Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          ISbBnSAI7XJY3tsElrqwwnNFR/CpRwqqr2QgweR0o8M=
Subject key identifier:   6E:DD:BC:91:0F:33:92:9B:C6:76:AE:22:49:20:A2:3F:AE:B9:2A:56
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019D25F118E026273E2F1ABA3BDC1B7C6967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          12E3
Signing time:             Wed 25 Mar 2026 17:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:50 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: R0lW58pmD2bk73+RCr58jq/k42N3DUjucayWQtNWNMg=)
                          6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
                          17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:18:e0:26:27:3e:2f:1a:ba:3b:dc:1b:7c:69:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Mar 25 17:00:50 2026 GMT
            Not After : Mar 26 17:00:50 2026 GMT
        Subject: CN=6eddbc910f33929bc676ae224920a23faeb92a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:d4:b9:53:de:d7:55:39:ea:27:7a:22:d6:
                    56:42:56:d6:4a:eb:7b:15:17:28:ac:a5:6f:30:5d:
                    e2:48:0b:1e:02:c0:ee:a1:b9:48:44:9f:34:3f:ea:
                    ce:55:84:b5:4b:c0:43:77:50:ab:21:be:ad:6b:5a:
                    a5:2c:d8:8c:a4:ca:23:b5:dc:9f:2f:db:ab:b5:1c:
                    47:90:3a:23:78:a8:c5:ad:0e:d3:a1:ef:06:a8:a9:
                    b9:ad:6b:f1:a9:12:aa:79:32:e3:e8:af:ae:11:09:
                    25:57:5e:aa:29:20:67:b8:7e:c6:27:57:b3:0e:11:
                    84:b1:6b:32:5c:3e:74:7a:10:ef:a6:a4:b5:82:df:
                    ea:68:dd:96:19:a1:54:5a:df:82:4d:af:8a:7a:5b:
                    7d:c6:7a:c6:2b:e4:ee:37:63:17:3e:be:c9:f6:21:
                    99:9d:1f:30:cb:e5:a6:81:83:68:3a:fc:5d:4b:ac:
                    61:e6:2b:05:47:17:e3:c2:bb:4a:81:b2:40:d3:92:
                    92:20:56:74:c8:09:f6:a2:9d:31:6a:9b:6b:52:cc:
                    8f:fe:32:de:ad:17:34:31:be:1e:04:53:d4:7d:50:
                    de:67:6e:9e:ea:f2:e4:d8:33:50:e4:60:2f:04:0e:
                    ac:2b:49:e5:06:d4:d7:3c:21:3b:26:e1:01:c8:07:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:BC:91:0F:33:92:9B:C6:76:AE:22:49:20:A2:3F:AE:B9:2A:56
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:b5:9f:e3:08:a6:2a:5d:ca:4a:fb:6b:9e:e0:30:eb:dd:
         8e:2e:64:4a:aa:32:5c:da:33:8c:61:93:b7:52:08:56:9d:f1:
         7d:36:17:3a:be:5e:5d:00:ef:93:7e:f4:b1:6d:c4:be:64:72:
         34:6b:21:e3:8a:2d:a2:80:1e:2b:d4:45:f3:1a:ae:7d:aa:e5:
         2f:49:1e:34:8d:ca:f8:c5:22:fc:21:c6:f3:78:b0:86:8b:23:
         17:a1:04:e5:46:1f:04:38:e6:e5:20:a4:63:32:b3:4a:0f:1a:
         a2:99:1b:87:ac:84:d6:52:9e:bf:bf:36:5d:40:6b:b5:6a:ba:
         58:13:17:5e:a7:38:c0:89:ae:0e:33:15:22:89:e7:68:71:24:
         00:a2:0d:96:a8:0b:1c:bf:2e:cf:01:4d:40:06:3c:a0:b0:ab:
         03:42:f1:cb:74:07:f0:51:08:d9:75:6a:f2:1e:a3:ea:9e:6f:
         8e:cb:3a:3b:a0:ea:57:69:93:cf:dc:79:32:3e:aa:2a:5c:05:
         d8:d3:80:39:c9:cf:a3:04:ac:47:d7:ec:df:2e:ef:8d:7a:f8:
         b8:34:d8:a6:66:5f:55:94:01:73:25:aa:fe:96:8a:30:a0:85:
         be:90:39:7d:d9:70:fd:c3:5f:a0:85:c6:b6:16:47:71:f3:3a:
         ba:86:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:30 2026 by rpki-client