Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          vDBlWjZSt++ZiPLgXIvUkOlxhj+Ggr3/O/59IcxIM9k=
Subject key identifier:   5A:E6:6D:DB:41:45:0D:EB:99:14:8D:D2:34:BF:6C:C8:7C:48:91:6D
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019D2A72CC48F472AFA1BCA985B40A9E3F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          04F7
Signing time:             Thu 26 Mar 2026 14:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:59 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: SRLJ9yIW1pdjUL3vyBy1E1Hu7NL8PdU202KKYfZPIjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:cc:48:f4:72:af:a1:bc:a9:85:b4:0a:9e:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Mar 26 14:00:59 2026 GMT
            Not After : Mar 27 14:00:59 2026 GMT
        Subject: CN=5ae66ddb41450deb99148dd234bf6cc87c48916d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:45:d2:4a:9c:ff:46:f2:88:83:22:3b:3a:
                    ee:e1:4b:33:5c:43:2b:88:ae:27:a9:69:a8:fd:fa:
                    5c:3a:92:2d:29:8c:44:70:52:e1:50:bb:10:84:af:
                    1f:ca:9b:7c:6d:38:75:6c:f8:60:80:f7:70:f4:94:
                    36:52:58:22:b5:6a:9a:d3:c6:fd:ab:45:28:55:cf:
                    5f:5e:8b:46:aa:83:8b:00:06:95:72:34:f0:f9:2e:
                    dc:da:25:1a:b6:3a:71:c1:b6:15:99:df:f2:1d:9b:
                    91:33:5d:6a:76:7a:6b:d3:8d:3a:1e:cc:25:38:92:
                    f9:29:04:ab:43:3c:af:91:09:09:54:33:cb:70:58:
                    52:04:f7:5e:d0:ba:c2:4c:69:e1:fb:2b:33:5d:74:
                    38:54:01:ec:43:99:63:d0:2d:14:82:d9:0c:2f:27:
                    ea:dd:ee:d8:fd:50:f6:35:91:ee:e2:37:7e:5e:2d:
                    d5:5a:5d:b4:b1:9f:08:7d:09:b8:2f:71:19:1d:3c:
                    3b:46:dd:4c:1b:61:28:73:ad:ce:dc:39:fb:f5:95:
                    61:d6:00:af:96:12:ab:85:84:9c:3b:b3:bf:52:ef:
                    90:b4:de:0f:24:72:e9:0a:ed:d5:45:46:ad:f5:e4:
                    1d:b8:08:75:6e:b8:0d:95:26:ca:01:d1:c0:72:10:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E6:6D:DB:41:45:0D:EB:99:14:8D:D2:34:BF:6C:C8:7C:48:91:6D
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:8d:64:f5:5f:a4:7a:c4:2c:40:0c:63:72:c2:f2:f0:d5:
         8e:65:ac:91:b5:1f:d3:96:fe:85:25:4f:90:27:29:1e:c4:0f:
         76:88:d2:95:c9:16:16:d5:fa:d7:ca:c9:7a:ce:6c:94:72:7c:
         f6:fd:76:5b:b5:a9:b9:f8:f7:34:7a:ba:e5:95:12:7e:95:18:
         ab:54:04:37:4a:69:71:d4:ae:93:9f:15:d4:0e:43:93:d0:7e:
         4b:c3:63:d8:d9:d7:b8:d2:f0:8d:61:04:66:db:32:95:3a:a8:
         8e:89:c9:a5:44:de:b4:bd:06:97:3a:bf:25:be:3d:c3:16:17:
         97:ec:d1:46:e8:df:d8:ea:b4:c3:74:51:44:a9:a9:d0:7e:2e:
         48:51:fb:d5:1b:19:c9:d0:2e:f5:c0:11:3e:c7:2c:6b:13:f8:
         25:a8:ce:ab:1c:46:7b:ce:b4:f7:30:f2:65:f4:2d:43:7c:43:
         f0:84:c2:44:19:96:67:d5:1d:6d:7e:2a:ff:6a:ad:43:54:aa:
         88:10:59:a2:21:a2:ac:79:87:16:9a:9c:d1:41:c3:e4:19:4d:
         14:b6:f8:3f:12:30:d2:a2:08:43:eb:1f:b7:fc:87:2b:8d:d0:
         de:34:01:86:06:ae:c5:cd:b7:2e:f7:d8:6d:dc:d5:ab:8f:8b:
         22:4c:a0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcsxI9HKvobyphbQKnj9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx
NDAzOGEwHhcNMjYwMzI2MTQwMDU5WhcNMjYwMzI3MTQwMDU5WjAzMTEwLwYDVQQD
Eyg1YWU2NmRkYjQxNDUwZGViOTkxNDhkZDIzNGJmNmNjODdjNDg5MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMZF0kqc/0byiIMiOzru4UszXEMr
iK4nqWmo/fpcOpItKYxEcFLhULsQhK8fypt8bTh1bPhggPdw9JQ2UlgitWqa08b9
q0UoVc9fXotGqoOLAAaVcjTw+S7c2iUatjpxwbYVmd/yHZuRM11qdnpr0406Hswl
OJL5KQSrQzyvkQkJVDPLcFhSBPde0LrCTGnh+yszXXQ4VAHsQ5lj0C0UgtkMLyfq
3e7Y/VD2NZHu4jd+Xi3VWl20sZ8IfQm4L3EZHTw7Rt1MG2Eoc63O3Dn79ZVh1gCv
lhKrhYScO7O/Uu+QtN4PJHLpCu3VRUat9eQduAh1brgNlSbKAdHAchAOfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrmbdtBRQ3rmRSN0jS/bMh8SJFtMB8GA1UdIwQY
MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt
MmE1ZTk4YWJkMWYzLzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz
LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeCNZPVf
pHrELEAMY3LC8vDVjmWskbUf05b+hSVPkCcpHsQPdojSlckWFtX618rJes5slHJ8
9v12W7Wpufj3NHq65ZUSfpUYq1QEN0ppcdSuk58V1A5Dk9B+S8Nj2NnXuNLwjWEE
ZtsylTqojonJpUTetL0Glzq/Jb49wxYXl+zRRujf2Oq0w3RRRKmp0H4uSFH71RsZ
ydAu9cARPscsaxP4JajOqxxGe8609zDyZfQtQ3xD8ITCRBmWZ9UdbX4q/2qtQ1Sq
iBBZoiGirHmHFpqc0UHD5BlNFLb4PxIw0qIIQ+sft/yHK43Q3jQBhgauxc23LvfY
bdzVq4+LIkygqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:19 2026 by rpki-client