Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File:                     Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier:          5n43T9scQ3j9M1jmG3viEfIeOTIxvnW2R2nJkgcy5as=
Subject key identifier:   FF:8F:B9:BD:0D:D0:CD:4B:39:23:0A:17:2C:BC:A2:AE:F7:EF:13:F7
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer:       /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial:       019D27049ED85E82D41EB8FC26334729AFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number:          15C6
Signing time:             Wed 25 Mar 2026 22:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:47 +0000
Files and hashes:         1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: q8KsJrA1o3UE2cja5nIpwr7gjQ//upWhrG/Tor+f47I=)
                          2: fjfBNYgsUNX3mydnGn3xY9hxxkI.roa (hash: RcxMT9Fv//tOCCRi6oIZLm/dau+OtJX1wqCmolZkb18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9e:d8:5e:82:d4:1e:b8:fc:26:33:47:29:af:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
        Validity
            Not Before: Mar 25 22:01:47 2026 GMT
            Not After : Mar 26 22:01:47 2026 GMT
        Subject: CN=ff8fb9bd0dd0cd4b39230a172cbca2aef7ef13f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:13:ec:c5:14:79:f8:f0:96:0d:4f:b8:d2:
                    6f:0d:be:86:24:b5:0f:16:d7:38:bb:36:56:17:06:
                    ae:3f:a1:55:49:39:22:83:b0:04:fe:15:d6:67:07:
                    65:f8:fa:26:e2:bb:b9:75:1d:34:cc:e0:1d:a6:5e:
                    e1:2d:38:80:53:47:f6:d0:66:30:88:bd:ff:b0:34:
                    02:bc:09:aa:3e:c3:75:0f:28:de:f7:7f:e0:03:ae:
                    48:61:3c:2d:7e:19:b9:7c:4f:3f:67:c2:fa:9b:7c:
                    3e:49:ec:26:4b:4a:49:bd:e1:81:ab:32:70:0a:a1:
                    23:27:4d:83:26:a0:a8:3e:e1:13:54:66:29:1f:fe:
                    54:45:ef:7f:d4:44:92:d3:4c:b0:30:f4:02:23:d9:
                    55:a4:6d:b9:e0:38:d5:8f:0e:16:1e:b2:1d:10:d2:
                    b1:6d:a0:f2:9d:01:e6:cd:e3:12:39:f0:e5:21:d2:
                    92:87:4d:69:13:57:af:76:e9:02:a4:59:65:eb:03:
                    ae:7b:52:2a:59:57:9b:f4:ae:38:02:3c:de:bd:b1:
                    8c:57:2a:ee:26:2c:c7:21:7c:38:92:73:b4:37:ea:
                    ea:24:5e:85:af:11:d2:19:f4:56:a1:a5:eb:a3:9a:
                    28:f0:b9:b5:cb:33:57:d9:1d:62:ba:46:bf:f2:6a:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:B9:BD:0D:D0:CD:4B:39:23:0A:17:2C:BC:A2:AE:F7:EF:13:F7
            X509v3 Authority Key Identifier:
                keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:e5:2d:5c:ff:3e:40:ac:e6:af:14:18:16:92:fd:0d:82:
         d3:9f:39:6b:ff:bc:9a:9e:55:46:12:fc:8e:97:2b:e6:05:2b:
         5a:b4:81:4a:5b:98:08:82:8d:1c:d6:f2:61:20:d6:4a:ad:09:
         09:79:83:f0:b4:59:f5:5f:0f:78:54:c4:e6:d8:b3:db:9e:b7:
         88:58:fe:92:d3:95:88:f8:9c:2f:79:3d:45:3e:7f:b1:cf:ca:
         80:0d:b1:33:28:6b:7f:c4:97:48:7f:e4:e3:ae:50:7f:fb:12:
         56:3b:96:0f:85:bb:c8:da:03:55:f9:09:86:7d:74:b6:ba:f8:
         77:0a:23:6d:d9:c3:dc:de:f8:8e:95:d1:d9:eb:73:1e:5d:3f:
         40:93:ed:b7:e8:f1:bd:af:1f:bf:43:e9:0b:c3:38:7c:04:12:
         10:af:19:51:0d:41:c0:ce:2a:01:06:1e:3f:e6:8f:24:71:31:
         8c:12:18:58:7f:65:b0:77:f1:e5:88:57:85:d1:c4:ad:aa:a3:
         d5:19:80:88:7b:ac:db:a9:9d:95:e6:3f:ba:86:44:8f:8f:c6:
         ee:34:36:c2:0d:15:ab:c2:65:57:dd:37:4c:a4:53:f9:4e:6d:
         d3:ff:7a:d9:46:5a:a2:41:17:c9:35:fd:73:b4:04:4e:e1:9a:
         86:0a:6e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJ7YXoLUHrj8JjNHKa/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0
Zjc0M2QwHhcNMjYwMzI1MjIwMTQ3WhcNMjYwMzI2MjIwMTQ3WjAzMTEwLwYDVQQD
EyhmZjhmYjliZDBkZDBjZDRiMzkyMzBhMTcyY2JjYTJhZWY3ZWYxM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pQT7MUUefjwlg1PuNJvDb6GJLUP
Ftc4uzZWFwauP6FVSTkig7AE/hXWZwdl+Pom4ru5dR00zOAdpl7hLTiAU0f20GYw
iL3/sDQCvAmqPsN1Dyje93/gA65IYTwtfhm5fE8/Z8L6m3w+SewmS0pJveGBqzJw
CqEjJ02DJqCoPuETVGYpH/5URe9/1ESS00ywMPQCI9lVpG254DjVjw4WHrIdENKx
baDynQHmzeMSOfDlIdKSh01pE1evdukCpFll6wOue1IqWVeb9K44AjzevbGMVyru
JizHIXw4knO0N+rqJF6FrxHSGfRWoaXro5oo8Lm1yzNX2R1iuka/8mohcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+Pub0N0M1LOSMKFyy8oq737xP3MB8GA1UdIwQY
MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt
NWEyMDZlOGIxMzY5LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5
LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoXlLVz/
PkCs5q8UGBaS/Q2C0585a/+8mp5VRhL8jpcr5gUrWrSBSluYCIKNHNbyYSDWSq0J
CXmD8LRZ9V8PeFTE5tiz2563iFj+ktOViPicL3k9RT5/sc/KgA2xMyhrf8SXSH/k
465Qf/sSVjuWD4W7yNoDVfkJhn10trr4dwojbdnD3N74jpXR2etzHl0/QJPtt+jx
va8fv0PpC8M4fAQSEK8ZUQ1BwM4qAQYeP+aPJHExjBIYWH9lsHfx5YhXhdHEraqj
1RmAiHus26mdleY/uoZEj4/G7jQ2wg0Vq8JlV903TKRT+U5t0/962UZaokEXyTX9
c7QETuGahgpuug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:14 2026 by rpki-client