Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          AAe+ZnqUI0DLY4a6R7q165MSAvqDzlznfzTsgPzG/H0=
Subject key identifier:   91:90:80:DD:36:2C:37:95:21:33:D7:84:28:FC:87:59:91:D9:D1:A5
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       019D27DF5CC2FEE8A63DB35ABA958ED06E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          0C56
Signing time:             Thu 26 Mar 2026 02:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:42 +0000
Files and hashes:         1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
                          2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
                          3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: tF+qf/vEmMVgqKKxrvlzUqhLFVmDazEEkjEUz1kMq0E=)
                          4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
                          5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
                          6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
                          7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
                          8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
                          9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
                          10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
                          11: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
                          12: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
                          13: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
                          14: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
                          15: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
                          16: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
                          17: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
                          18: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
                          19: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
                          20: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
                          21: lj669dX1v9pNSJRiu80sXV0wDEU.roa (hash: a71cJCBEg+tia0cmJQMaQwkbw9fYgnq3IrPLp8Y1TeY=)
                          22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
                          23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
                          24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
                          25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5c:c2:fe:e8:a6:3d:b3:5a:ba:95:8e:d0:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Mar 26 02:00:42 2026 GMT
            Not After : Mar 27 02:00:42 2026 GMT
        Subject: CN=919080dd362c37952133d78428fc875991d9d1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:b8:ca:a5:85:9e:88:34:05:3e:83:58:1e:
                    99:cc:cb:3c:48:63:02:f3:4b:ba:6b:d9:4a:07:20:
                    86:ae:8c:3f:cd:fd:08:1e:b2:db:40:c1:ff:65:7b:
                    c7:02:62:0e:2e:38:2c:e5:b6:48:ff:99:6f:97:48:
                    c0:fa:04:93:86:5b:89:e7:58:7e:9c:79:3a:15:d7:
                    68:93:14:d2:59:1a:7e:7d:ab:77:c5:87:f8:6f:d0:
                    0f:64:53:c1:44:2f:06:47:7f:fa:18:7c:8a:42:26:
                    ed:e2:34:f5:fb:ce:bc:68:ef:d4:bb:e2:9e:96:da:
                    ea:0a:f1:c2:cc:3e:c5:f8:38:81:a8:5f:d5:56:93:
                    57:0b:49:b9:b3:ce:46:fb:7c:b1:41:09:b7:30:fa:
                    e0:cf:9c:cd:2b:95:a8:e3:c5:38:dc:2a:4d:b1:02:
                    25:d2:a9:32:52:24:de:57:41:16:9c:be:05:46:e3:
                    58:1c:0c:5c:9a:3d:d7:a5:2e:17:6d:d1:b9:9c:34:
                    07:9e:15:d2:fc:1d:87:dd:ad:20:40:44:6c:9e:6e:
                    03:4f:4b:2e:f8:9d:e6:ff:52:54:39:a6:7b:9a:85:
                    e1:35:8e:32:ae:e4:b7:cf:83:01:98:d1:5e:e6:16:
                    79:dc:29:cf:f7:69:4f:f0:8f:78:eb:a1:d0:d5:57:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:80:DD:36:2C:37:95:21:33:D7:84:28:FC:87:59:91:D9:D1:A5
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:45:37:4f:ed:ae:e3:e9:2d:8b:56:fd:3d:2d:82:57:fe:7e:
         1e:cd:e9:3f:ca:03:1d:f6:2a:08:45:70:64:68:ee:0f:19:c0:
         73:02:ef:3d:f1:8c:ee:1e:05:63:93:0f:5a:e7:97:c5:b0:2d:
         41:2c:2f:7f:7c:61:79:0f:ad:b8:0e:93:2d:53:e0:4e:ea:21:
         38:ed:64:60:f1:49:41:1f:2a:1a:a5:7f:0e:00:5d:84:aa:07:
         fd:35:7e:a4:06:f5:e8:b2:f7:58:6a:4a:4c:2b:05:58:85:3d:
         ef:fb:c3:a8:89:51:da:c6:4f:c9:97:68:68:20:72:dc:9e:74:
         2b:8e:d9:cc:c4:20:33:87:db:71:df:8c:de:b6:7d:49:d1:50:
         82:9c:65:a8:04:78:0a:33:1c:39:6d:ce:92:ca:5c:f6:48:6e:
         86:92:89:78:0e:5f:2a:4b:cd:71:3f:32:ad:d1:25:b0:fb:7a:
         15:03:fe:ae:c7:40:eb:43:25:3a:af:fe:76:b0:af:5e:cf:3a:
         96:a9:8d:8c:92:e0:18:3c:bc:6f:6c:93:55:d3:7a:5e:d4:b3:
         e6:8a:e7:89:7c:dd:64:47:98:dc:0a:0c:37:03:df:c6:9b:7a:
         83:da:4b:55:2c:a3:bc:d7:eb:d6:0c:e2:ee:81:55:9a:b0:92:
         44:e7:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:14 2026 by rpki-client