Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          moKjMToqtaVFsG2ZyISv0n5gcNR0r8l/QXncsF/tJwM=
Subject key identifier:   37:A4:CF:D9:CA:05:8D:42:C8:2E:9D:63:F0:C7:CB:D0:BE:73:C0:33
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       019D28BBED75C3FC43044B2D89D8A16FBE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          121D
Signing time:             Thu 26 Mar 2026 06:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:37 +0000
Files and hashes:         1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
                          2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: VKjMq3jAhFQ53OWhsmh50uGsfm295/aRrVLegAM2Yg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:ed:75:c3:fc:43:04:4b:2d:89:d8:a1:6f:be:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Mar 26 06:01:37 2026 GMT
            Not After : Mar 27 06:01:37 2026 GMT
        Subject: CN=37a4cfd9ca058d42c82e9d63f0c7cbd0be73c033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:6d:f1:47:73:0e:d9:6f:ee:c2:66:81:5c:
                    13:75:f6:2d:7d:e6:81:2f:8c:f6:11:f5:01:df:bc:
                    c8:96:95:0b:b8:20:ef:51:22:f2:b2:10:ca:97:8b:
                    7f:94:86:ff:29:05:14:06:96:69:01:42:6e:af:2c:
                    f5:18:3c:fb:05:9c:80:e4:eb:78:f2:22:a3:20:ab:
                    15:6d:b0:77:a5:22:bf:e8:4e:8c:89:eb:6e:59:b1:
                    a3:77:a9:d6:83:be:58:32:3a:a5:1e:70:d4:71:a6:
                    5e:5f:fb:6c:ce:77:4e:db:07:17:22:64:d8:32:b8:
                    21:38:5f:56:2c:6f:63:d9:29:df:4f:e3:f0:9b:f8:
                    68:f7:c6:b1:03:89:83:49:38:72:3d:38:72:55:7b:
                    33:75:95:fb:2c:e5:30:15:ef:8f:eb:42:8a:c7:84:
                    b8:85:71:dc:58:39:2d:ac:80:fd:e7:2f:03:b5:bd:
                    8c:e5:b0:86:04:72:6c:92:fe:67:88:29:08:06:36:
                    02:85:76:46:eb:bc:f6:21:78:d4:cc:36:8e:fe:f3:
                    23:a5:d1:5a:76:e7:64:33:fb:2d:91:9f:ad:4c:64:
                    00:9a:07:be:03:70:e4:d2:d3:04:44:fd:01:a9:64:
                    b4:23:30:9a:6b:e6:ea:f5:66:b5:49:fe:d2:8a:05:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:CF:D9:CA:05:8D:42:C8:2E:9D:63:F0:C7:CB:D0:BE:73:C0:33
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:c5:23:ed:ee:a4:2a:d2:91:f6:1e:3c:58:64:05:08:dd:
         d1:a8:f5:4f:50:1b:b5:14:0f:a8:fd:4b:4c:4f:f6:9e:36:3b:
         e7:78:37:86:ad:a3:c9:8e:5a:59:0e:e3:79:70:e2:dc:e8:47:
         da:08:6a:ed:40:4d:a7:f3:81:32:b5:eb:d1:46:ab:62:4f:f8:
         29:8d:41:0c:df:d6:78:13:89:00:09:63:90:66:12:89:ba:e8:
         e7:e3:b5:de:a4:e6:00:ae:b3:e3:f2:c8:c7:dc:d3:1b:6d:03:
         f9:43:a6:80:3c:d1:c1:56:6d:3b:9a:01:8d:29:24:36:82:f2:
         bc:24:d0:f5:9a:0a:c7:b9:20:f2:67:e3:59:16:9e:20:94:a0:
         25:23:6a:55:f3:c2:61:b5:0f:bf:97:a0:c0:6d:71:e2:b5:21:
         37:ef:a7:67:81:a7:c3:b8:b8:fe:c5:3f:4c:46:c3:bc:87:ca:
         4c:79:23:21:25:b3:93:f7:94:08:6e:9f:89:f0:d9:a5:c9:fe:
         d6:c0:ca:8f:d5:27:1b:f6:fb:ca:28:65:79:20:62:53:3e:a1:
         7e:8d:94:8f:fe:cd:e0:f9:a7:29:f7:d5:6e:ae:7c:3b:e1:ea:
         6a:b1:f9:92:89:63:6f:b2:da:42:5b:5a:40:4f:9d:1a:17:db:
         12:07:d7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+11w/xDBEstidihb74ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjYwMzI2MDYwMTM3WhcNMjYwMzI3MDYwMTM3WjAzMTEwLwYDVQQD
EygzN2E0Y2ZkOWNhMDU4ZDQyYzgyZTlkNjNmMGM3Y2JkMGJlNzNjMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisRt8UdzDtlv7sJmgVwTdfYtfeaB
L4z2EfUB37zIlpULuCDvUSLyshDKl4t/lIb/KQUUBpZpAUJuryz1GDz7BZyA5Ot4
8iKjIKsVbbB3pSK/6E6MietuWbGjd6nWg75YMjqlHnDUcaZeX/tszndO2wcXImTY
MrghOF9WLG9j2SnfT+Pwm/ho98axA4mDSThyPThyVXszdZX7LOUwFe+P60KKx4S4
hXHcWDktrID95y8Dtb2M5bCGBHJskv5niCkIBjYChXZG67z2IXjUzDaO/vMjpdFa
dudkM/stkZ+tTGQAmge+A3Dk0tMERP0BqWS0IzCaa+bq9Wa1Sf7SigVfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDekz9nKBY1CyC6dY/DHy9C+c8AzMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkTFI+3u
pCrSkfYePFhkBQjd0aj1T1AbtRQPqP1LTE/2njY753g3hq2jyY5aWQ7jeXDi3OhH
2ghq7UBNp/OBMrXr0UarYk/4KY1BDN/WeBOJAAljkGYSibro5+O13qTmAK6z4/LI
x9zTG20D+UOmgDzRwVZtO5oBjSkkNoLyvCTQ9ZoKx7kg8mfjWRaeIJSgJSNqVfPC
YbUPv5egwG1x4rUhN++nZ4Gnw7i4/sU/TEbDvIfKTHkjISWzk/eUCG6fifDZpcn+
1sDKj9UnG/b7yihleSBiUz6hfo2Uj/7N4PmnKffVbq58O+HqarH5koljb7LaQlta
QE+dGhfbEgfX9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:36 2026 by rpki-client