Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
File:                     k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft (raw, json)
Hash identifier:          9xBLxVWondUeof9T56gOTr/UgQsA29gNeOhxO7Mvv68=
Subject key identifier:   87:F2:3A:A6:C2:1D:25:B6:4B:F7:E6:1E:63:5D:7F:C3:28:42:D1:A0
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019D29CE0298B903B3B01A4E7560A90291B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
Manifest number:          1907
Signing time:             Thu 26 Mar 2026 11:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:00 +0000
Files and hashes:         1: 0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa (hash: IL/oVqJCJvBcuhRa0udWrMl8b5MZPj/cIIzXYQVtlu8=)
                          2: 5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa (hash: LbvZNY0tC6zYRbPYoa4ozGzRAQOXt4ZTnNFn0xhSnzY=)
                          3: 7Jo1AXxL9dWxSmwTRBFhks9Q4Vs.roa (hash: XSSzViCtmw8J0g2pF/zT6knPpk1iDv9kdN1eQqLpiqI=)
                          4: 7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa (hash: QYaRajMdHdtvejmwMr8bX6WzRjepO0NpayhGfPPYZjs=)
                          5: 8HkdlRIsSGuo1I-drFwJKzYJsLc.roa (hash: C8ZP2jpxrKvVL9+836kgNK24TF2yaO/bf4nIX98Lufg=)
                          6: 8anU_kSsbOGe6ZU0HS4gzWovLqg.roa (hash: wkDzJZRCUWlfEfFwPoPfznzkQ9x//geG8nDMwyMxFek=)
                          7: 9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa (hash: cVjpGVfGUmxebxPLOp3neQi9YEZ7CKPSGNOdweHchC4=)
                          8: DYFGQ9jLmPveTVYvqmPdMOiB2II.roa (hash: 5FCw7oW9hIoLUdGZsC5C/kAqM/V+0AThqlTk43JtS4M=)
                          9: FoavqWF8jeAMSQlW10lOBirX1-Q.roa (hash: p8z3kmN7e3hhfZrzVOMRMMtYhzpF+J1m/L2uzSJKAM8=)
                          10: I7LwPdW90If5Iq8va8VVky8QjJM.roa (hash: wvgGGkRoiQOQWK8pYp5pi5jggBd+DiReaExIPv/a0Qs=)
                          11: LhzEJgeIglAa5qZWdGZklevtUTg.roa (hash: a5QqVzS7PfvbVZgoeMWUOcBUG3/k7vat/Mzm4iVPmnk=)
                          12: N70XxhXahOWN-bJRkQuA6R5YciE.roa (hash: 1GAH9fBjTX1tIK3p8QgIIyWRcnIPBnAOKx1/G/At2X4=)
                          13: NvPHM9DbtscigEStbedrS4ZnrcE.roa (hash: YiK5qvrI0X5QgkIf9YEzw+6MmxBJxVAFj9mlF+7Uj4U=)
                          14: OIjLxs6VmAGUTEzh8PSJtLBopGY.roa (hash: 8AceMO5tWwuUpBtpE1+qoQkFOUmeBKGly65yw/hi+sk=)
                          15: QowR94jtBUnFvn7mSw9HdelmuL4.roa (hash: E0Dh7cd14TaT6XnP2VIr9PfSAEJbNifsjZXKmz2LVxY=)
                          16: UsXARVO0ku9iIm3C-vStGeFRLlc.roa (hash: Za1raUPPBFhNuB0MNODIseZi3+2ddIMhH5cJ3c+pEH0=)
                          17: XYMRMU_3O-JK-JIGAvAXg1QrnRM.roa (hash: llYUO5jnzTZpvaJuLkhYws9O4QD9RoKbEnpetMF/cpY=)
                          18: _hpXRDy0EUFzfhN_aHdFdymXiIA.roa (hash: HAN6zvmeqHdwoZfGyxOd38E87FHJX9YZiFoBibK2IOk=)
                          19: eMLMK1qGxvtHAnruO9820drOkF8.roa (hash: Qpd2e+jq6odk6pRnDczmMMXkJCSUq5XQLSBI5aFLqnU=)
                          20: eyQJc6-SgirOqpkjy7BayhaUNTM.roa (hash: +9zbqq0DJW8y8iPCW5wtYdUDsTSuNxnLZXq28/HomsQ=)
                          21: g-5OExobBPKpwq86-mokeUHrM5s.roa (hash: esJBdIejJQA3R77ejO+4/6JoDvhxDi/exjc+GoZuVe8=)
                          22: hk1oju7a85YLrK-xOi3Dwyc514s.roa (hash: 47y67aqLovE6XQVviNUqEv8Eh2I5vqgHfxxqdx3QVxs=)
                          23: k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl (hash: iAM7jd02eOz0v41jFzzHmpy0Gj1OKqrxx/zUD+SS7Gs=)
                          24: phGDcnbsUAWKUDua2zfBGnxvvHA.roa (hash: PmqHP8zrCvf2Ikf1cbZi674FwG6W6lFWBsYqFkhhcnA=)
                          25: qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa (hash: zbowHekheKN7KuV9DnFXvdpM7KjV51/aW8mu77VaWX4=)
                          26: xVkKNJRba2SGRn985sBZidqpu8Y.roa (hash: V0oEel9d63PmLfURQhNtv6FLYVRm7Iz09fE77eJwwQM=)
                          27: z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa (hash: vmqtsShBDwyvuz3COzl63zKiNkUIbp3VBuhBqO6QmVQ=)
                          28: zM7bb3oEHINoYMOeQRk-XYW9EkU.roa (hash: RdFq0JyIVgelxWsJ1/n+o94CMLBqw3yV+IpTMdt32Uo=)
                          29: zhpGkkiHWYW4818HnEbqExeUBls.roa (hash: qWe+oDx2YTDIQSZZ2y2+AEfhQT4OZcU2Yuk2CoLSDWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:02:98:b9:03:b3:b0:1a:4e:75:60:a9:02:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Mar 26 11:01:00 2026 GMT
            Not After : Mar 27 11:01:00 2026 GMT
        Subject: CN=87f23aa6c21d25b64bf7e61e635d7fc32842d1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:b1:31:24:8a:e5:d4:47:4d:f1:e8:c3:dd:
                    9a:f7:bf:04:16:7e:e1:49:81:2c:f3:80:bf:c1:ae:
                    c2:8d:ce:45:a9:3f:2a:60:30:fd:1a:d7:f3:1d:a4:
                    ab:d6:76:c9:c9:87:15:30:ab:39:fc:81:f1:6c:d1:
                    4b:21:f9:63:20:e9:a0:28:b0:53:06:ec:02:7f:b1:
                    2b:75:ba:8f:e5:18:43:34:5b:f6:38:e8:2b:5a:66:
                    62:08:fd:c5:56:e6:89:fc:9a:91:5b:85:8d:04:05:
                    26:fc:fa:74:b7:37:8a:97:04:e4:a4:ed:03:68:13:
                    a6:87:72:b0:37:58:40:53:00:f9:e4:14:b4:d4:61:
                    59:eb:66:b7:18:a7:05:15:e2:ca:10:b7:51:d3:9d:
                    78:30:0a:9a:5a:47:3c:27:76:37:29:02:1a:22:81:
                    04:8e:d2:a0:7a:d7:3a:21:90:39:7b:c1:92:52:ab:
                    e0:75:f6:4d:2e:97:4e:de:44:b0:4b:4f:99:13:04:
                    c8:98:69:3d:26:ef:a6:d3:1a:00:81:e0:cc:e2:64:
                    1c:d2:f6:46:ad:cd:24:6a:c4:7b:a1:ef:f5:78:ac:
                    74:91:84:ce:a2:bd:ba:39:c5:90:03:84:e7:fb:bd:
                    6f:75:db:e2:19:ec:e8:4a:b6:7b:c9:66:12:a3:64:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:3A:A6:C2:1D:25:B6:4B:F7:E6:1E:63:5D:7F:C3:28:42:D1:A0
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:73:cc:ea:8a:f5:ae:98:3d:ff:85:33:77:94:7b:6e:b5:80:
         4c:4e:43:48:3b:86:e4:65:1f:f7:b3:27:4c:ae:a7:01:38:78:
         4b:f2:23:ee:97:e7:77:27:03:61:31:0a:ae:3f:61:88:8c:9e:
         ea:33:fb:af:4c:40:8e:22:ed:88:d4:06:4c:9c:7c:5e:5f:cf:
         b2:5e:b1:be:e3:99:66:45:45:d4:9d:54:9f:6e:3a:4b:24:7f:
         0b:2f:43:3f:9d:96:3c:41:3e:0c:69:47:2d:ea:98:78:52:3a:
         42:54:8f:ba:03:80:ba:f6:d9:44:f9:ff:46:38:df:5c:84:63:
         1f:4e:02:22:48:1e:8b:68:1a:d8:23:39:d8:8a:0c:8d:03:23:
         f4:53:0d:d4:40:50:8d:25:c2:40:2d:6f:eb:ff:63:72:09:9b:
         0c:4e:d2:3e:51:59:14:96:89:ca:94:5b:eb:b1:86:9b:a6:1c:
         c7:48:da:54:57:99:b5:e5:d4:04:4b:a7:fe:98:6c:d5:e2:69:
         af:45:8f:11:ae:99:45:23:8c:b2:92:7f:be:87:04:73:fb:b7:
         08:21:25:d6:ea:87:6e:a9:41:3d:80:7e:03:5e:06:0b:41:d9:
         29:65:81:de:2f:65:03:84:37:81:6d:25:94:12:65:36:3e:b2:
         2e:2d:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:59 2026 by rpki-client