Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          1hpEw0x6813+reurJlmV0ORAIx5xtWvlJIIX30p6LWY=
Subject key identifier:   61:5F:4F:5A:61:F2:4D:C1:E7:31:B0:57:27:CC:2B:09:30:F3:CB:D0
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019D284D6D6F0E7D75A3AC6E00281D07FE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          107F
Signing time:             Thu 26 Mar 2026 04:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:56 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
                          7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: M+mVo60cJ9QmThXC2g9V82hrTaCAp8H42SkuNUmSFAY=)
                          8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
                          10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:6d:6f:0e:7d:75:a3:ac:6e:00:28:1d:07:fe:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Mar 26 04:00:56 2026 GMT
            Not After : Mar 27 04:00:56 2026 GMT
        Subject: CN=615f4f5a61f24dc1e731b05727cc2b0930f3cbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:e0:ee:e7:48:ab:85:7d:71:af:06:bf:8e:
                    4b:55:d4:1e:fc:79:07:08:59:7a:07:62:d7:3c:ec:
                    85:6b:98:35:f4:ae:da:c4:dd:06:a4:49:f9:41:c7:
                    d6:c4:89:f0:f4:cd:cb:c9:7b:00:cd:76:cc:d6:7c:
                    2d:c5:c8:55:ce:54:46:80:4f:67:da:f1:bf:3d:a3:
                    94:ab:c6:a0:ea:0a:af:02:9a:7d:75:59:67:5f:69:
                    00:ea:bf:82:2f:ab:b5:97:7d:c6:98:27:85:2c:20:
                    87:a6:52:d6:4f:8d:5a:1e:e9:ca:79:82:cd:12:58:
                    f9:0c:cd:e0:a2:ff:70:c4:06:9e:32:be:81:7b:8f:
                    e9:1a:43:71:48:59:0f:fa:cb:89:df:63:47:9c:db:
                    cb:83:7a:a0:0a:f7:4a:d9:63:5e:36:0a:eb:6b:89:
                    32:17:bf:0d:95:af:d6:24:49:71:f2:cd:7f:54:e5:
                    25:68:97:ae:56:c7:9a:c5:fc:48:bb:9d:6b:ea:e9:
                    48:83:5d:e8:0c:81:e3:e1:44:78:3a:9f:8a:19:3e:
                    4c:84:2a:07:5d:70:2a:49:81:c3:8f:2c:a4:20:40:
                    c0:ee:25:4c:7e:ac:66:8d:62:b8:c8:94:5e:71:0e:
                    70:99:f1:b3:a8:70:e0:5d:3c:b3:d7:dc:d4:7b:cd:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:4F:5A:61:F2:4D:C1:E7:31:B0:57:27:CC:2B:09:30:F3:CB:D0
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:28:ef:a6:83:c8:85:c8:b3:dd:4e:3d:ee:fe:97:a1:33:
         c2:6c:90:66:45:47:7f:4f:fc:45:ff:fe:66:31:fb:28:d4:4c:
         1f:6e:dd:76:38:2e:34:a1:f6:02:4a:91:5b:51:9a:bc:60:e8:
         6c:e7:74:a5:cb:bf:b8:39:7e:3d:1f:8e:6e:00:39:50:6e:6c:
         27:b2:5a:8a:72:5f:d2:5b:66:e0:07:e8:36:ef:40:8e:dd:2d:
         98:a8:28:3d:ff:13:c8:a1:58:3a:88:c4:5b:e0:ff:7a:d4:2e:
         2e:7e:12:d7:bf:24:cf:64:38:f6:a5:b3:f9:4b:58:44:06:6e:
         92:b9:05:d2:8f:a3:c1:70:4d:b9:04:cb:90:5b:e5:ff:f6:8b:
         1e:0e:22:c2:2e:25:6b:97:ff:d3:e1:ef:2d:e4:4c:b4:55:d7:
         63:a1:a3:32:6b:45:e7:43:c1:a4:61:56:9e:85:8d:fe:d2:f8:
         d2:49:73:57:a3:de:59:8a:9f:cf:92:1b:2f:00:76:98:f5:4d:
         fb:50:da:b0:47:38:3d:f9:00:56:1c:a1:c9:62:29:64:80:93:
         00:d0:aa:8c:c6:7a:c1:1e:39:f2:0f:43:a6:f0:68:fe:c6:e2:
         1e:cc:5a:05:e3:ae:c9:7a:50:94:33:32:00:59:98:f7:5e:e4:
         5a:71:34:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTW1vDn11o6xuACgdB/4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjYwMzI2MDQwMDU2WhcNMjYwMzI3MDQwMDU2WjAzMTEwLwYDVQQD
Eyg2MTVmNGY1YTYxZjI0ZGMxZTczMWIwNTcyN2NjMmIwOTMwZjNjYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol3g7udIq4V9ca8Gv45LVdQe/HkH
CFl6B2LXPOyFa5g19K7axN0GpEn5QcfWxInw9M3LyXsAzXbM1nwtxchVzlRGgE9n
2vG/PaOUq8ag6gqvApp9dVlnX2kA6r+CL6u1l33GmCeFLCCHplLWT41aHunKeYLN
Elj5DM3gov9wxAaeMr6Be4/pGkNxSFkP+suJ32NHnNvLg3qgCvdK2WNeNgrra4ky
F78Nla/WJElx8s1/VOUlaJeuVseaxfxIu51r6ulIg13oDIHj4UR4Op+KGT5MhCoH
XXAqSYHDjyykIEDA7iVMfqxmjWK4yJRecQ5wmfGzqHDgXTyz19zUe830UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFfT1ph8k3B5zGwVyfMKwkw88vQMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+Ao76aD
yIXIs91OPe7+l6EzwmyQZkVHf0/8Rf/+ZjH7KNRMH27ddjguNKH2AkqRW1GavGDo
bOd0pcu/uDl+PR+ObgA5UG5sJ7JainJf0ltm4AfoNu9Ajt0tmKgoPf8TyKFYOojE
W+D/etQuLn4S178kz2Q49qWz+UtYRAZukrkF0o+jwXBNuQTLkFvl//aLHg4iwi4l
a5f/0+HvLeRMtFXXY6GjMmtF50PBpGFWnoWN/tL40klzV6PeWYqfz5IbLwB2mPVN
+1DasEc4PfkAVhyhyWIpZICTANCqjMZ6wR458g9DpvBo/sbiHsxaBeOuyXpQlDMy
AFmY917kWnE0DQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:48 2026 by rpki-client