Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          JTYF57oMpiQX3a+RefPCeH3D/NtMlPXrw5uTKATZULQ=
Subject key identifier:   18:6F:22:EB:B2:B4:E8:55:61:06:3F:2D:D0:DC:5C:FF:97:EF:4F:53
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019D27A86CEE5B8CAAA2F1C6578797A1FBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          18E7
Signing time:             Thu 26 Mar 2026 01:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:42 +0000
Files and hashes:         1: 07YHnmSGL3DGY6c5DbcijP217LQ.roa (hash: 12gHzQSyTMLeGjVAmr1zmwWq9fnXc3yyJAMhoMfsUbI=)
                          2: 1-vNISdAgr1vxuSu-Toco8sAAfmc.roa (hash: FafBdHtMW1cgxu/h4FqfgmHc5gJkbiyqRpvw+bdoRVc=)
                          3: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: cY14XhG807OamBAUE51MhafC3jk6e43tR9ZujvpkXfE=)
                          4: 3NoAtRyFyT3mqxuhl8rikGi6CPw.roa (hash: UkQRBoygiIXUDqnF/nZfu6Z2PAxT1DRUs4/Fx1lQwIc=)
                          5: 7aadFBthJDyRQokVjXSNIVlep8Y.roa (hash: KQAgcbF+M8CSWiOXEQEIGdq+Cg4hNVChgiG9+pR/fMU=)
                          6: 88GXt-Nj8epfXsaOzg77sNdRo5s.roa (hash: xLg/Jf5JnayYecy0KNeCwmuhUM+tMuNIkboAxtbEGYM=)
                          7: 9SzKR2jRUVwOaueZVAhbWUN2hKk.roa (hash: FVohvzzEsQ8ZWQ3bVSw2whz2W6Fbc2vk/r+zxXJ8JGo=)
                          8: 9a7DiM85xWW0SUOHj55_qdtGlrM.roa (hash: /wdQL253QIgX63BRfrM9hjhyJ7le6nAjEl2iFxxdTHQ=)
                          9: BEr_R-Y76jDsSzh3bfESjoOwl0Q.roa (hash: XKEvtHfwkP1nMOaRrnUEt9y98qABQkwe3lGvAnv9row=)
                          10: HNnkcaU2Hh5IuZWTx2ax25PCVFo.roa (hash: QEMvN1hGawGHGM/XJD+BepVtmnpndyGrmsYjk5D0vXk=)
                          11: JBmh4xJQPOrgXhW8afp75WMHXtU.roa (hash: Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=)
                          12: Lj4vCV3CzpslBrQs2uQPQz0J-lI.roa (hash: 4PkaGjUOJQRMD/3HjoXORV26Z0v+UJe+d4n4F+P5Bew=)
                          13: QCeLT32TJH0BUjUrilhb7chA7xQ.roa (hash: F/9NdtpeCDeb/lM2ZGhLi9OKN6meb7oC3ZPfJfW/F4c=)
                          14: U-vM5k7kX-abfGLQNLBMdCq5aJw.roa (hash: bJBvjK0cokVnLIfc7kCrIZ00FbL6Ke3KrGBJupQgo1c=)
                          15: Ul9RpH6oBexBY5C_PA23LHZoBkc.roa (hash: XRUFccREziuIDl6+6nxzRgNDnHGi0XuldvNlFW7whIw=)
                          16: VEJFTWLInqVBVVVzjcXE8u0k4jU.roa (hash: MDCdlTYX/q6OjZDJTysgXveF6ZbyFuxNgUow4xZBH2M=)
                          17: Y_FLWnuNhEx2wO3ILnJnHpE8S50.roa (hash: 4sjgJfec1CI7poYdj8/LooNLid4ueqSY+AsJdUDwJp0=)
                          18: cGR-cZXHq1SVvLMV3yudMjgOmWE.roa (hash: 5J+DPS65ZibV4JHjVNRUad5cnyzzDzeOQ+1szjLfH/U=)
                          19: dMUsL87HVH-hWFe6QaT2O1cjz80.roa (hash: aQSqen+T1CnOwM6TpzsdO+vcc77lV4HKUI++ospju5c=)
                          20: f_VCnUgXclXXJeFK4ehEKaPm8bU.roa (hash: NU+9MIVHryfjHTTYgjstCko8E5LtsVYshqXivZ7/0Mw=)
                          21: sl1JvwMo_PnxNUT0n7b37VjHYBI.roa (hash: 4s59F4JeRBM9UIf8FZMIueAYaOBneqDZ1z5HCj442e0=)
                          22: xvqiP1uUbaodSEMAQDXDC58GS80.roa (hash: oaCy9//PkG6/HUpYGlrrSEfQitLFp/CqGYs5ulfXPTo=)
                          23: xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa (hash: 1zAXiE+IF/aHyRDjomYAlxs9J+15UvpbWtlzl8GfuYE=)
                          24: yt9D2jLsreAMWCWEdKVQm0MM7k8.roa (hash: lKhmu0VxkSr9o+yCKmoctbtSS//EnsnvUzIyvtwGci0=)
                          25: zSfbkXSSTZ9b4VM38AL0y2ev5KM.roa (hash: qh9HWWdJnJjIlbbHx9ULyJvN/7KGQA0brIGqvUHqcAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:6c:ee:5b:8c:aa:a2:f1:c6:57:87:97:a1:fb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Mar 26 01:00:42 2026 GMT
            Not After : Mar 27 01:00:42 2026 GMT
        Subject: CN=186f22ebb2b4e85561063f2dd0dc5cff97ef4f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:f1:88:9f:96:31:d5:c6:0f:d4:16:1e:f6:
                    86:99:db:94:d0:7c:d8:93:9f:d6:3f:5a:72:ec:5d:
                    68:b0:0b:e6:c8:b4:ed:28:46:cc:12:bd:93:eb:36:
                    af:57:73:fb:5d:2d:71:c4:1c:61:1b:45:e9:8e:50:
                    28:ee:d6:7b:df:c8:cd:5c:25:85:9d:4e:b0:bb:85:
                    23:32:23:5a:cf:c3:e6:de:a4:64:fb:e0:aa:46:8d:
                    8c:d8:92:7d:66:28:a9:d3:a4:fb:b0:2f:a3:32:af:
                    8d:fc:5d:e3:72:4d:11:1b:52:0c:b9:a2:b6:2d:17:
                    69:9a:09:5c:2e:4e:ea:45:cf:6c:27:42:8e:01:7f:
                    05:cd:d5:24:ce:69:83:13:21:f2:dc:25:36:1e:1f:
                    d2:67:34:29:20:b0:9e:0a:c1:37:64:1d:b7:9c:54:
                    df:d1:25:6d:62:18:97:73:ff:f3:0b:6c:cb:ec:df:
                    54:04:0f:54:c0:9a:0f:4a:34:49:78:44:58:42:6b:
                    6d:bb:87:9c:4f:29:6a:1e:98:06:db:a4:23:94:73:
                    e6:b6:7a:e0:91:cf:41:27:6b:80:df:2a:46:5a:d9:
                    21:db:2c:4b:07:b1:dd:0f:fd:7c:aa:67:78:d8:01:
                    b6:de:8b:5f:d0:97:34:89:2e:3b:1d:1a:a9:f8:e9:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:22:EB:B2:B4:E8:55:61:06:3F:2D:D0:DC:5C:FF:97:EF:4F:53
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:68:01:9f:61:99:5f:00:16:29:8e:20:63:17:1b:02:93:ec:
         3f:56:d5:98:03:12:95:ca:29:22:b2:92:8e:16:20:b2:ff:92:
         63:fd:bd:bf:ed:be:2a:e6:04:fe:eb:a3:c6:46:99:32:73:b1:
         68:18:b2:e5:0a:80:4a:e2:75:fb:cd:bd:ef:fa:37:77:ed:e3:
         dc:03:7c:d3:35:f9:0f:16:ec:80:69:f3:e9:df:54:df:6a:41:
         54:aa:38:83:79:ed:fd:3e:a8:ff:dc:dd:06:36:96:a6:17:48:
         cd:4d:4c:7b:f2:6b:57:0c:64:f6:e6:26:2b:e7:05:24:cb:8f:
         f5:b2:89:97:b9:ba:b7:0c:00:5c:3a:dc:a2:c7:b8:88:c5:21:
         d5:af:52:bf:1c:e7:c6:eb:6a:a7:a6:38:03:aa:81:19:31:3b:
         2b:66:89:76:ac:45:a7:73:61:fc:60:0d:f8:50:74:3d:b8:85:
         a0:d1:28:d7:80:2e:b6:ed:18:57:15:34:fa:ae:97:1d:6a:23:
         09:6a:40:95:79:3a:ae:49:59:23:53:b7:70:67:5c:6f:b4:d1:
         6e:2b:e1:20:ef:fa:ce:bc:a1:5d:ac:15:07:a5:f4:a8:38:41:
         4e:e7:f4:e9:a1:9d:58:79:51:83:3a:39:6a:e6:a4:27:d8:2f:
         54:4d:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:21 2026 by rpki-client