Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File:                     abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier:          Cw4KQ90e5xNoPFoB9lddPxpKtXr7xztk9I6RJhkZfqo=
Subject key identifier:   FE:94:EF:08:87:9A:0A:AD:FC:62:F0:2B:60:AE:12:86:57:19:C5:50
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer:       /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial:       019D27A8C1A8789215B6859D60A9F037DCC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number:          0652
Signing time:             Thu 26 Mar 2026 01:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:04 +0000
Files and hashes:         1: F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa (hash: VvXIzi7dvfLzRfzq8yrSH5FHAFTW+ckA8+wnrvNtY0E=)
                          2: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: NYAeLS9cvdz2YYJkL/8zKKeWY/y7EVf1Hc6G8LRFDlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:c1:a8:78:92:15:b6:85:9d:60:a9:f0:37:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
        Validity
            Not Before: Mar 26 01:01:04 2026 GMT
            Not After : Mar 27 01:01:04 2026 GMT
        Subject: CN=fe94ef08879a0aadfc62f02b60ae12865719c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:e2:00:61:11:98:48:37:61:cb:0a:b8:df:
                    2b:64:19:8d:73:76:09:64:51:c1:bf:f4:1f:7a:3b:
                    eb:30:d6:3b:3a:01:d0:5e:1d:54:29:36:99:5b:77:
                    3e:ec:39:59:be:e5:6c:a0:23:96:e6:4d:f9:50:fe:
                    1c:85:b6:16:bf:a4:a5:6b:29:f9:79:9d:a3:9e:e8:
                    18:d1:de:09:92:da:80:4a:23:1f:91:de:62:96:4f:
                    5a:20:8d:07:15:71:84:82:d4:45:a7:3c:31:07:db:
                    c3:cf:95:29:52:d7:e3:96:49:0d:84:ba:a9:93:86:
                    57:f5:08:44:4c:78:02:71:77:39:e1:21:41:ab:8d:
                    92:75:0a:43:4a:da:2f:2d:5d:0e:69:82:f7:7f:6f:
                    db:68:52:0b:b6:8f:76:dc:71:94:4f:0b:e8:90:57:
                    81:c9:15:95:a2:be:1e:3c:9f:d3:53:5d:a5:6b:83:
                    92:9e:ad:cc:ca:79:b5:23:7c:2a:53:5d:d8:3e:d8:
                    0a:90:55:a4:17:3a:9a:f8:30:d7:09:5c:7d:3c:dd:
                    68:fa:25:69:50:af:4b:c4:30:1d:2d:21:40:75:f1:
                    50:d5:fe:95:14:2c:3f:fb:18:94:71:d9:96:00:78:
                    1c:3e:a3:4b:50:73:04:81:ec:d4:cc:a2:12:48:4b:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:94:EF:08:87:9A:0A:AD:FC:62:F0:2B:60:AE:12:86:57:19:C5:50
            X509v3 Authority Key Identifier:
                keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:e3:aa:83:70:ba:62:21:d7:54:54:e8:e2:6c:ab:a7:ea:
         6f:36:97:93:9c:68:ca:f9:a5:d7:45:b3:8d:05:0e:70:fa:a8:
         b6:0b:63:94:ac:ca:6b:0b:93:54:f6:7e:ae:80:0b:46:0c:de:
         dd:32:c0:c2:be:12:61:bb:07:29:96:6d:8f:89:9d:80:cc:b3:
         d9:60:7c:c6:8d:cf:48:ac:c5:41:5d:d8:ac:16:6a:ff:5d:6a:
         a2:b2:78:0d:9a:7f:76:db:9f:07:a7:da:9d:fd:42:b5:c9:21:
         0d:74:08:81:10:07:e3:b8:0c:b4:db:c2:57:7d:c8:28:07:e6:
         4a:74:10:91:e8:a0:2d:54:f4:00:93:06:b3:b2:08:28:8b:a6:
         1e:ca:d6:d9:4a:36:8c:35:88:3e:a8:ce:0e:d2:8a:94:aa:2e:
         6c:7e:e5:f3:78:6f:d2:c6:67:74:06:51:8c:70:6c:07:66:09:
         ad:94:60:2c:18:de:29:44:6d:95:eb:b8:93:0b:5a:4f:74:c5:
         17:6b:af:a7:f9:8d:d2:1f:35:4b:59:45:dc:32:73:37:61:eb:
         1a:24:23:56:fe:1a:04:a5:75:56:70:90:b8:5d:5c:48:eb:11:
         97:f8:32:3f:db:37:a1:73:3d:51:69:73:19:88:d3:88:a2:1c:
         7f:82:d8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMGoeJIVtoWdYKnwN9zAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjY2YzZlOWExNGM2ZmQ3NzNmYTMxZGY5ODIwYjMzOTY5
NTJlMmUwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
EyhmZTk0ZWYwODg3OWEwYWFkZmM2MmYwMmI2MGFlMTI4NjU3MTljNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPiAGERmEg3YcsKuN8rZBmNc3YJ
ZFHBv/QfejvrMNY7OgHQXh1UKTaZW3c+7DlZvuVsoCOW5k35UP4chbYWv6Slayn5
eZ2jnugY0d4JktqASiMfkd5ilk9aII0HFXGEgtRFpzwxB9vDz5UpUtfjlkkNhLqp
k4ZX9QhETHgCcXc54SFBq42SdQpDStovLV0OaYL3f2/baFILto923HGUTwvokFeB
yRWVor4ePJ/TU12la4OSnq3Mynm1I3wqU13YPtgKkFWkFzqa+DDXCVx9PN1o+iVp
UK9LxDAdLSFAdfFQ1f6VFCw/+xiUcdmWAHgcPqNLUHMEgezUzKISSEseXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6U7wiHmgqt/GLwK2CuEoZXGcVQMB8GA1UdIwQY
MBaAFGm2bG6aFMb9dz+jHfmCCzOWlS4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYt
NDJkYzgyY2NhMTkyLzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYtNDJkYzgyY2NhMTky
LzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7bjqoNw
umIh11RU6OJsq6fqbzaXk5xoyvml10WzjQUOcPqotgtjlKzKawuTVPZ+roALRgze
3TLAwr4SYbsHKZZtj4mdgMyz2WB8xo3PSKzFQV3YrBZq/11qorJ4DZp/dtufB6fa
nf1CtckhDXQIgRAH47gMtNvCV33IKAfmSnQQkeigLVT0AJMGs7IIKIumHsrW2Uo2
jDWIPqjODtKKlKoubH7l83hv0sZndAZRjHBsB2YJrZRgLBjeKURtleu4kwtaT3TF
F2uvp/mN0h81S1lF3DJzN2HrGiQjVv4aBKV1VnCQuF1cSOsRl/gyP9s3oXM9UWlz
GYjTiKIcf4LY+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:59 2026 by rpki-client