Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File:                     mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier:          2f92uIpVXmdy3hkf0XlJQwE/q+5zfpbkuW3tuQoY+nE=
Subject key identifier:   2C:BA:03:47:58:91:8F:17:4A:5D:17:64:1C:18:B2:87:91:59:51:43
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer:       /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial:       019D2996DE2CD90A991860EECB9865FF3BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number:          17B6
Signing time:             Thu 26 Mar 2026 10:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:46 +0000
Files and hashes:         1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
                          2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
                          3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: ij/nYxlGp+nWMC0vZW/V8FzXvniafReSJgviA0K32yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:de:2c:d9:0a:99:18:60:ee:cb:98:65:ff:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
        Validity
            Not Before: Mar 26 10:00:46 2026 GMT
            Not After : Mar 27 10:00:46 2026 GMT
        Subject: CN=2cba034758918f174a5d17641c18b28791595143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:80:f4:fd:51:a3:43:c3:d0:10:56:46:50:
                    64:27:ee:1c:b6:0e:0b:98:b6:f4:34:13:80:64:3d:
                    85:9a:99:9f:ac:52:35:46:68:03:1d:ea:37:0c:4f:
                    2d:29:ee:47:10:c1:5a:49:89:c7:f5:6c:8f:b3:5d:
                    7f:aa:79:a0:fa:a6:4d:6f:2f:49:ea:29:57:bd:39:
                    e9:e0:1d:73:08:df:c5:6d:e2:79:4a:85:80:4c:6c:
                    db:3e:6d:d6:97:7e:37:4d:08:4e:7e:94:6a:57:e8:
                    e9:d9:41:9e:1f:d7:8e:14:d0:66:d2:f5:83:6f:e5:
                    9d:68:74:27:a9:7d:bb:52:62:e7:a9:0e:01:36:0d:
                    40:c9:62:cf:59:ff:3f:b8:a5:24:e9:fe:e5:48:8a:
                    76:66:f8:07:96:9e:2b:87:e8:0f:83:5f:94:a0:41:
                    6b:00:69:e0:d8:17:8e:fc:ce:bb:6d:ae:f9:d2:44:
                    40:77:62:58:f2:8f:8c:94:15:be:d7:39:4d:3b:82:
                    d9:f5:79:94:a1:66:03:23:5e:d5:02:d9:04:3e:82:
                    6a:58:06:70:2a:e2:2c:b5:23:fd:d5:e4:21:ae:fc:
                    7e:21:47:83:e0:5e:71:42:c3:e2:ba:eb:98:7f:d9:
                    a7:c4:2f:0e:a4:e3:47:ca:0f:44:ac:55:c3:cf:9d:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:03:47:58:91:8F:17:4A:5D:17:64:1C:18:B2:87:91:59:51:43
            X509v3 Authority Key Identifier:
                keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:9e:49:5e:bc:ad:02:31:6e:02:65:eb:41:17:25:82:b7:
         94:e2:c8:ad:80:fb:af:66:85:d1:9f:83:e1:3e:13:68:62:9c:
         64:a5:fd:b5:b4:36:f5:58:bd:17:70:e4:51:ec:34:32:59:ff:
         3f:95:44:5b:a0:48:c3:ec:e3:47:63:a3:03:dc:d8:82:42:34:
         74:86:4d:a0:ef:d0:02:fe:ab:65:29:6d:88:16:d4:8a:f3:a9:
         1a:cf:a0:36:5c:e8:da:87:e8:49:5e:7d:5f:72:11:17:1a:9e:
         a3:ca:1f:df:26:f2:74:0b:60:f4:9e:64:61:17:0d:d1:12:48:
         6f:28:c2:e1:8c:ca:30:72:06:20:c8:d2:f0:6e:3d:65:5f:32:
         96:60:d0:a1:be:2a:70:2f:53:75:20:70:e9:22:92:b9:c7:d0:
         e1:2b:21:49:c9:93:df:43:cd:22:7a:09:8e:0e:8f:c5:09:b0:
         3c:b9:d8:d8:30:9d:08:db:49:fd:ad:38:1a:be:5f:7a:6b:12:
         58:0c:3a:e8:9a:93:18:78:35:b9:6d:61:85:95:1e:91:b9:5c:
         b3:d2:9b:14:dc:d1:d1:4c:e8:57:b7:30:02:1a:c2:6b:fc:25:
         30:98:83:4f:a8:44:fe:95:ef:63:4b:c4:64:55:44:9e:4a:65:
         65:fe:ce:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plt4s2QqZGGDuy5hl/zv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1
NjkzYmMwHhcNMjYwMzI2MTAwMDQ2WhcNMjYwMzI3MTAwMDQ2WjAzMTEwLwYDVQQD
EygyY2JhMDM0NzU4OTE4ZjE3NGE1ZDE3NjQxYzE4YjI4NzkxNTk1MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4CA9P1Ro0PD0BBWRlBkJ+4ctg4L
mLb0NBOAZD2FmpmfrFI1RmgDHeo3DE8tKe5HEMFaSYnH9WyPs11/qnmg+qZNby9J
6ilXvTnp4B1zCN/FbeJ5SoWATGzbPm3Wl343TQhOfpRqV+jp2UGeH9eOFNBm0vWD
b+WdaHQnqX27UmLnqQ4BNg1AyWLPWf8/uKUk6f7lSIp2ZvgHlp4rh+gPg1+UoEFr
AGng2BeO/M67ba750kRAd2JY8o+MlBW+1zlNO4LZ9XmUoWYDI17VAtkEPoJqWAZw
KuIstSP91eQhrvx+IUeD4F5xQsPiuuuYf9mnxC8OpONHyg9ErFXDz53mgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy6A0dYkY8XSl0XZBwYsoeRWVFDMB8GA1UdIwQY
MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt
N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw
LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUmeSV68
rQIxbgJl60EXJYK3lOLIrYD7r2aF0Z+D4T4TaGKcZKX9tbQ29Vi9F3DkUew0Mln/
P5VEW6BIw+zjR2OjA9zYgkI0dIZNoO/QAv6rZSltiBbUivOpGs+gNlzo2ofoSV59
X3IRFxqeo8of3ybydAtg9J5kYRcN0RJIbyjC4YzKMHIGIMjS8G49ZV8ylmDQob4q
cC9TdSBw6SKSucfQ4SshScmT30PNInoJjg6PxQmwPLnY2DCdCNtJ/a04Gr5femsS
WAw66JqTGHg1uW1hhZUekblcs9KbFNzR0UzoV7cwAhrCa/wlMJiDT6hE/pXvY0vE
ZFVEnkplZf7O/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:15 2026 by rpki-client