Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File:                     OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier:          7wKGoPdFnxQylZqAUAX1F6iJQ7o3nT1IUIxdXaTjN/4=
Subject key identifier:   E0:D8:74:FF:90:29:D0:FF:DB:04:EB:7B:59:C0:AC:34:BB:F0:25:A0
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       019D2A3C86FF574255C5A02F160899DE871B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number:          18BA
Signing time:             Thu 26 Mar 2026 13:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:42 +0000
Files and hashes:         1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=)
                          2: 1k6LBboYndm8KPxxnHHSfyA330M.roa (hash: X46ysx2IUyKm6jXZ7VDJJwqGgs4SwZUKvqkP6KVxSfQ=)
                          3: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=)
                          4: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=)
                          5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=)
                          6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=)
                          7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=)
                          8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: swyAMhrgGYXdvV3o/YzuHTG+2OrGCeymId/3HM5fMms=)
                          9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=)
                          10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=)
                          11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=)
                          12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=)
                          13: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=)
                          14: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=)
                          15: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=)
                          16: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=)
                          17: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=)
                          18: kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa (hash: 6/BkbF3Xl0wXeX45+UDxiyzqx4P3HQHvsaM0t24sFCU=)
                          19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=)
                          20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=)
                          21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=)
                          22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=)
                          23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:86:ff:57:42:55:c5:a0:2f:16:08:99:de:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Mar 26 13:01:42 2026 GMT
            Not After : Mar 27 13:01:42 2026 GMT
        Subject: CN=e0d874ff9029d0ffdb04eb7b59c0ac34bbf025a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:04:da:8c:3e:24:45:97:ed:94:e7:94:e7:
                    dc:39:6e:8f:e7:ab:21:ec:dc:ec:ce:96:aa:fe:98:
                    bc:cb:2a:f2:46:3a:71:3e:82:c8:30:ed:3b:e9:82:
                    e4:e8:a6:4d:03:87:1e:68:6e:1a:db:34:5d:d9:17:
                    3e:40:c3:3b:c8:cd:52:b8:e7:74:5a:a3:5b:97:06:
                    d5:38:9a:d9:a6:ab:33:2d:17:6b:f4:2c:13:c5:20:
                    bb:3c:c5:fe:ba:7b:73:0d:c4:ff:1e:1f:df:23:07:
                    f2:3a:b0:d6:ff:6a:4f:e6:0c:7c:34:03:d0:37:df:
                    cf:a9:c5:a9:a4:c8:df:4a:1e:f8:36:27:c7:f4:4e:
                    43:1e:0d:47:80:10:da:8d:89:5b:13:16:24:fb:23:
                    45:2c:32:89:87:ce:10:af:be:4c:4e:66:98:b6:e5:
                    38:d3:52:d3:3a:1b:7a:d1:ae:7b:91:ef:c3:90:37:
                    77:e2:a0:9e:3f:aa:c0:6a:50:d2:97:6b:85:82:8a:
                    58:13:4f:d5:11:4c:8b:23:d7:5f:14:3d:5e:39:b9:
                    d0:33:05:8b:1d:ed:0d:5a:08:29:8f:09:0e:f2:24:
                    99:ba:19:3a:60:22:58:52:3c:74:38:76:21:c5:19:
                    df:b5:7b:22:cd:f0:c7:a9:be:a3:db:d0:c1:fc:3e:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:74:FF:90:29:D0:FF:DB:04:EB:7B:59:C0:AC:34:BB:F0:25:A0
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:fa:34:8c:53:fc:4f:20:8d:0e:00:d7:12:a5:2d:90:83:
         2f:6e:78:e0:dd:5d:78:d6:70:ae:65:40:b5:a1:e4:41:97:8b:
         57:1e:9d:ed:79:12:27:a4:c1:37:70:2b:f6:78:3f:e2:b6:19:
         24:c6:ca:38:ba:cc:7e:13:8a:b6:1e:f6:7f:ce:47:3c:a2:32:
         ac:7e:1f:a2:b3:6f:d6:b5:5f:99:1f:29:71:49:f1:45:c4:a5:
         c7:8b:fd:ac:d5:c8:d1:63:62:d6:b0:94:55:e0:e5:df:77:3d:
         cd:98:ea:42:4f:aa:88:f6:d3:d4:74:e0:a8:29:54:f7:a3:b1:
         75:04:14:75:d7:58:23:a4:ed:6c:4c:f0:d9:24:e0:37:98:b9:
         d8:fc:8f:33:d1:7f:8c:90:fd:9d:57:f2:42:fd:d8:2f:33:ff:
         6c:0d:e7:12:46:ac:12:c6:6e:f7:20:d0:1c:7e:ff:05:cb:84:
         ae:ab:4a:21:fa:8f:82:10:86:85:bb:11:e7:d5:d3:89:ed:e1:
         ee:8c:cb:1b:ba:8c:08:96:b4:9e:d0:03:62:10:f5:99:07:25:
         57:27:43:f6:81:ca:7f:1e:82:46:f8:4d:84:20:c0:59:93:f6:
         95:d0:12:77:a4:54:0e:4e:3e:df:12:16:40:f6:bf:0b:f5:b3:
         8a:5d:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:59 2026 by rpki-client