Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
File:                     T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft (raw, json)
Hash identifier:          rmRbxx3fREnwWeyYpHcrjqTUmVrSMwW9GOOfHXQpagM=
Subject key identifier:   DC:3C:35:DB:FB:59:5F:E6:EE:89:DD:8B:09:2B:62:FF:56:52:78:03
Authority key identifier: 4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE
Certificate issuer:       /CN=4fa4ab563655a9152224da9b833af636adfa0cbe
Certificate serial:       019D2AA9C18A137D3A513DA2D142A96D1CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
Manifest number:          A7
Signing time:             Thu 26 Mar 2026 15:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:01 +0000
Files and hashes:         1: 8xsBxJRzOoadcm0DdrJ3Vg3opRE.asa (hash: n9nxUGOX/1EnSOvWwvl5Nqo9r6LfqvrkZ6aWm3oj7S0=)
                          2: T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl (hash: DIsuQg3CW0FIslkdqt6w691Q1o1QV6cjGW9mG3yJHgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:c1:8a:13:7d:3a:51:3d:a2:d1:42:a9:6d:1c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa4ab563655a9152224da9b833af636adfa0cbe
        Validity
            Not Before: Mar 26 15:01:01 2026 GMT
            Not After : Mar 27 15:01:01 2026 GMT
        Subject: CN=dc3c35dbfb595fe6ee89dd8b092b62ff56527803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:8a:17:34:a0:d0:52:38:0d:03:ed:dd:9d:
                    b2:aa:ea:4f:32:10:83:b2:00:5d:99:f6:96:5b:85:
                    54:b4:dd:2e:01:10:05:dc:f1:ba:32:bd:9e:e7:b2:
                    91:37:99:d7:c3:fd:83:6f:dc:0c:36:26:49:19:46:
                    cf:47:c9:c3:18:6e:e2:ff:19:30:e1:ac:42:ff:4b:
                    1f:29:44:8a:5e:63:88:a4:09:58:67:58:7b:bd:52:
                    d4:73:54:15:c3:45:e6:f8:78:21:78:31:9a:91:0b:
                    ea:aa:dc:64:97:6d:a5:1e:bc:65:f8:2b:ca:57:3a:
                    aa:09:ed:30:53:74:ec:1a:9f:93:48:f5:a2:da:8a:
                    51:19:18:d7:cd:cf:38:96:b7:95:8f:de:99:44:0d:
                    fa:17:45:03:34:34:12:85:bc:c6:ba:39:4e:d8:3f:
                    9b:34:87:92:7a:4e:07:04:c9:f7:34:0e:6f:18:44:
                    e2:ac:79:12:59:a8:90:dc:ce:0a:11:39:e5:79:0f:
                    82:cd:ff:16:14:30:23:65:4f:ea:f8:1c:5e:61:75:
                    52:15:0e:c3:d4:c0:ba:92:d4:89:ac:22:81:f2:b7:
                    ef:88:95:70:dc:52:28:38:6a:f0:9d:e0:93:64:42:
                    94:c8:fd:e1:a8:67:17:a4:40:b6:b0:84:eb:fb:f8:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:35:DB:FB:59:5F:E6:EE:89:DD:8B:09:2B:62:FF:56:52:78:03
            X509v3 Authority Key Identifier:
                keyid:4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:54:13:7c:0e:7f:fb:12:8f:83:91:a4:cf:02:c2:78:f3:bb:
         38:a3:d6:94:e0:cf:1a:7e:a3:a6:36:8c:87:36:dc:36:ff:1e:
         8f:de:1c:88:7d:5c:f9:2e:a4:f4:85:ab:e6:7b:2e:22:f8:d6:
         a3:48:bf:31:d0:03:3c:6a:ee:1a:58:4a:da:56:f7:2e:93:2d:
         30:1c:32:74:46:bd:fc:92:0d:6e:52:6e:87:d9:62:5e:49:12:
         ea:c6:ff:1b:ce:2c:a4:1e:ca:0c:82:ac:1f:a6:6c:d0:e3:3c:
         7b:69:9a:c7:cb:f8:7a:39:63:0b:2e:a7:02:04:f8:5d:49:c2:
         c9:42:3c:3d:b3:62:ef:b1:e7:7f:6a:ba:3e:3b:05:5a:56:33:
         af:fa:fa:ed:3e:20:bf:54:28:ee:85:23:c5:16:99:6e:cb:41:
         6c:83:0b:41:f0:bb:db:cd:07:1e:af:70:1f:24:03:6e:5d:1e:
         59:58:f3:00:15:e7:d0:b5:77:a3:35:14:ba:ce:13:c6:42:ca:
         96:e8:f6:8d:73:8b:0d:8b:fb:39:e4:49:16:c5:19:86:36:b8:
         f7:43:ca:ec:2c:5a:d4:36:bb:a7:44:96:1b:94:c0:02:c0:fd:
         7f:3d:94:11:bf:d0:57:f9:ac:f3:c1:cf:b1:8c:53:49:85:18:
         28:d7:22:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqcGKE306UT2i0UKpbRyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTRhYjU2MzY1NWE5MTUyMjI0ZGE5YjgzM2FmNjM2YWRm
YTBjYmUwHhcNMjYwMzI2MTUwMTAxWhcNMjYwMzI3MTUwMTAxWjAzMTEwLwYDVQQD
EyhkYzNjMzVkYmZiNTk1ZmU2ZWU4OWRkOGIwOTJiNjJmZjU2NTI3ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngyKFzSg0FI4DQPt3Z2yqupPMhCD
sgBdmfaWW4VUtN0uARAF3PG6Mr2e57KRN5nXw/2Db9wMNiZJGUbPR8nDGG7i/xkw
4axC/0sfKUSKXmOIpAlYZ1h7vVLUc1QVw0Xm+HgheDGakQvqqtxkl22lHrxl+CvK
VzqqCe0wU3TsGp+TSPWi2opRGRjXzc84lreVj96ZRA36F0UDNDQShbzGujlO2D+b
NIeSek4HBMn3NA5vGETirHkSWaiQ3M4KETnleQ+Czf8WFDAjZU/q+BxeYXVSFQ7D
1MC6ktSJrCKB8rfviJVw3FIoOGrwneCTZEKUyP3hqGcXpEC2sITr+/ha5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw8Ndv7WV/m7ondiwkrYv9WUngDMB8GA1UdIwQY
MBaAFE+kq1Y2VakVIiTam4M69jat+gy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ODU1ZGEtMWNiNC00MzI1LTkwM2Mt
N2UwMjFlOTJiYTM4LzEvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81ODU1ZGEtMWNiNC00MzI1LTkwM2MtN2UwMjFlOTJiYTM4
LzEvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1QTfA5/
+xKPg5GkzwLCePO7OKPWlODPGn6jpjaMhzbcNv8ej94ciH1c+S6k9IWr5nsuIvjW
o0i/MdADPGruGlhK2lb3LpMtMBwydEa9/JINblJuh9liXkkS6sb/G84spB7KDIKs
H6Zs0OM8e2max8v4ejljCy6nAgT4XUnCyUI8PbNi77Hnf2q6PjsFWlYzr/r67T4g
v1Qo7oUjxRaZbstBbIMLQfC7280HHq9wHyQDbl0eWVjzABXn0LV3ozUUus4TxkLK
luj2jXOLDYv7OeRJFsUZhja490PK7Cxa1Da7p0SWG5TAAsD9fz2UEb/QV/ms88HP
sYxTSYUYKNciMw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:36:37 2026 by rpki-client