Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
File:                     mPt_CPlW06-VcZxTf7P5t-MwBrM.mft (raw, json)
Hash identifier:          SRouNShtx8Ft5GRx9kAnWmNOLbXciuFP/g+xcgcG69M=
Subject key identifier:   70:85:9C:5F:26:E2:F5:C3:DF:7E:BF:79:16:EC:EA:E4:E2:F4:67:1A
Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
Certificate issuer:       /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Certificate serial:       019D28849DE6BB2AB7BD27B583965A61F394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
Manifest number:          177A
Signing time:             Thu 26 Mar 2026 05:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:12 +0000
Files and hashes:         1: J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa (hash: +bn5GNQ981Cor98nOGEnbtJBrJvB+NRvavwCrVsojT8=)
                          2: mPt_CPlW06-VcZxTf7P5t-MwBrM.crl (hash: 4nbIJBPJsCV2nqMIP0dItvtqdpsxN5mazJx78VZBBqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:9d:e6:bb:2a:b7:bd:27:b5:83:96:5a:61:f3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
        Validity
            Not Before: Mar 26 05:01:12 2026 GMT
            Not After : Mar 27 05:01:12 2026 GMT
        Subject: CN=70859c5f26e2f5c3df7ebf7916eceae4e2f4671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:d6:a9:83:97:34:db:9d:97:c4:fe:69:e4:
                    ec:91:c4:63:2d:48:61:4b:e5:cd:ad:b6:5d:25:3c:
                    4a:a9:f4:28:da:c7:f0:c0:ca:3e:7a:91:b1:fc:35:
                    c0:98:bd:98:0b:01:b1:45:13:1b:64:51:c5:f2:c1:
                    58:6a:07:ea:7f:28:a9:20:cc:8b:f0:e6:e6:ab:08:
                    8e:14:d7:91:46:6c:f1:57:af:19:43:69:73:75:9b:
                    0c:c2:1f:56:73:96:f7:4e:ba:77:75:d2:37:77:3d:
                    a5:63:00:1e:73:8c:ed:31:29:be:7e:ff:24:91:f5:
                    54:63:db:77:04:ea:8c:b4:6a:12:32:18:83:43:19:
                    1e:70:51:0e:1f:48:49:ef:93:06:7b:8b:30:7d:c5:
                    02:68:57:72:fe:2a:96:03:9c:62:00:e2:c2:01:52:
                    dd:b7:3d:89:c8:ee:be:59:af:9f:66:46:36:f1:aa:
                    25:98:bf:1f:5f:c1:27:35:6b:22:50:a0:f6:26:8b:
                    55:14:4f:13:45:e5:ae:ff:7f:a7:7d:63:37:6f:65:
                    1a:af:56:ac:79:d0:f6:cf:9f:c3:81:51:02:12:b4:
                    24:92:22:b6:e0:c3:4e:ca:3d:0b:00:64:53:9a:c4:
                    a7:5e:33:80:42:12:a9:43:bc:99:c7:d5:66:9c:4a:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:9C:5F:26:E2:F5:C3:DF:7E:BF:79:16:EC:EA:E4:E2:F4:67:1A
            X509v3 Authority Key Identifier:
                keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:9c:85:96:02:3b:25:37:24:4b:cf:91:8f:7f:71:3e:b3:
         6e:14:d7:3d:34:61:1e:7e:d8:75:7e:f0:14:ce:7f:bb:fa:b2:
         10:1b:48:6b:ae:89:fb:93:35:fc:7c:fd:d1:a5:b9:77:6c:ac:
         2a:60:80:ca:70:56:15:26:b4:f1:21:ff:f7:66:04:34:c5:7f:
         31:ff:99:7f:b1:1c:a8:3f:84:31:dc:51:e6:fa:2c:ef:74:a6:
         b6:94:54:dd:de:e5:77:05:28:f8:f8:2a:59:5b:61:8e:b1:0b:
         c2:50:ab:63:b8:2b:8b:58:98:c0:d2:24:df:26:90:93:65:36:
         00:23:e1:b3:c0:6b:2c:b9:ab:c3:1b:34:4d:c2:f4:91:15:1c:
         06:74:27:ce:9e:88:be:d1:39:40:6d:d0:98:f4:72:2b:8e:98:
         f5:1f:fa:04:89:a9:cc:00:2b:27:70:f1:a4:49:dd:06:13:3b:
         85:6c:05:23:69:ea:e1:fe:b7:0e:38:16:14:89:b2:74:99:7e:
         87:e6:36:d0:aa:a6:2e:14:5d:ac:0a:b7:aa:f9:0f:70:39:bd:
         63:7c:36:bd:97:c6:4c:bb:29:f6:6f:ea:f7:2d:d7:0a:19:bd:
         26:25:c8:b8:2c:66:c6:5c:9d:27:91:e6:01:24:b8:0a:31:9d:
         9c:11:8b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJ3muyq3vSe1g5ZaYfOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI3ZjA4Zjk1NmQzYWY5NTcxOWM1MzdmYjNmOWI3ZTMz
MDA2YjMwHhcNMjYwMzI2MDUwMTEyWhcNMjYwMzI3MDUwMTEyWjAzMTEwLwYDVQQD
Eyg3MDg1OWM1ZjI2ZTJmNWMzZGY3ZWJmNzkxNmVjZWFlNGUyZjQ2NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1erWqYOXNNudl8T+aeTskcRjLUhh
S+XNrbZdJTxKqfQo2sfwwMo+epGx/DXAmL2YCwGxRRMbZFHF8sFYagfqfyipIMyL
8ObmqwiOFNeRRmzxV68ZQ2lzdZsMwh9Wc5b3Trp3ddI3dz2lYwAec4ztMSm+fv8k
kfVUY9t3BOqMtGoSMhiDQxkecFEOH0hJ75MGe4swfcUCaFdy/iqWA5xiAOLCAVLd
tz2JyO6+Wa+fZkY28aolmL8fX8EnNWsiUKD2JotVFE8TReWu/3+nfWM3b2Uar1as
edD2z5/DgVECErQkkiK24MNOyj0LAGRTmsSnXjOAQhKpQ7yZx9VmnEpMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCFnF8m4vXD336/eRbs6uTi9GcaMB8GA1UdIwQY
MBaAFJj7fwj5VtOvlXGcU3+z+bfjMAazMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTkt
ZDVjMjExZWIzOTU2LzEvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTktZDVjMjExZWIzOTU2
LzEvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsKchZYC
OyU3JEvPkY9/cT6zbhTXPTRhHn7YdX7wFM5/u/qyEBtIa66J+5M1/Hz90aW5d2ys
KmCAynBWFSa08SH/92YENMV/Mf+Zf7EcqD+EMdxR5vos73SmtpRU3d7ldwUo+Pgq
WVthjrELwlCrY7gri1iYwNIk3yaQk2U2ACPhs8BrLLmrwxs0TcL0kRUcBnQnzp6I
vtE5QG3QmPRyK46Y9R/6BImpzAArJ3DxpEndBhM7hWwFI2nq4f63DjgWFImydJl+
h+Y20KqmLhRdrAq3qvkPcDm9Y3w2vZfGTLsp9m/q9y3XChm9JiXIuCxmxlydJ5Hm
ASS4CjGdnBGLOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:31 2026 by rpki-client