Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File:                     dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier:          tl8FamWu3/DnhcUO/FkmoWxdNsvvFvoo3X1QycknXV0=
Subject key identifier:   14:83:1C:D4:F0:D2:3F:8E:46:CF:5C:D9:50:6C:88:BD:33:62:FC:67
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer:       /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial:       019D296131AF42FB6175D76636AC1CF5D304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number:          07F6
Signing time:             Thu 26 Mar 2026 09:02:08 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:08 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:08 +0000
Files and hashes:         1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: gBNnenMcNc2Ffj5FJBVJOW/UeZJz0yX8ZgoyT3cpRqg=)
                          2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:31:af:42:fb:61:75:d7:66:36:ac:1c:f5:d3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
        Validity
            Not Before: Mar 26 09:02:08 2026 GMT
            Not After : Mar 27 09:02:08 2026 GMT
        Subject: CN=14831cd4f0d23f8e46cf5cd9506c88bd3362fc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:dc:3e:a4:cb:27:e3:0f:b5:c7:77:3f:af:
                    b4:9f:be:ae:be:33:3b:57:e5:be:e1:8e:0b:e7:36:
                    4a:d1:fa:a2:3f:52:1c:a1:69:d6:3e:e1:bf:f4:fb:
                    7f:3d:48:91:8e:1d:f4:75:c3:44:85:c9:cb:7e:5b:
                    3d:6b:7a:bb:8a:7a:61:5e:d3:7b:43:da:4d:a9:ce:
                    af:ec:f6:d6:25:84:ca:f6:6f:cb:b6:f5:05:18:7d:
                    7a:aa:43:b0:77:8f:17:04:5c:fb:89:5b:98:c7:56:
                    9d:e8:8b:a1:9a:3f:ba:f5:85:7d:0c:0a:df:fa:bb:
                    db:37:2c:4d:30:57:99:97:f1:95:d6:f8:96:a2:69:
                    35:dc:ae:e8:b3:b8:68:41:c4:c2:36:47:12:f0:1c:
                    ad:f6:b6:f1:9a:38:60:90:a5:27:45:b5:f5:c8:b7:
                    4f:60:99:22:80:c7:49:20:0b:7c:eb:5c:c1:6a:6c:
                    88:0c:d6:0a:72:8a:ab:e5:0e:09:29:23:d3:e4:e7:
                    8c:89:85:d8:df:2c:6e:14:ad:81:ce:bd:a7:dc:79:
                    7d:57:0d:b7:90:24:a1:89:43:e8:fb:00:2e:79:cc:
                    a2:b7:d9:6a:4a:9a:49:05:b6:d9:72:bd:09:4d:5e:
                    23:f2:bc:28:dd:a2:7f:b4:75:44:ee:e3:19:f9:84:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:1C:D4:F0:D2:3F:8E:46:CF:5C:D9:50:6C:88:BD:33:62:FC:67
            X509v3 Authority Key Identifier:
                keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:a3:2b:1f:87:c6:41:8c:22:8a:c6:bb:08:40:cb:25:cb:
         0b:64:3f:ff:d9:8d:9e:3e:11:b3:b4:6f:c7:3a:d0:59:14:58:
         92:a1:ce:3f:af:d4:0d:46:b4:15:2c:10:67:e7:1e:32:ce:80:
         44:15:1e:3e:a2:1d:f6:f0:8c:f2:9d:c7:3b:1d:f9:ea:b8:ae:
         89:82:68:89:1e:23:0f:9e:6a:c0:07:75:96:5d:cf:80:61:c6:
         7b:0f:50:94:b7:57:28:06:60:fd:6b:7c:2c:d2:f1:33:8a:e8:
         ac:be:47:69:84:e3:e7:67:40:04:77:b5:08:b8:03:e7:41:fd:
         be:c5:c6:e3:9f:d0:f3:b3:94:1e:e8:46:8d:b5:d7:65:5d:97:
         54:c2:c3:f1:5a:1e:2b:16:da:e0:b6:84:4a:1f:aa:87:e9:ee:
         72:32:fe:aa:46:0d:34:b8:a7:74:a6:77:2e:56:d0:f7:b1:8a:
         0b:6d:5f:00:ea:fa:73:97:7b:47:a0:89:bc:f1:28:93:5f:d9:
         95:7f:b2:21:15:0a:7b:67:1f:9f:df:24:c8:c3:b5:47:ba:a9:
         f8:81:52:f7:ea:eb:68:31:54:c1:0a:47:97:37:a2:7d:88:b7:
         29:ac:1e:ed:5b:2b:72:4f:0b:cd:e0:53:85:10:a2:df:f8:82:
         a3:45:3b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYTGvQvthdddmNqwc9dMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjYwMzI2MDkwMjA4WhcNMjYwMzI3MDkwMjA4WjAzMTEwLwYDVQQD
EygxNDgzMWNkNGYwZDIzZjhlNDZjZjVjZDk1MDZjODhiZDMzNjJmYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoPcPqTLJ+MPtcd3P6+0n76uvjM7
V+W+4Y4L5zZK0fqiP1IcoWnWPuG/9Pt/PUiRjh30dcNEhcnLfls9a3q7inphXtN7
Q9pNqc6v7PbWJYTK9m/LtvUFGH16qkOwd48XBFz7iVuYx1ad6Iuhmj+69YV9DArf
+rvbNyxNMFeZl/GV1viWomk13K7os7hoQcTCNkcS8Byt9rbxmjhgkKUnRbX1yLdP
YJkigMdJIAt861zBamyIDNYKcoqr5Q4JKSPT5OeMiYXY3yxuFK2Bzr2n3Hl9Vw23
kCShiUPo+wAuecyit9lqSppJBbbZcr0JTV4j8rwo3aJ/tHVE7uMZ+YRbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSDHNTw0j+ORs9c2VBsiL0zYvxnMB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDijKx+H
xkGMIorGuwhAyyXLC2Q//9mNnj4Rs7RvxzrQWRRYkqHOP6/UDUa0FSwQZ+ceMs6A
RBUePqId9vCM8p3HOx356riuiYJoiR4jD55qwAd1ll3PgGHGew9QlLdXKAZg/Wt8
LNLxM4rorL5HaYTj52dABHe1CLgD50H9vsXG45/Q87OUHuhGjbXXZV2XVMLD8Voe
Kxba4LaESh+qh+nucjL+qkYNNLindKZ3LlbQ97GKC21fAOr6c5d7R6CJvPEok1/Z
lX+yIRUKe2cfn98kyMO1R7qp+IFS9+rraDFUwQpHlzeifYi3Kawe7Vsrck8LzeBT
hRCi3/iCo0U7CA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:45 2026 by rpki-client