Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
File:                     C-vO5NIzea7YGuz_x6dCs1rN3bM.mft (raw, json)
Hash identifier:          jqJWtD4nT8Dat04FovstpOvuubBXMAjG1n0St7kUOsk=
Subject key identifier:   73:67:1E:FE:DF:D3:D8:5E:43:00:3D:C5:0D:EF:B3:75:5C:ED:82:FF
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Certificate issuer:       /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial:       019D2A04E593E24A985EBDC8A3BF7A7871D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
Manifest number:          0856
Signing time:             Thu 26 Mar 2026 12:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:56 +0000
Files and hashes:         1: AcEFt75tOJgLKPa7_t8L0A_OLFo.roa (hash: JRdcnVQdTlWv5ijGJ1YMZ2Egnh9P2RtaY3DS9lG8XqI=)
                          2: C-vO5NIzea7YGuz_x6dCs1rN3bM.crl (hash: FvGz9WCE7ts3EhTebZFnJktAAVNSP3yVlbePE51Jcz8=)
                          3: GCR5fStnI30XKdsvCkEU8-FA8yY.roa (hash: GCd9XNROyyN1UpPkKaJbAUZq33QgeZj03xTsm9ooCLA=)
                          4: Ot4KxuXmkuOStvZOE1g8U1UKl3o.roa (hash: VjNwYRDzcrLWMS6mv1LsQbtQ5eDRXZIrApp3NshaenY=)
                          5: SoifJezxA6M2Rojt5hzyHbEbfq0.asa (hash: 6eNyZ5Xc/7zuDfKiwwuynBOXlEoLUXVYKPU1kYR9ciE=)
                          6: T-yHWQIKrIU-HkMZzlKXfpYvnmE.roa (hash: 6QSFy2DfTCLZpgF8WBvvEXqsQJWkkelI/B/nt8LQ35Q=)
                          7: u_r2wqxVZlkum_nma3b1yoSaRQw.roa (hash: KYY56aOFF6dfT1G0trJONcrWA7gbMd0N9hHlntC611c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:e5:93:e2:4a:98:5e:bd:c8:a3:bf:7a:78:71:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
        Validity
            Not Before: Mar 26 12:00:56 2026 GMT
            Not After : Mar 27 12:00:56 2026 GMT
        Subject: CN=73671efedfd3d85e43003dc50defb3755ced82ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:ce:66:7f:93:53:ba:fe:52:5c:c4:3e:ea:
                    c5:ba:ad:0d:67:54:34:ef:8c:ac:02:88:4b:1b:e7:
                    e2:ae:b2:a0:fd:b9:fa:88:34:4b:19:93:cd:8b:fd:
                    e2:e0:6a:67:61:70:26:9a:48:69:3c:d5:9a:49:51:
                    2d:84:e2:06:2f:dd:b7:66:68:d3:38:fa:fd:a1:f6:
                    5b:a0:e1:17:6c:2c:6b:23:f8:75:13:4e:b5:3c:4c:
                    66:e9:d2:f0:e5:bd:71:e1:c7:cc:d0:1c:18:b1:b6:
                    1b:8a:3b:2d:27:d3:7d:0a:7b:7e:87:be:67:f0:dc:
                    be:c1:49:55:46:d6:16:03:e3:b2:7c:64:91:12:86:
                    75:8c:7d:66:db:9d:9d:a6:ac:76:fb:76:be:42:9c:
                    be:05:55:87:13:12:06:bf:7a:5c:db:58:97:ef:3e:
                    05:aa:c7:f2:85:78:5f:44:d6:ec:40:87:f4:c7:e7:
                    85:41:41:96:1d:1f:f6:1a:54:50:1a:7d:40:2a:b1:
                    b0:73:f6:49:b5:64:a8:b0:cb:32:18:49:36:47:87:
                    f4:94:10:9f:cd:1f:eb:96:80:a9:ff:b6:60:1b:11:
                    f5:89:a4:d6:11:bb:74:58:03:68:61:c4:80:e6:ec:
                    93:5a:8c:61:fe:e4:3b:53:91:7b:38:df:cb:53:ca:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:67:1E:FE:DF:D3:D8:5E:43:00:3D:C5:0D:EF:B3:75:5C:ED:82:FF
            X509v3 Authority Key Identifier:
                keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:74:85:f0:69:8a:94:b2:83:a6:b8:c0:60:3c:16:7b:85:63:
         f7:5d:f7:ad:75:6e:bf:c5:4f:83:94:18:50:7a:64:7c:83:13:
         2a:ee:59:8f:57:6b:ab:be:71:f3:b6:8e:1b:a9:47:ba:a0:03:
         b4:c2:68:de:fe:8d:f5:1e:77:f4:65:c9:d7:17:ec:58:f6:fb:
         26:f9:f0:9e:19:1c:b5:3f:39:ec:6d:7b:fb:2c:ed:3f:b0:11:
         d7:be:d6:b9:6b:6d:54:f0:d5:14:1f:44:e9:cc:3f:f0:ad:e3:
         3c:09:d7:4a:ee:2a:65:45:f4:b9:b6:ab:9e:e4:a6:3e:d3:46:
         aa:4a:f6:89:e7:e0:c1:94:b0:b5:0f:f2:7c:ec:5a:fc:7d:c7:
         8e:0a:bc:71:4c:57:f1:b2:4a:02:ce:f5:6c:61:c1:7e:83:e6:
         af:54:8b:1c:81:12:56:6e:80:27:98:e5:86:41:88:64:3b:76:
         b2:ba:af:89:ee:be:29:af:83:01:0f:8e:49:20:a8:fb:b4:42:
         e9:cc:13:56:e3:dd:89:c9:94:42:42:48:ef:fb:aa:fa:c4:1b:
         2e:4a:0b:40:40:58:d4:54:60:22:bf:24:4d:81:22:be:ff:41:
         2a:03:8b:67:45:35:d0:29:4c:75:85:80:c7:77:22:3a:78:0f:
         91:1d:83:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBOWT4kqYXr3Io796eHHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj
ZGRkYjMwHhcNMjYwMzI2MTIwMDU2WhcNMjYwMzI3MTIwMDU2WjAzMTEwLwYDVQQD
Eyg3MzY3MWVmZWRmZDNkODVlNDMwMDNkYzUwZGVmYjM3NTVjZWQ4MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuTOZn+TU7r+UlzEPurFuq0NZ1Q0
74ysAohLG+firrKg/bn6iDRLGZPNi/3i4GpnYXAmmkhpPNWaSVEthOIGL923ZmjT
OPr9ofZboOEXbCxrI/h1E061PExm6dLw5b1x4cfM0BwYsbYbijstJ9N9Cnt+h75n
8Ny+wUlVRtYWA+OyfGSREoZ1jH1m252dpqx2+3a+Qpy+BVWHExIGv3pc21iX7z4F
qsfyhXhfRNbsQIf0x+eFQUGWHR/2GlRQGn1AKrGwc/ZJtWSosMsyGEk2R4f0lBCf
zR/rloCp/7ZgGxH1iaTWEbt0WANoYcSA5uyTWoxh/uQ7U5F7ON/LU8rrMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNnHv7f09heQwA9xQ3vs3Vc7YL/MB8GA1UdIwQY
MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt
OTlhMTFmNjM4NWFiLzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi
LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXSF8GmK
lLKDprjAYDwWe4Vj9133rXVuv8VPg5QYUHpkfIMTKu5Zj1drq75x87aOG6lHuqAD
tMJo3v6N9R539GXJ1xfsWPb7JvnwnhkctT857G17+yztP7AR177WuWttVPDVFB9E
6cw/8K3jPAnXSu4qZUX0ubarnuSmPtNGqkr2iefgwZSwtQ/yfOxa/H3Hjgq8cUxX
8bJKAs71bGHBfoPmr1SLHIESVm6AJ5jlhkGIZDt2srqvie6+Ka+DAQ+OSSCo+7RC
6cwTVuPdicmUQkJI7/uq+sQbLkoLQEBY1FRgIr8kTYEivv9BKgOLZ0U10ClMdYWA
x3ciOngPkR2DJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:47 2026 by rpki-client