Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          RYzNcDSVXXYGQM770PtlosEL7rNfsExteOSb9E9b9mY=
Subject key identifier:   83:09:97:FD:1A:9E:79:5F:84:BD:35:EE:A1:A2:2A:EE:3F:52:4B:6E
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       019D26285C740421C208811711D051B8061A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          03C7
Signing time:             Wed 25 Mar 2026 18:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:12 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
                          3: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (hash: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs=)
                          4: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
                          5: FLzeXwMTcxPKK3Cylrlgedr-ojc.roa (hash: YhEZuAyUsLvSj9fGLqbsotQyMGnBUmdmRvWkAdNehQg=)
                          6: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          7: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
                          8: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          9: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
                          10: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          11: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
                          12: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (hash: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw=)
                          13: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          14: WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa (hash: SBFLbGd5ofqXRAn4g/0xvSlGhywAxzvjT5O22NBuorc=)
                          15: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          16: cxrFYholN9HvJ-us9fmJgzA0WI0.roa (hash: Wwa5EX50bfWPI0XbhpID/ZlbhKK3J9mlKgRfeQnAMPQ=)
                          17: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
                          18: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: kgbjMpm+cU3k0HGzFctTuPZZ0kYgjd3uHmoEJm5KKpE=)
                          19: f5M-hTzNDSSqohb0b1K4vjNcyxY.roa (hash: ciY50ZlYxva7aKDHcfCcjzo6LTzr/qKlBuKYyTji90k=)
                          20: fISbt3TEt5z7hvgEykaWZ1xKNyY.roa (hash: CfyvMhS9ewbjRLfiApY3927/WtEF1gMMScOXv02Vkr4=)
                          21: gIP9USWnnclcg29VZ6IPiCLAwfs.roa (hash: 5kwZkbeysJwaJZe9nLV8atLbSq1wE0MO56m8K6TUyD0=)
                          22: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          23: o-2kICnoHNfivNsTLGTpqOYwstQ.roa (hash: YkVOT+LP7w8mTJUbnwv0gEvNf1idVM4c+qYZj2+A7Oc=)
                          24: r9B02vmajGoqzJg47qEQQvo3CxE.roa (hash: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA=)
                          25: xp4XInmvIX6CC9Ex-JmVHgrbPgs.roa (hash: RHkZbfHLGorgQEqsyMXzjKwc68C6UanDs4STBF1Ck9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:5c:74:04:21:c2:08:81:17:11:d0:51:b8:06:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Mar 25 18:01:12 2026 GMT
            Not After : Mar 26 18:01:12 2026 GMT
        Subject: CN=830997fd1a9e795f84bd35eea1a22aee3f524b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:12:e3:3a:84:7b:ce:b9:0d:93:6f:14:6a:
                    ec:40:c4:ac:f0:e8:c9:13:56:8a:04:eb:2a:cb:87:
                    81:0d:88:30:b5:7d:6d:0b:e5:e6:ad:ca:1d:0c:c6:
                    eb:cd:9a:e3:d0:29:8f:99:78:7f:75:58:cd:cd:cf:
                    3c:83:9a:de:68:10:b5:0b:4b:f4:5b:a3:ad:45:0e:
                    d6:00:1f:25:12:f7:ee:31:20:a2:f5:75:68:e7:54:
                    ea:5c:70:02:81:cd:7b:00:3f:54:38:c0:3a:c5:1a:
                    35:8f:83:a5:a0:d2:bb:fa:b7:69:9c:76:d4:9e:39:
                    85:4c:61:63:ce:3b:a5:36:da:f7:37:fd:52:75:2e:
                    8c:ac:c5:fd:e7:0f:e8:4d:d2:e5:34:42:9f:95:55:
                    35:f7:8f:33:f9:f3:92:ed:16:28:76:87:c1:8f:91:
                    d2:03:ff:d8:a3:97:88:67:86:57:d5:45:d1:c4:09:
                    db:f8:e2:63:b8:fc:2e:82:f6:92:84:3a:54:87:5f:
                    e6:d9:4f:9a:bf:c8:e5:6d:64:7a:86:77:c1:c1:3f:
                    28:8d:01:35:d7:e8:e3:dd:df:9b:23:0e:71:ef:e1:
                    70:22:13:86:d0:ff:63:42:05:29:90:3c:f6:60:8e:
                    8b:95:60:b3:31:3b:fd:de:51:ac:4d:30:ec:67:97:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:09:97:FD:1A:9E:79:5F:84:BD:35:EE:A1:A2:2A:EE:3F:52:4B:6E
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:73:77:a9:b9:26:79:0b:77:73:12:32:1a:0b:d9:7d:ca:
         7a:e1:3d:2e:f6:be:4f:77:a7:49:ae:c3:90:8a:2f:1d:a6:03:
         b5:1c:25:ae:c4:b9:e0:ee:de:e0:f5:77:06:26:ab:8f:5a:3a:
         75:92:88:1e:6b:38:9a:61:85:17:bd:dc:06:88:6f:a2:06:15:
         ff:f7:f0:1b:a0:5c:37:d1:7d:45:64:1a:46:62:0b:b8:8c:38:
         d9:43:10:5a:94:7e:da:2c:71:41:02:b9:1e:86:fd:3f:41:29:
         1b:88:84:66:77:9b:eb:63:56:88:c4:81:95:73:f1:c7:4b:37:
         84:e9:9a:ee:92:98:b6:fb:2a:5d:a8:39:10:dc:fe:62:9c:dc:
         c0:d8:22:c7:07:73:64:3e:74:23:d8:f2:1b:07:c2:73:01:40:
         07:24:f5:7c:8a:90:e0:57:9d:d0:07:5e:ee:65:bd:a7:cf:44:
         8c:c7:6e:12:c8:7c:0b:fe:0b:f0:02:4d:de:a2:44:8e:c5:31:
         52:4e:e1:9a:f1:cc:19:7c:53:59:8c:1b:1d:69:46:11:a9:62:
         10:da:b1:56:3b:a4:cf:26:2a:15:bf:0a:12:ba:e4:78:63:d8:
         3f:5f:d1:97:76:29:fd:bb:ee:37:57:af:36:34:c0:f9:95:38:
         39:a7:1b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFx0BCHCCIEXEdBRuAYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjYwMzI1MTgwMTEyWhcNMjYwMzI2MTgwMTEyWjAzMTEwLwYDVQQD
Eyg4MzA5OTdmZDFhOWU3OTVmODRiZDM1ZWVhMWEyMmFlZTNmNTI0YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5wS4zqEe865DZNvFGrsQMSs8OjJ
E1aKBOsqy4eBDYgwtX1tC+XmrcodDMbrzZrj0CmPmXh/dVjNzc88g5reaBC1C0v0
W6OtRQ7WAB8lEvfuMSCi9XVo51TqXHACgc17AD9UOMA6xRo1j4OloNK7+rdpnHbU
njmFTGFjzjulNtr3N/1SdS6MrMX95w/oTdLlNEKflVU1948z+fOS7RYodofBj5HS
A//Yo5eIZ4ZX1UXRxAnb+OJjuPwugvaShDpUh1/m2U+av8jlbWR6hnfBwT8ojQE1
1+jj3d+bIw5x7+FwIhOG0P9jQgUpkDz2YI6LlWCzMTv93lGsTTDsZ5fPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMJl/0annlfhL017qGiKu4/UktuMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRxzd6m5
JnkLd3MSMhoL2X3KeuE9Lva+T3enSa7DkIovHaYDtRwlrsS54O7e4PV3Biarj1o6
dZKIHms4mmGFF73cBohvogYV//fwG6BcN9F9RWQaRmILuIw42UMQWpR+2ixxQQK5
Hob9P0EpG4iEZneb62NWiMSBlXPxx0s3hOma7pKYtvsqXag5ENz+YpzcwNgixwdz
ZD50I9jyGwfCcwFAByT1fIqQ4Fed0Ade7mW9p89EjMduEsh8C/4L8AJN3qJEjsUx
Uk7hmvHMGXxTWYwbHWlGEaliENqxVjukzyYqFb8KErrkeGPYP1/Rl3Yp/bvuN1ev
NjTA+ZU4Oacbrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:52 2026 by rpki-client