Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          UloVnWUBNOPkezwJD8rEZYFPdCsUoa1YpL23xdHuHSA=
Subject key identifier:   E0:0E:B2:DA:74:5D:6E:CB:C4:99:E5:40:61:DF:CF:C7:66:00:5C:FB
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       019D28BBEEF3CE7676A4ED8B6FF0B057192A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          094A
Signing time:             Thu 26 Mar 2026 06:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:38 +0000
Files and hashes:         1: 0lvXa172UplN6y7av1cXq_FBnIY.roa (hash: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w=)
                          2: J0u4PbYIevSkqXDSEnsyGZVMqtc.roa (hash: aBXYYl48jca9wveAZI/GuYbbGGyv9mDo91i3PZYst5k=)
                          3: W7a_s-Jl-VcdTVf7k5VBlu09lYo.roa (hash: NXJVtq1VsU3W1ziELfQ1JwgkYM4PzBdJsNwmTSOSzqs=)
                          4: oFb4jBbqBQ0GaSAPZ2CPzXwpuXU.roa (hash: ReFO9yx5996yanj90nD2kh+KTbHdkiMkBpj9BJ+Y/vs=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: eXdgNxLO0MYdvAMySZDN2lki7pIR+M922uIQ8d5TqJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:ee:f3:ce:76:76:a4:ed:8b:6f:f0:b0:57:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Mar 26 06:01:38 2026 GMT
            Not After : Mar 27 06:01:38 2026 GMT
        Subject: CN=e00eb2da745d6ecbc499e54061dfcfc766005cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:17:07:79:78:56:b6:2c:2c:7d:0f:a4:52:
                    0b:8b:68:34:98:c7:4b:a2:e9:9c:b5:ca:32:f2:cf:
                    2c:78:08:97:2f:68:cf:91:0c:d9:a9:f6:32:bd:3b:
                    47:48:0c:cb:47:6f:97:8d:fd:44:12:20:0d:a5:8f:
                    65:dd:3e:79:95:60:3b:13:2b:e2:5d:62:3d:b8:5b:
                    86:08:3e:97:7b:0f:10:e4:96:77:25:0f:3c:3e:7a:
                    ea:e9:61:f5:06:c6:70:0d:72:df:d0:99:40:e7:0e:
                    14:f2:18:26:15:40:ab:9a:57:47:5c:77:41:98:11:
                    1c:4d:d5:45:8d:95:ea:de:d2:f0:34:cc:32:00:ac:
                    c0:f8:26:dd:f4:d8:8c:3c:a1:af:00:1b:e6:d6:00:
                    63:f8:77:2c:1f:bb:29:d1:d4:7b:10:78:e0:76:e9:
                    3f:0f:fe:17:ca:bd:52:0b:83:4c:65:6f:66:14:5d:
                    3e:47:2b:9d:cc:7a:66:c8:31:b4:27:19:4c:4c:b1:
                    25:3e:5e:49:55:11:99:ac:75:e4:e6:95:37:f7:5a:
                    45:d1:e9:18:16:bf:de:86:c2:bb:f1:20:8e:b5:0e:
                    d2:e6:6d:ca:ab:a8:67:9e:9e:5f:37:c7:d6:67:d4:
                    3e:e6:0d:32:3e:81:9c:6b:a7:0b:6f:8e:6d:9b:85:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:B2:DA:74:5D:6E:CB:C4:99:E5:40:61:DF:CF:C7:66:00:5C:FB
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:0f:d7:5d:c1:6a:33:28:63:16:8b:c0:c9:f0:3d:23:a4:77:
         99:f9:1c:a0:a1:28:59:af:a9:9d:aa:6b:86:89:23:fb:8e:31:
         f1:e7:73:50:8a:c8:f5:79:24:8e:88:95:70:4d:ac:77:d0:39:
         8c:78:42:21:b5:06:5e:e4:ae:0c:3a:ac:f7:04:bc:50:6a:ec:
         b8:59:6f:2f:49:c4:d2:1d:91:3e:8a:66:54:e2:10:19:d1:36:
         2b:87:79:0e:ed:7d:1a:e7:d8:61:cd:10:60:5c:fe:f5:8d:9f:
         b5:c0:a9:89:37:0d:8e:fc:76:f6:63:69:87:28:44:db:58:97:
         25:e6:01:7a:91:de:56:b2:9a:cf:1b:00:29:2c:d9:91:6a:f2:
         ea:20:35:09:7d:45:c9:4e:92:62:28:8b:9f:ad:93:68:86:7c:
         93:4c:c2:06:24:55:d0:11:a1:d2:a7:da:bd:84:1b:a8:3b:09:
         96:e7:9c:69:e5:11:0a:43:62:46:f6:7e:9b:13:79:d6:33:95:
         0f:04:d8:da:a0:73:0c:5c:81:46:5d:c8:4d:8e:05:17:aa:61:
         7d:09:ac:37:07:fe:2f:06:9c:fb:78:21:51:4b:24:4d:23:98:
         cf:d5:b1:c4:e7:38:c7:bd:18:33:c6:82:4e:96:ce:05:e1:e2:
         59:d6:d0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+7zznZ2pO2Lb/CwVxkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjYwMzI2MDYwMTM4WhcNMjYwMzI3MDYwMTM4WjAzMTEwLwYDVQQD
EyhlMDBlYjJkYTc0NWQ2ZWNiYzQ5OWU1NDA2MWRmY2ZjNzY2MDA1Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofwXB3l4VrYsLH0PpFILi2g0mMdL
oumctcoy8s8seAiXL2jPkQzZqfYyvTtHSAzLR2+Xjf1EEiANpY9l3T55lWA7Eyvi
XWI9uFuGCD6Xew8Q5JZ3JQ88Pnrq6WH1BsZwDXLf0JlA5w4U8hgmFUCrmldHXHdB
mBEcTdVFjZXq3tLwNMwyAKzA+Cbd9NiMPKGvABvm1gBj+HcsH7sp0dR7EHjgduk/
D/4Xyr1SC4NMZW9mFF0+RyudzHpmyDG0JxlMTLElPl5JVRGZrHXk5pU391pF0ekY
Fr/ehsK78SCOtQ7S5m3Kq6hnnp5fN8fWZ9Q+5g0yPoGca6cLb45tm4X5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAOstp0XW7LxJnlQGHfz8dmAFz7MB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Q/XXcFq
MyhjFovAyfA9I6R3mfkcoKEoWa+pnaprhokj+44x8edzUIrI9XkkjoiVcE2sd9A5
jHhCIbUGXuSuDDqs9wS8UGrsuFlvL0nE0h2RPopmVOIQGdE2K4d5Du19GufYYc0Q
YFz+9Y2ftcCpiTcNjvx29mNphyhE21iXJeYBepHeVrKazxsAKSzZkWry6iA1CX1F
yU6SYiiLn62TaIZ8k0zCBiRV0BGh0qfavYQbqDsJluecaeURCkNiRvZ+mxN51jOV
DwTY2qBzDFyBRl3ITY4FF6phfQmsNwf+Lwac+3ghUUskTSOYz9WxxOc4x70YM8aC
TpbOBeHiWdbQsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:38 2026 by rpki-client