAZ/WPIN7ZL0MkKytZVY=)
                          24: kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa (hash: 0exZUPcXiwTKpSTKVCr4NknGMyTmcx77pbjOlPukMY0=)
                          25: mL8lAxWE1vx2gACaArt4Elb3jj8.roa (hash: Amb3PyWffn1XjgNEsm8nCzUlUMBMyYKDewByQ77WAgo=)
                          26: ob0tki58wxHPraW7cmAWjNuCzNs.roa (hash: 8pm794I9YLrUb9NIEkbxR08BBG7U1MWCb/Ty9fwgJsQ=)
                          27: omaLVc5AtTLq6XQDbUHxmhH2kK0.roa (hash: MfzAIima6PJiHvHej6CwNquCq3zRKRiMh/V8bXOd4oM=)
                          28: riOkNghSYTw9yafk9VJfteSyTC4.roa (hash: 2dASlVYei/Vsy2geGSfTPcu2uRMGmLtm3nWtYZPrR0A=)
                          29: w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa (hash: 9WLY+XSWvisF7e//wWcAPmekfE4wm5ifiUJtVovzeGI=)
                          30: yfTEjxFKOjmUlnfDi6SnG6nk8cA.roa (hash: GxQyDqFuYkZ8pXnq7jWPUCYfn9oY/9XlDJm0C2cBaPg=)
                          31: z7Jky_l_vERGZmnbRTbQHo6iSl0.roa (hash: /zMH/gs7zUW2ybBqzyKAL9kXu6AlniUMtgtFZvFiuYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:8b:71:0e:74:28:3c:dc:f0:48:59:47:83:8d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Mar 28 04:01:22 2026 GMT
            Not After : Mar 29 04:01:22 2026 GMT
        Subject: CN=729aba853396a3becc97fc228e7e9a5ed304918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:2d:70:54:3b:5d:b1:45:7a:94:81:26:7d:
                    e7:e8:72:2a:05:0a:69:d8:1f:88:ba:fe:29:5b:03:
                    d2:d7:59:2f:5d:07:4a:40:1c:8d:e1:af:84:8d:e7:
                    c7:b0:4b:57:21:0f:8b:e3:a2:20:e7:1a:bc:01:47:
                    9d:c1:3a:48:17:a6:ef:b2:5f:d3:42:16:e1:5c:12:
                    f9:28:e5:1c:04:a7:cd:b4:80:d7:5c:df:e5:25:fe:
                    62:1d:ff:23:0d:0e:9c:97:50:6e:39:81:ed:2f:55:
                    20:2c:09:6c:1d:58:98:e8:e0:68:f3:40:70:a3:20:
                    15:93:c6:e4:e9:1f:1f:22:1b:f2:0e:99:3a:a9:75:
                    9c:f8:da:2e:e8:cb:e1:b1:1e:4e:19:e8:b1:7a:fc:
                    06:7f:fc:df:be:b4:f9:ae:34:11:42:0b:50:f3:46:
                    f6:e1:b9:10:89:df:18:19:b4:6f:41:f5:99:af:6e:
                    1b:42:91:ff:05:c9:8f:a8:90:2e:3d:ee:c4:cd:e9:
                    35:fc:2e:4c:44:cd:f2:a0:7a:bd:34:c4:ab:0b:bc:
                    dc:b3:d8:de:f9:0d:ce:86:a9:bd:52:db:e7:01:f4:
                    9d:0b:18:f9:ac:6e:46:78:41:2d:f0:d3:67:f2:7b:
                    5b:e3:4d:3c:0a:a0:22:9a:54:fa:6e:0c:f9:47:45:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:BA:85:33:96:A3:BE:CC:97:FC:22:8E:7E:9A:5E:D3:04:91:8B
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:60:6b:67:95:f3:a8:0c:91:26:f7:92:d1:0e:9a:b4:d7:
         c0:8d:c2:b8:2e:6f:92:2c:0e:b0:6e:22:34:c1:86:38:1a:79:
         42:79:9c:b8:fc:e3:94:e2:d9:b5:0e:ac:3c:13:3b:73:e4:35:
         1a:2c:c1:e6:d2:13:ce:bb:9e:2b:2b:a5:1d:71:3d:ce:0b:e2:
         87:04:21:a8:80:cd:18:ed:86:ab:cb:70:ea:ed:f0:86:57:74:
         ef:3c:a5:c2:48:a1:67:dc:ae:b6:fc:9f:e1:f8:1d:fc:1d:94:
         50:e7:af:25:dd:a1:d2:56:70:0d:47:d0:2c:1f:68:30:65:14:
         e8:e2:26:ee:20:73:0e:88:40:e3:32:29:72:9b:1c:7b:a1:c7:
         8a:65:c5:06:89:4d:35:4a:34:2d:22:85:1d:06:60:80:17:97:
         d9:84:58:5f:a0:00:b8:5d:41:7f:3f:24:e2:c8:68:9b:11:d2:
         0b:ab:f9:ef:93:c4:a5:8b:54:66:25:8e:8e:b4:4d:ca:03:ab:
         e1:79:43:f7:f7:cb:58:2c:78:56:82:6f:6b:fe:f6:13:7a:c3:
         97:f2:d0:6d:fb:c6:65:93:6e:2c:98:02:c2:9d:98:5a:0f:60:
         b0:0e:4d:24:f1:08:6c:44:81:45:ca:67:8f:65:cb:90:84:08:
         02:df:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:41 2026 by rpki-client