Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          RJw3T45Wg3YDSfmd0Jz2pz+aIvxhpnT6yl5VmytMjf8=
Subject key identifier:   CF:8B:1F:59:25:DF:68:7D:A0:8D:A4:A0:A1:9B:D0:D3:D7:9F:97:64
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       019D273AA11F0273B596321B75CB9BA337B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          07FE
Signing time:             Wed 25 Mar 2026 23:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:46 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: kGlLrajHd6dONrPs1PRcKmEynEO3aSnOY54zGaZA1JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a1:1f:02:73:b5:96:32:1b:75:cb:9b:a3:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Mar 25 23:00:46 2026 GMT
            Not After : Mar 26 23:00:46 2026 GMT
        Subject: CN=cf8b1f5925df687da08da4a0a19bd0d3d79f9764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:39:55:26:4c:88:b0:a1:2d:c4:23:46:cb:
                    cc:37:c3:d4:5e:66:6c:7d:50:96:27:86:27:bd:88:
                    09:1d:e1:50:ec:80:10:3a:48:e0:00:40:0e:67:b3:
                    ac:69:aa:07:c4:83:7f:7f:be:e0:7d:b1:6f:7b:2f:
                    55:5a:fa:68:cd:92:67:4e:1c:5e:a0:4a:d1:54:ee:
                    11:ec:52:9b:22:e4:fa:39:17:5f:b1:44:2b:83:23:
                    cc:55:a6:fe:c9:eb:81:58:f3:dc:3d:78:bc:a9:d1:
                    40:8f:aa:c8:a6:65:95:11:fc:78:3f:39:a2:30:5e:
                    78:78:88:5f:d7:b7:1c:fc:48:97:4b:3d:04:50:4c:
                    62:2b:dc:1c:bb:71:ac:34:3b:35:dc:e1:fd:01:28:
                    03:60:b4:8d:cc:1d:0f:8f:f8:71:41:25:e2:1a:4d:
                    3a:d6:45:06:30:92:49:b5:cc:63:0c:95:dd:d6:9b:
                    2c:3f:cf:a5:26:14:e2:66:9f:05:76:e3:64:e1:eb:
                    49:8b:51:74:eb:8f:60:3a:1c:80:15:39:70:4a:0c:
                    89:1b:69:b6:cd:0f:f9:ee:d7:4a:e2:b2:77:ba:dd:
                    d1:bb:30:57:84:5d:72:b2:3c:c8:e8:9d:a0:5a:ee:
                    f7:4e:d5:09:3f:08:4f:64:55:29:da:e4:04:78:5d:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:1F:59:25:DF:68:7D:A0:8D:A4:A0:A1:9B:D0:D3:D7:9F:97:64
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:bc:b4:e8:e6:c1:e4:4d:68:22:a1:8f:ac:df:c1:4d:39:
         88:20:e3:1b:90:80:8c:7c:be:d8:da:99:97:8f:26:31:46:bd:
         09:15:3c:ff:c8:d1:34:80:bf:5b:3a:3b:69:96:a9:59:0e:38:
         30:9e:cf:7e:96:d8:dd:a6:9c:1f:e2:a6:6a:52:fe:a5:54:a8:
         57:13:a1:ca:9f:16:88:11:de:95:34:eb:e1:b8:08:98:03:0c:
         6e:7e:68:4a:48:d6:42:f7:d7:93:07:bd:4c:5d:75:74:61:8b:
         a9:68:2c:c5:0f:42:87:29:79:dc:2b:7d:ed:b8:73:03:12:17:
         f3:63:49:75:ea:db:70:05:27:34:13:44:8c:4d:ab:61:76:d2:
         32:5d:0c:f5:47:82:ee:dd:31:d5:2e:c7:f9:00:5b:2b:bc:b7:
         7f:5a:55:26:02:cd:a7:2c:9a:a1:cd:75:92:87:f2:3a:30:19:
         b7:cb:f3:d9:ce:96:85:21:6c:13:44:d8:84:24:7c:46:55:61:
         75:c5:fd:3d:be:df:93:c6:3c:ca:d2:41:10:01:55:d5:90:8b:
         7c:4b:f4:f0:a2:73:c2:ac:84:16:d2:a6:c4:51:e1:02:1a:51:
         f1:67:25:3d:47:b3:1f:42:0f:ff:d6:85:2f:25:c4:fe:69:80:
         c6:82:3d:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqEfAnO1ljIbdcuboze0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw
YzE4ZGYwHhcNMjYwMzI1MjMwMDQ2WhcNMjYwMzI2MjMwMDQ2WjAzMTEwLwYDVQQD
EyhjZjhiMWY1OTI1ZGY2ODdkYTA4ZGE0YTBhMTliZDBkM2Q3OWY5NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWE5VSZMiLChLcQjRsvMN8PUXmZs
fVCWJ4YnvYgJHeFQ7IAQOkjgAEAOZ7OsaaoHxIN/f77gfbFvey9VWvpozZJnThxe
oErRVO4R7FKbIuT6ORdfsUQrgyPMVab+yeuBWPPcPXi8qdFAj6rIpmWVEfx4Pzmi
MF54eIhf17cc/EiXSz0EUExiK9wcu3GsNDs13OH9ASgDYLSNzB0Pj/hxQSXiGk06
1kUGMJJJtcxjDJXd1pssP8+lJhTiZp8FduNk4etJi1F0649gOhyAFTlwSgyJG2m2
zQ/57tdK4rJ3ut3RuzBXhF1ysjzI6J2gWu73TtUJPwhPZFUp2uQEeF1HCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+LH1kl32h9oI2koKGb0NPXn5dkMB8GA1UdIwQY
MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt
MWRhNGI5Mjc5OWY2LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2
LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsC8tOjm
weRNaCKhj6zfwU05iCDjG5CAjHy+2NqZl48mMUa9CRU8/8jRNIC/Wzo7aZapWQ44
MJ7PfpbY3aacH+KmalL+pVSoVxOhyp8WiBHelTTr4bgImAMMbn5oSkjWQvfXkwe9
TF11dGGLqWgsxQ9Chyl53Ct97bhzAxIX82NJderbcAUnNBNEjE2rYXbSMl0M9UeC
7t0x1S7H+QBbK7y3f1pVJgLNpyyaoc11kofyOjAZt8vz2c6WhSFsE0TYhCR8RlVh
dcX9Pb7fk8Y8ytJBEAFV1ZCLfEv08KJzwqyEFtKmxFHhAhpR8WclPUezH0IP/9aF
LyXE/mmAxoI9Jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:57 2026 by rpki-client