Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File:                     rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier:          /ZLnGm+HeksJy13IFYyImgI7xelmvaQsxeELXai0RSA=
Subject key identifier:   6F:AD:5C:40:F4:B7:B8:B1:C8:8C:14:46:56:E5:64:F9:90:6C:8B:02
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer:       /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial:       019D2A3C8F392B3797B009B9D8EF891834B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number:          01F4
Signing time:             Thu 26 Mar 2026 13:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:44 +0000
Files and hashes:         1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
                          2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
                          3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
                          4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
                          5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: Z8zka2FTJUylLDcW2HSx462Rn4E9uYsUxTB02U9cXbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:8f:39:2b:37:97:b0:09:b9:d8:ef:89:18:34:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
        Validity
            Not Before: Mar 26 13:01:44 2026 GMT
            Not After : Mar 27 13:01:44 2026 GMT
        Subject: CN=6fad5c40f4b7b8b1c88c144656e564f9906c8b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:e1:7c:ab:4e:48:16:2f:9f:39:c0:19:17:
                    5d:9d:2a:a2:aa:3e:89:d3:dd:c8:db:e6:ed:45:cb:
                    07:4b:6f:7a:cd:70:8a:93:ae:8f:e0:92:5f:b0:4d:
                    50:fb:c2:a8:db:dd:56:99:16:18:4e:be:d4:3c:0f:
                    20:87:04:28:17:a8:ce:f6:58:f5:e2:40:3a:ad:b0:
                    a6:c1:b4:28:1e:45:f2:fe:80:ac:14:c6:45:d8:4a:
                    3e:17:06:23:ff:c6:cf:0e:c1:83:5b:8f:10:56:94:
                    08:5f:ae:19:e1:f2:bd:98:36:a5:7f:90:bb:b6:a0:
                    5d:40:73:89:d3:4f:3a:a5:7a:bf:8d:ca:b3:fe:f0:
                    8c:6e:35:a2:82:da:e6:ed:6e:f5:7c:fe:58:08:be:
                    1f:48:25:91:15:bf:9c:87:34:d7:40:96:5b:fa:7b:
                    fb:7d:0b:3a:0e:fa:cc:9a:0c:15:89:eb:a8:69:2c:
                    9c:6c:2a:e1:04:b0:f1:a3:7b:1b:8c:e0:f7:f0:01:
                    b1:89:5c:f1:ce:01:bb:d9:6f:37:a2:8e:f8:b8:be:
                    71:81:9d:ed:6f:b6:bc:b4:e0:cf:07:29:2f:34:1f:
                    ac:8b:9f:54:c9:6e:c5:74:94:5b:69:6b:fd:03:89:
                    52:ad:36:03:b1:f2:c2:ac:dc:f7:d7:cf:ba:ef:1b:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:5C:40:F4:B7:B8:B1:C8:8C:14:46:56:E5:64:F9:90:6C:8B:02
            X509v3 Authority Key Identifier:
                keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:49:ed:7c:70:f9:b2:c3:91:be:b0:5e:f9:52:0c:dd:c9:ca:
         97:17:7c:51:35:98:37:9f:31:66:67:bf:ce:12:84:03:6c:6c:
         35:f7:53:d5:b3:51:a6:52:f3:75:c8:75:ee:49:e2:a2:f3:c2:
         a6:7e:47:60:70:24:d5:93:0f:c8:fe:f4:6f:3a:8c:9a:be:d8:
         57:7f:92:02:11:79:8c:cf:06:2e:a7:11:c3:c8:a1:f5:e1:d0:
         18:d4:d7:ad:59:3d:5e:cc:8f:31:2f:f0:80:45:7c:26:b8:88:
         fa:b7:a8:ba:33:e1:53:9f:dd:c1:3d:1d:f9:70:7e:13:1e:b7:
         a1:c9:53:3f:1e:f3:01:7b:aa:a5:66:6a:7d:ad:8c:47:c3:df:
         83:dc:dc:ec:7c:c0:c9:0a:a2:c5:84:b7:7e:72:d1:7b:96:07:
         87:25:b7:2f:fb:1e:90:83:22:8e:99:18:43:b5:f6:eb:db:f9:
         d4:1c:61:ee:60:e7:7a:cf:08:cc:f2:dc:00:87:94:8b:42:51:
         55:71:53:bc:78:e2:c8:0e:74:08:1f:0b:63:04:78:3a:df:f9:
         3c:c4:ed:f3:95:08:ca:70:fb:4e:28:a3:bf:7c:f5:41:85:13:
         66:64:c6:88:17:8a:c2:6f:4d:fa:40:28:cb:43:94:74:f9:f4:
         aa:1a:ac:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPI85KzeXsAm52O+JGDSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw
NDllMzYwHhcNMjYwMzI2MTMwMTQ0WhcNMjYwMzI3MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZmFkNWM0MGY0YjdiOGIxYzg4YzE0NDY1NmU1NjRmOTkwNmM4YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6/hfKtOSBYvnznAGRddnSqiqj6J
093I2+btRcsHS296zXCKk66P4JJfsE1Q+8Ko291WmRYYTr7UPA8ghwQoF6jO9lj1
4kA6rbCmwbQoHkXy/oCsFMZF2Eo+FwYj/8bPDsGDW48QVpQIX64Z4fK9mDalf5C7
tqBdQHOJ0086pXq/jcqz/vCMbjWigtrm7W71fP5YCL4fSCWRFb+chzTXQJZb+nv7
fQs6DvrMmgwVieuoaSycbCrhBLDxo3sbjOD38AGxiVzxzgG72W83oo74uL5xgZ3t
b7a8tODPBykvNB+si59UyW7FdJRbaWv9A4lSrTYDsfLCrNz318+67xtIiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+tXED0t7ixyIwURlblZPmQbIsCMB8GA1UdIwQY
MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt
NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi
LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkntfHD5
ssORvrBe+VIM3cnKlxd8UTWYN58xZme/zhKEA2xsNfdT1bNRplLzdch17kniovPC
pn5HYHAk1ZMPyP70bzqMmr7YV3+SAhF5jM8GLqcRw8ih9eHQGNTXrVk9XsyPMS/w
gEV8JriI+reoujPhU5/dwT0d+XB+Ex63oclTPx7zAXuqpWZqfa2MR8Pfg9zc7HzA
yQqixYS3fnLRe5YHhyW3L/sekIMijpkYQ7X269v51Bxh7mDnes8IzPLcAIeUi0JR
VXFTvHjiyA50CB8LYwR4Ot/5PMTt85UIynD7Tiijv3z1QYUTZmTGiBeKwm9N+kAo
y0OUdPn0qhqsdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:36 2026 by rpki-client