Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File:                     Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier:          hWCSSLu4nJvGT0DI/qWU8P1JnnYD8DWnRmBfVLBOPc4=
Subject key identifier:   30:C8:CF:87:53:C3:DC:39:97:3E:78:4E:4D:EC:1C:47:08:EA:C8:C7
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer:       /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial:       019D2B176A13A49E93E9C369510DEEB5707F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number:          132C
Signing time:             Thu 26 Mar 2026 17:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 17:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 17:00:47 +0000
Files and hashes:         1: EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa (hash: ZJQ/gzwRRi9pvpHLyfjBfpX4ec0DDSgkEdKketimbco=)
                          2: HlDrFhE-0fmgWal__tHIEXBrV6Y.roa (hash: 0n+iwbGZ5id6XfahOr8AcTWOIpNGaPq/75qxuHkAIik=)
                          3: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: L+k3wX87pDe/mmiEi1tFvJ+ESpzvZtL4gCPNUYP9wLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:6a:13:a4:9e:93:e9:c3:69:51:0d:ee:b5:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
        Validity
            Not Before: Mar 26 17:00:47 2026 GMT
            Not After : Mar 27 17:00:47 2026 GMT
        Subject: CN=30c8cf8753c3dc39973e784e4dec1c4708eac8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:58:ff:d8:4a:1f:7a:03:d3:d2:e7:91:33:
                    74:b7:f2:49:1f:99:83:76:dc:fc:ea:64:4d:8c:18:
                    94:c3:b9:de:20:10:31:9e:31:b6:db:9c:82:2b:85:
                    5e:35:63:2c:02:87:d6:33:aa:69:58:48:de:bf:2a:
                    ca:00:93:4f:50:c0:a7:66:3c:52:d6:2c:e8:99:8a:
                    89:e0:dc:39:5a:96:22:a3:b3:14:a8:45:de:2c:56:
                    63:68:3b:6e:57:3e:19:7c:ca:61:a3:dc:17:3d:eb:
                    09:db:18:24:7c:ae:1a:c3:64:e2:42:f8:3b:f7:ec:
                    89:f1:bc:94:d8:e0:4a:3b:be:3c:2c:0d:ba:d3:88:
                    e0:86:0d:9f:20:f0:00:4d:e4:5d:25:b3:27:60:c5:
                    63:d6:8d:9a:0e:db:1b:bd:df:0f:5d:09:9b:39:a8:
                    24:dd:ff:1c:bf:75:1e:15:c9:f8:e8:c7:2e:c5:49:
                    7d:54:22:62:be:e4:44:20:74:26:29:b0:bc:3e:c3:
                    41:36:b2:32:12:57:64:07:6c:2c:7c:80:86:24:9a:
                    48:0e:f6:bf:57:c4:d4:40:4e:04:11:0b:11:dc:b7:
                    a1:90:10:38:74:8c:34:d0:98:5b:46:3a:6c:88:cf:
                    bb:f8:ed:f0:63:26:43:0b:28:82:e4:ee:d8:1f:84:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:CF:87:53:C3:DC:39:97:3E:78:4E:4D:EC:1C:47:08:EA:C8:C7
            X509v3 Authority Key Identifier:
                keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:93:db:d1:cc:11:82:c0:89:cf:f0:1a:40:07:9e:90:a8:
         36:e1:78:77:a1:c8:ac:77:2a:93:8b:b9:fb:18:bc:a9:d2:58:
         63:28:25:18:81:ca:3a:52:c2:0c:e4:2a:86:f6:1f:bc:b1:36:
         21:e7:56:87:88:bd:04:9f:75:25:a2:f1:f3:1e:0a:56:9a:82:
         61:7d:f9:e0:62:09:89:07:aa:ab:60:f1:16:c3:bc:0f:2a:cc:
         82:b2:fb:bd:18:96:5d:23:24:3f:69:46:22:56:59:d7:95:45:
         26:12:eb:da:3f:57:d8:d1:91:ee:f8:fd:9e:6c:b8:b3:52:f6:
         43:23:8d:39:40:0b:51:e0:58:09:e5:d9:99:11:33:dd:67:e5:
         9c:c0:c0:98:1c:cb:c0:3d:f3:5c:e5:a0:1e:24:b1:68:6c:91:
         f7:ad:1d:77:9e:84:36:67:64:d4:74:91:32:31:12:ea:2c:54:
         92:0b:1d:0c:e0:28:1f:82:93:29:43:d6:54:d1:9a:89:97:28:
         ef:dc:1f:e6:2e:08:f6:0e:45:06:32:cd:4b:9e:f9:9b:f4:64:
         56:41:77:8c:df:85:9e:73:4d:8b:ab:e3:3c:b5:46:ff:bc:42:
         d3:a9:3c:2a:56:35:7d:c6:8b:59:61:3a:3e:f3:9f:6f:d9:e0:
         5b:1d:90:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF2oTpJ6T6cNpUQ3utXB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGY3YjJkNjhiYTc2YTBiZDFiYTdlOWQyOWZhYzU4NTIz
MTZiOWMwHhcNMjYwMzI2MTcwMDQ3WhcNMjYwMzI3MTcwMDQ3WjAzMTEwLwYDVQQD
EygzMGM4Y2Y4NzUzYzNkYzM5OTczZTc4NGU0ZGVjMWM0NzA4ZWFjOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqFY/9hKH3oD09LnkTN0t/JJH5mD
dtz86mRNjBiUw7neIBAxnjG225yCK4VeNWMsAofWM6ppWEjevyrKAJNPUMCnZjxS
1izomYqJ4Nw5WpYio7MUqEXeLFZjaDtuVz4ZfMpho9wXPesJ2xgkfK4aw2TiQvg7
9+yJ8byU2OBKO748LA2604jghg2fIPAATeRdJbMnYMVj1o2aDtsbvd8PXQmbOagk
3f8cv3UeFcn46McuxUl9VCJivuREIHQmKbC8PsNBNrIyEldkB2wsfICGJJpIDva/
V8TUQE4EEQsR3LehkBA4dIw00JhbRjpsiM+7+O3wYyZDCyiC5O7YH4S1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDIz4dTw9w5lz54Tk3sHEcI6sjHMB8GA1UdIwQY
MBaAFD7fey1ounagvRun6dKfrFhSMWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEt
ZjhmMGM3ZDY2MmU3LzEvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEtZjhmMGM3ZDY2MmU3
LzEvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLOT29HM
EYLAic/wGkAHnpCoNuF4d6HIrHcqk4u5+xi8qdJYYyglGIHKOlLCDOQqhvYfvLE2
IedWh4i9BJ91JaLx8x4KVpqCYX354GIJiQeqq2DxFsO8DyrMgrL7vRiWXSMkP2lG
IlZZ15VFJhLr2j9X2NGR7vj9nmy4s1L2QyONOUALUeBYCeXZmREz3WflnMDAmBzL
wD3zXOWgHiSxaGyR960dd56ENmdk1HSRMjES6ixUkgsdDOAoH4KTKUPWVNGaiZco
79wf5i4I9g5FBjLNS575m/RkVkF3jN+FnnNNi6vjPLVG/7xC06k8KlY1fcaLWWE6
PvOfb9ngWx2QYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:53 2026 by rpki-client