Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          hyG5A8QxpgU/GmuztkY+8Ds0hCxbT+W4gD4NLuDgdtE=
Subject key identifier:   C3:C8:B9:3C:69:DD:00:FC:A2:5E:1B:1F:BE:A7:61:13:8C:40:96:EE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019E1D22FE1012C36342AC5E9D35B19900B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0836
Signing time:             Tue 12 May 2026 17:01:32 +0000
Manifest this update:     Tue 12 May 2026 17:01:32 +0000
Manifest next update:     Wed 13 May 2026 17:01:32 +0000
Files and hashes:         1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
                          2: 1qKLqB7YGK13o6kurhGQsYZetmo.roa (hash: 1gJBGB9klrHZSwVL2SLeIR4sc4/6k+hLxWUNUcJftrk=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          10: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
                          11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          12: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          13: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          14: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
                          15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: rOwdBl6dhtcw5A7lmNazEVO+c88chnu+AbOUhrEGquo=)
                          17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          18: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
                          21: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
                          22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          23: x0w0SJYyBODLjpKGKi2OvtCd5BY.roa (hash: /oU3eS+zy0/9a9tpbxNFxOY3NXEHHhBLy521R4xGw7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:fe:10:12:c3:63:42:ac:5e:9d:35:b1:99:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: May 12 17:01:32 2026 GMT
            Not After : May 13 17:01:32 2026 GMT
        Subject: CN=c3c8b93c69dd00fca25e1b1fbea761138c4096ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:f3:96:11:ad:e1:b7:c0:f5:a9:57:66:5e:
                    c6:73:19:c1:81:d0:b0:fd:27:6c:55:6d:fd:25:f9:
                    c1:a4:0d:df:eb:39:ed:55:77:47:9e:0e:b5:bd:e2:
                    d8:a2:a6:f1:f5:7c:be:2b:c5:02:05:f8:82:04:b6:
                    7b:22:49:b4:3a:72:3d:3d:71:c4:2a:bb:98:2c:3d:
                    d4:24:d6:c7:b6:13:e4:76:54:8d:aa:97:44:b6:03:
                    0e:0f:38:21:04:1d:fb:5d:50:29:bb:8d:bf:9b:b9:
                    12:f9:bb:c9:13:2e:c2:02:c7:1e:78:3b:1b:10:71:
                    96:7c:f1:b7:4a:54:40:5e:16:6f:13:aa:43:6d:5d:
                    71:1f:14:9b:b8:39:fe:21:7e:c0:b5:90:78:d1:f2:
                    70:de:13:88:d0:23:00:e5:a0:6c:a4:9f:8c:26:c5:
                    a9:ac:a6:fa:87:47:da:36:00:bf:c5:f7:4a:e7:d7:
                    db:52:f7:c4:7b:e2:4b:4d:08:b3:31:b4:dc:2a:6f:
                    69:43:8d:38:99:d3:af:bd:ad:96:11:7f:55:96:0e:
                    c2:0a:95:4e:5c:79:bd:e9:97:98:e0:27:44:f7:77:
                    d1:a2:ef:5e:7f:f4:f6:c5:78:55:58:e7:c7:e3:5b:
                    3a:d5:05:dd:b0:71:5a:2a:f7:dd:53:47:03:86:76:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:B9:3C:69:DD:00:FC:A2:5E:1B:1F:BE:A7:61:13:8C:40:96:EE
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:89:d9:b5:a4:43:90:ea:aa:49:4f:b6:36:24:36:36:93:4c:
         7c:a0:8b:e7:af:ea:82:ba:4d:6a:5d:5a:ff:61:0a:20:37:31:
         7f:a5:92:44:3a:b2:89:41:8d:2e:ee:9c:b6:7d:b1:4c:18:55:
         1d:a9:28:37:58:76:97:85:eb:51:7d:1f:c3:e6:0b:be:ee:3e:
         71:5c:5b:2e:66:2e:f8:ab:a9:42:dd:05:19:eb:0c:70:6a:e0:
         40:a8:b8:e7:e7:45:d3:97:9d:4f:6e:4f:e6:84:a3:bf:e8:da:
         11:11:ec:bc:b7:78:7b:ef:a7:ca:8f:4d:83:92:fe:37:82:2b:
         5e:85:0b:d0:44:60:c7:9c:09:8f:13:2f:4f:31:47:41:d9:c1:
         6f:7d:54:c0:c0:db:cb:a4:df:2e:db:bc:0c:7f:29:f7:a7:f9:
         79:38:e3:9d:73:55:0d:e1:b4:88:fc:a1:01:78:07:7d:4b:65:
         7c:b8:3a:4a:63:5a:2c:7c:60:90:61:87:b6:5b:bc:82:f5:b9:
         3f:24:a2:79:f3:ed:1a:94:3e:b5:ca:7f:74:27:3f:73:5c:67:
         84:33:15:de:ba:8d:ab:23:04:92:44:b1:fb:e6:e3:0e:e5:f7:
         c3:3b:68:bd:6d:2a:cc:19:32:58:ff:3a:cb:e1:e4:f1:73:32:
         b8:d4:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:33 2026 by rpki-client