Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          wR+uLokFHxQ1qAef/X0AjFsxcPzI+Kk1BvpkOpLtDfg=
Subject key identifier:   93:AD:27:8B:02:0A:7C:7C:E3:CB:60:CC:C8:02:B6:E7:80:73:5F:05
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019D2884641FF9B18EAA27CC4F1950C4944A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          080A
Signing time:             Thu 26 Mar 2026 05:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:58 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: 4gQBISyS2CvzAL50Hm9TV5wDyTcY3I8cQ7bX3BYxOnw=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa (hash: kECzxgTvYO+PrdxQixZUCF66WT+yJQBNEFYIJiJ2PsM=)
                          7: 8tbwcDTEWxf0dgERaTp1edZPByo.roa (hash: aXZAfMJklLbbNeNG0FdJjvjAVdaoK3lAXPVc0ZbcDJo=)
                          8: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          9: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          10: CkCDhPbCna91c--nA7KEJZUC0FA.roa (hash: SCFhK7kq7enPygOGahP+XtF61sybJv999OYFUdH7i+M=)
                          11: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          12: Dry5fmI7vbYODg3IRPL7HNkMZEE.roa (hash: pqWEYcMTMmr2xp+JOotJI+53hcGjaHkqIQLS6j9AKUU=)
                          13: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          14: K67tfvE4FRSPvLt2l542G0220Hc.roa (hash: b1V/he+PINE8CRmplDLJWQIH+333uWnJMPhoYbftnuE=)
                          15: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: gj04uIHrV_C75Lz74FAYqP9RICg.roa (hash: g0/xETr32Yp8RgO9lzjP5xC62gdaahVlkFWHIAJsqhA=)
                          19: jThJ8zyPfDON0l1aonw1ID8g1mg.roa (hash: jThi472vhZRzgny5FoiQHNxN0cWcyfPRCG/AaRi78ZE=)
                          20: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          21: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          22: pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa (hash: 6ImAyjB++uGSJlAdPGguoq0Hb1TaQ164wmSn84u2CX8=)
                          23: ucdt-9U9uLgFKY9KoDahOi5EY1o.roa (hash: 4MR+A0UJDoXwvizY/3LZE7fqk6s46995FJs3DydY+O0=)
                          24: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          25: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          26: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:64:1f:f9:b1:8e:aa:27:cc:4f:19:50:c4:94:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Mar 26 05:00:58 2026 GMT
            Not After : Mar 27 05:00:58 2026 GMT
        Subject: CN=93ad278b020a7c7ce3cb60ccc802b6e780735f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:70:9c:80:69:e0:77:49:05:9e:7b:04:d8:
                    2a:0b:8f:56:0a:05:c4:71:f8:0d:58:0e:3f:d8:0c:
                    2d:fd:9f:b1:ee:07:35:d2:52:ab:07:c4:14:02:c5:
                    40:e7:70:ca:19:3f:b1:a0:b8:0b:6c:7f:e7:2e:35:
                    2b:c4:9c:bb:d5:79:a5:6e:05:0b:0d:da:fe:79:f6:
                    7a:a4:5c:56:f8:61:c8:ff:bb:36:27:ee:8c:12:4e:
                    6f:56:59:7b:d6:eb:2b:a7:ef:e5:42:d9:97:70:22:
                    5f:0c:8f:1d:6a:30:18:c1:1d:b2:71:50:f1:81:33:
                    d0:0a:e7:88:85:83:2a:09:35:ea:4c:0b:73:ac:1d:
                    a1:95:2b:8b:c0:e7:63:fa:8a:49:15:77:f8:e4:ae:
                    bf:31:9e:38:c6:b9:1c:4b:16:cd:71:17:eb:c2:53:
                    a4:2c:68:59:1b:15:7e:e0:e5:ea:8e:b4:70:50:30:
                    80:73:99:79:34:f5:ff:d4:2b:de:1b:2a:f5:51:4d:
                    cc:4a:3b:a3:23:f3:66:3f:ab:a9:c3:cd:32:ab:8b:
                    95:0e:b0:dc:39:9d:03:c6:de:f2:e1:0e:9b:7e:10:
                    36:af:62:f8:df:39:10:13:58:c1:b8:4b:ee:22:14:
                    99:6e:b6:70:ac:9e:41:01:50:de:02:61:dc:cd:8f:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:27:8B:02:0A:7C:7C:E3:CB:60:CC:C8:02:B6:E7:80:73:5F:05
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:0d:0a:d3:27:91:26:f5:87:39:f3:01:32:a5:0f:cc:54:
         0b:0a:12:15:96:3d:b1:e3:1d:33:fe:7c:e1:ce:44:c1:eb:3a:
         19:9f:42:c3:fc:d6:ae:08:5b:62:84:3e:f0:fe:4a:c1:6a:36:
         e7:d0:57:66:bd:08:f0:5c:b0:a3:04:92:53:96:ad:d9:3b:0a:
         1b:2f:4c:c2:19:22:07:d1:cb:aa:e6:c4:09:08:04:7d:bc:6f:
         be:4c:04:42:89:aa:c3:36:4b:20:4d:0c:33:8c:85:24:b5:be:
         ba:96:97:1a:17:23:37:b7:4b:9d:b2:c2:3a:bf:60:82:c4:59:
         b4:91:92:ff:9a:3e:77:19:a7:90:b1:00:a4:e9:0a:bc:01:af:
         fd:52:f6:ad:f9:73:a5:c9:05:6d:02:33:24:73:cc:43:94:4e:
         4d:00:5f:75:ab:3d:00:4c:eb:45:06:3b:ab:a0:48:e8:9f:43:
         99:55:04:48:bf:19:7f:a5:86:5e:8a:87:a3:bc:e8:65:d5:62:
         31:72:0c:d6:11:1e:01:c4:6f:cd:ab:3a:f5:ce:58:41:aa:a6:
         e8:84:3b:09:e6:2d:cd:10:d2:a4:76:02:df:85:30:bf:78:6e:
         7a:2b:77:23:93:c4:c0:f2:65:a0:87:f8:9a:4b:ae:11:27:34:
         e1:ed:3d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGQf+bGOqifMTxlQxJRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwMzI2MDUwMDU4WhcNMjYwMzI3MDUwMDU4WjAzMTEwLwYDVQQD
Eyg5M2FkMjc4YjAyMGE3YzdjZTNjYjYwY2NjODAyYjZlNzgwNzM1ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd9wnIBp4HdJBZ57BNgqC49WCgXE
cfgNWA4/2Awt/Z+x7gc10lKrB8QUAsVA53DKGT+xoLgLbH/nLjUrxJy71XmlbgUL
Ddr+efZ6pFxW+GHI/7s2J+6MEk5vVll71usrp+/lQtmXcCJfDI8dajAYwR2ycVDx
gTPQCueIhYMqCTXqTAtzrB2hlSuLwOdj+opJFXf45K6/MZ44xrkcSxbNcRfrwlOk
LGhZGxV+4OXqjrRwUDCAc5l5NPX/1CveGyr1UU3MSjujI/NmP6upw80yq4uVDrDc
OZ0Dxt7y4Q6bfhA2r2L43zkQE1jBuEvuIhSZbrZwrJ5BAVDeAmHczY/DiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOtJ4sCCnx848tgzMgCtueAc18FMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI48NCtMn
kSb1hznzATKlD8xUCwoSFZY9seMdM/584c5Ewes6GZ9Cw/zWrghbYoQ+8P5KwWo2
59BXZr0I8FywowSSU5at2TsKGy9MwhkiB9HLqubECQgEfbxvvkwEQomqwzZLIE0M
M4yFJLW+upaXGhcjN7dLnbLCOr9ggsRZtJGS/5o+dxmnkLEApOkKvAGv/VL2rflz
pckFbQIzJHPMQ5ROTQBfdas9AEzrRQY7q6BI6J9DmVUESL8Zf6WGXoqHo7zoZdVi
MXIM1hEeAcRvzas69c5YQaqm6IQ7CeYtzRDSpHYC34Uwv3hueit3I5PEwPJloIf4
mkuuESc04e09tA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:16 2026 by rpki-client