Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          cgnSI+ul018h0BwPDX4wsONSQ8yyejtACd7FoX7kgIk=
Subject key identifier:   9F:DE:CC:48:CF:62:8F:1F:CF:09:BC:95:38:5E:BD:DA:FA:18:D6:C8
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019D262862FD9317797EC70AAAD681D750C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          12E7
Signing time:             Wed 25 Mar 2026 18:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:14 +0000
Files and hashes:         1: FcqAiF3EThDIPDgHYMKF7h827Ak.roa (hash: hj1WPPiWdc5Pq1vcNkWnuae//TLNXB25Q0RnmkCQN6M=)
                          2: cLDYz_9Zwwk3zoYCWc3vL36p2Vo.roa (hash: uPEOYCvzSynMBRgZqpFSHcFo4Rr8aojoGV6YDin4A8w=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: RIr8pKa8ExLnWxY2UH8hhVSZbFSvaMBSUnLdcA9x5e4=)
                          4: ojjTeCwITpsroHdqRJmBTDsfojU.roa (hash: VpFG7gODq/AE1339wVlEzI/S3bsYFlFzAzKyeo7uKPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:62:fd:93:17:79:7e:c7:0a:aa:d6:81:d7:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Mar 25 18:01:14 2026 GMT
            Not After : Mar 26 18:01:14 2026 GMT
        Subject: CN=9fdecc48cf628f1fcf09bc95385ebddafa18d6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:3d:d8:06:75:c4:9b:1e:e0:6d:f1:85:9a:
                    4d:68:91:0d:03:0a:30:b7:77:2e:7d:f8:97:8e:39:
                    5b:f9:44:9a:45:0e:b6:c6:d3:cf:71:a7:4a:9b:6d:
                    46:12:54:28:d6:51:78:8f:11:ca:48:86:3b:27:1a:
                    90:6e:d2:60:3d:d5:38:50:3f:6f:62:1a:74:ca:c2:
                    70:a9:d4:dd:9a:49:0d:3f:04:6e:c3:fd:46:23:15:
                    ac:81:84:a4:cf:13:39:64:4c:71:be:44:f2:0a:d8:
                    7e:e3:00:63:0e:c0:aa:ac:fe:a8:6e:90:98:45:76:
                    79:05:ad:f6:9c:91:09:eb:00:c4:b7:dc:68:f8:c2:
                    d0:6c:24:9a:28:4b:4a:ab:b8:99:68:ca:45:4d:cb:
                    79:bf:4d:76:07:af:14:54:43:1a:da:d9:92:8b:c9:
                    f3:ea:a2:cc:8f:e7:ae:57:d1:4c:cb:b9:06:5a:1c:
                    47:39:83:a1:5e:f9:57:52:89:7e:e9:14:76:b0:a7:
                    02:8d:66:2f:a0:a9:5a:a7:f1:be:c6:74:8f:21:1e:
                    1d:9c:0f:f1:af:d4:56:21:c3:5d:cb:e5:47:b1:3a:
                    8e:de:a3:0e:1c:7d:9d:04:91:ab:02:19:84:2b:43:
                    01:a1:87:11:fe:e6:09:a2:84:09:86:92:19:3e:1f:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:CC:48:CF:62:8F:1F:CF:09:BC:95:38:5E:BD:DA:FA:18:D6:C8
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:88:e1:8b:ec:7f:13:85:c3:8c:2e:aa:fa:75:4a:9e:4f:a1:
         4f:aa:55:ef:1f:70:eb:ba:3c:1e:88:a8:24:9a:49:d1:9e:b9:
         c8:fb:cc:c6:e6:dc:f5:0c:3e:1b:21:f2:ee:a8:a0:ee:8b:b6:
         db:1d:81:7f:76:63:54:f8:43:70:84:fc:44:20:96:4a:d7:7e:
         d5:b9:45:37:45:bc:2f:14:43:ff:6f:8a:9c:ca:fb:41:1d:08:
         d6:fa:55:43:33:9d:a0:0f:ae:60:e5:54:dd:97:35:58:fe:6e:
         77:4e:10:a4:19:25:93:7a:f0:bb:ba:5a:9d:1f:0e:fe:d5:c5:
         c1:82:9f:54:5e:68:f1:32:42:4c:14:43:b7:0e:9c:ec:5b:14:
         ea:df:28:e2:34:ea:f1:61:6f:62:7a:c6:af:5f:e8:75:1e:95:
         c3:06:1e:14:b4:12:2b:01:5a:40:af:5b:e3:e0:bf:0d:a6:43:
         d7:1f:b3:c1:b5:34:0f:14:54:6e:c8:36:28:ca:f3:0f:46:f6:
         be:ab:fe:1b:6e:8e:f4:e5:17:58:0c:be:49:46:04:3c:46:35:
         44:ed:c1:8d:05:4e:87:17:ad:de:c2:85:86:fb:42:ae:a0:55:
         43:eb:43:4d:4d:05:a8:5e:7b:57:46:18:94:a9:9f:d5:72:d5:
         d4:e7:10:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKGL9kxd5fscKqtaB11DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjczZGFhZDZkOTMxN2YwMTAxZDQxYTA0MmE2MWU1NzY4
OTQ1M2EwHhcNMjYwMzI1MTgwMTE0WhcNMjYwMzI2MTgwMTE0WjAzMTEwLwYDVQQD
Eyg5ZmRlY2M0OGNmNjI4ZjFmY2YwOWJjOTUzODVlYmRkYWZhMThkNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjg92AZ1xJse4G3xhZpNaJENAwow
t3cuffiXjjlb+USaRQ62xtPPcadKm21GElQo1lF4jxHKSIY7JxqQbtJgPdU4UD9v
Yhp0ysJwqdTdmkkNPwRuw/1GIxWsgYSkzxM5ZExxvkTyCth+4wBjDsCqrP6obpCY
RXZ5Ba32nJEJ6wDEt9xo+MLQbCSaKEtKq7iZaMpFTct5v012B68UVEMa2tmSi8nz
6qLMj+euV9FMy7kGWhxHOYOhXvlXUol+6RR2sKcCjWYvoKlap/G+xnSPIR4dnA/x
r9RWIcNdy+VHsTqO3qMOHH2dBJGrAhmEK0MBoYcR/uYJooQJhpIZPh+5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/ezEjPYo8fzwm8lThevdr6GNbIMB8GA1UdIwQY
MBaAFHxnParW2TF/AQHUGgQqYeV2iUU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEt
MDRlNDZlZjBjZDIxLzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEtMDRlNDZlZjBjZDIx
LzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcojhi+x/
E4XDjC6q+nVKnk+hT6pV7x9w67o8HoioJJpJ0Z65yPvMxubc9Qw+GyHy7qig7ou2
2x2Bf3ZjVPhDcIT8RCCWStd+1blFN0W8LxRD/2+KnMr7QR0I1vpVQzOdoA+uYOVU
3Zc1WP5ud04QpBklk3rwu7panR8O/tXFwYKfVF5o8TJCTBRDtw6c7FsU6t8o4jTq
8WFvYnrGr1/odR6VwwYeFLQSKwFaQK9b4+C/DaZD1x+zwbU0DxRUbsg2KMrzD0b2
vqv+G26O9OUXWAy+SUYEPEY1RO3BjQVOhxet3sKFhvtCrqBVQ+tDTU0FqF57V0YY
lKmf1XLV1OcQww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:46 2026 by rpki-client