Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          4clrArdrZWCucpguYPAjkJNW1xpog58+nJnPwy0OVFI=
Subject key identifier:   31:9E:81:1B:10:AA:4D:C1:F1:8D:14:C9:45:3E:16:A7:B3:62:21:07
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019D2704CDEC4761FACFA5E057922690F45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1965
Signing time:             Wed 25 Mar 2026 22:01:59 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:59 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:59 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
                          4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=)
                          5: 3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa (hash: nBPyAA0DKhBkjVysZ8vABPe+cEvgn6LLEUpiFGRroy0=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: 8sxlG_ERzpJY-DrWbCJVeSyivJc.roa (hash: 9JU8Lr30fMhxDVV9hEMZqzi9bdp5C4wErnIwMwEa1+0=)
                          8: Ckbmwdo69uWZLFdhnIqi1EVx-As.roa (hash: 0See61yjqZJwFH53PpcLw3mYiFIVA0D2E4nf89wyg+A=)
                          9: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          10: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
                          11: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          12: MJaBHnPBPoiX26U_szdp7RvWUtQ.roa (hash: qFctKJR4yu14bDLmMuycFB3M33Jqb8VwTlP3l9MF2n4=)
                          13: PkTdOvHQpAoLE5-E62yI2NnbOcc.roa (hash: BRkGV2HSAKwuVpy88X5Qo6iT+ihU5FcatMIoPr6oe40=)
                          14: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          15: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          16: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: j/7s85P5Hi+ROnPX+L3aZYB+vVetpH1zIauvJy/Vq+U=)
                          17: TepoQzb_OkN02aVrqQzItNSAQBw.roa (hash: sQa9lUNFIpLbzUpA5kRg5OnEndSxlkazblBiFu60bkw=)
                          18: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          19: ZMw3cABI3jeCzMfqSI0aApS6QDU.roa (hash: 0yaPTYckWtuZprVw19TlXaMtQC9ymP6ykZcR1615rtk=)
                          20: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          21: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          22: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          23: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=)
                          24: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=)
                          25: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=)
                          26: pGeq0B-Mzg0q4NmMgPUNvpE-lTI.roa (hash: cINCKzd3dIf/VdNxQaJ9bIeKFH1cTlbmZ9wu/VN+feI=)
                          27: pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa (hash: 19H5Cq04EoIbtLtQ6pQZI4NLRRYo9hTA+ljxOZbOlF4=)
                          28: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          29: qQwoj-lvFgwrTMYCWnq277mmLYc.roa (hash: tkvX7T4aPlyqb1XDA+Dl43Hzu/nYgxP4G9hG01NwRI0=)
                          30: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          31: suovzHsoDlN0Hb2AdeewhUysXlk.roa (hash: DecZNdwPz60RPQKYYm+RGNe+i+BUh+N2BaGtnkWEt/U=)
                          32: vfcIEd89w7RHFNMpkDPFKdiuSXU.roa (hash: ixlqDv1r7we5MxrflT22tc1tM+oGVmsMKCPwwcmUkV0=)
                          33: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:cd:ec:47:61:fa:cf:a5:e0:57:92:26:90:f4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Mar 25 22:01:59 2026 GMT
            Not After : Mar 26 22:01:59 2026 GMT
        Subject: CN=319e811b10aa4dc1f18d14c9453e16a7b3622107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:38:2c:7d:11:7d:fc:00:67:95:c7:8e:74:
                    0a:2c:f7:c2:e9:26:09:90:9a:fb:40:30:de:c3:72:
                    8f:92:d1:51:bc:26:94:de:e6:5e:f0:91:b9:21:01:
                    f4:c0:de:c6:6a:16:2e:60:7e:cc:a7:11:61:6f:da:
                    12:e6:03:02:2f:74:9d:b2:63:38:3b:50:42:10:0e:
                    7f:36:c2:91:b0:3b:17:12:e6:7c:d5:f6:29:70:ec:
                    9f:b7:ed:6b:da:32:15:03:df:08:9e:f8:e3:24:52:
                    02:ca:7e:6c:3d:3c:fd:23:4c:71:5c:a1:47:f9:1e:
                    68:50:de:9a:5c:43:c3:ec:5a:55:7e:4b:a3:0c:6a:
                    f3:80:67:8a:91:a2:bc:0a:28:e9:da:b8:34:ce:c8:
                    f9:78:ba:86:aa:9c:6a:4b:d3:be:30:14:7a:41:66:
                    89:d1:a7:4a:13:50:7a:58:19:02:55:7c:a4:78:ff:
                    e7:36:5d:2a:c7:b2:af:bc:47:97:81:cc:89:9c:1a:
                    51:4f:a7:f3:fd:0d:61:e7:3d:e1:f4:cd:45:8c:e2:
                    08:82:75:34:d0:05:16:bf:0c:0c:a1:0b:f9:0b:b5:
                    92:78:5f:98:40:22:86:7e:77:4e:de:4b:53:b7:2e:
                    fd:00:21:2d:c3:cf:7c:65:53:57:54:8f:9a:b7:cd:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9E:81:1B:10:AA:4D:C1:F1:8D:14:C9:45:3E:16:A7:B3:62:21:07
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0b:0a:bd:59:d5:fe:a0:ed:b4:df:de:b6:cb:02:ab:84:82:
         cf:05:71:15:fe:c3:00:5d:9c:1d:f8:f5:53:42:10:36:e3:cf:
         46:d1:c2:9c:4c:04:01:89:cc:6c:2e:7e:35:a0:65:ac:8e:fb:
         34:bb:29:b2:58:a6:87:f7:f2:63:97:08:cf:40:a2:d7:02:b4:
         79:a1:1e:24:69:54:14:c9:29:93:a5:94:66:5a:cc:b5:93:ae:
         7d:50:fa:7b:a0:43:a7:c7:d4:56:39:39:02:00:55:ee:7e:ca:
         51:d7:0e:f3:32:57:64:93:ef:28:45:2d:68:ca:5e:76:17:29:
         77:0a:7a:6a:4c:48:29:a4:01:1a:2d:9b:9d:b3:63:eb:f3:a4:
         75:e0:17:40:ac:fe:d2:4c:59:f6:4e:c7:43:19:50:0a:3e:43:
         08:19:e7:b4:5b:58:9e:0a:a0:36:5d:ab:ce:c4:b7:b3:20:b4:
         03:b8:aa:1e:3b:da:7e:9f:70:d2:1f:9b:e0:f6:e4:7f:10:27:
         98:c0:b2:5f:d0:58:dd:8a:2f:6c:fa:38:60:7a:83:ce:8f:6b:
         c8:89:79:b5:8d:2c:9f:a3:05:25:98:bd:eb:99:18:5b:29:a6:
         b5:e1:e8:45:b9:fb:c2:81:a2:ca:eb:9c:dd:ef:0a:37:06:a6:
         67:d7:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:52 2026 by rpki-client