Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          6Uxx2YlZydZ8ffTBCMfdepBFXwGZWgUV8UNg6tik16M=
Subject key identifier:   2D:DB:B0:C5:B0:F7:C1:06:24:C6:DE:41:41:D1:D7:42:E7:35:60:0D
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019D28849141188EA37B392C6952B42C5BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          18A6
Signing time:             Thu 26 Mar 2026 05:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:09 +0000
Files and hashes:         1: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: qaDMF2RNjrXWOF8SFCdSKJMHi4jgeRx2HFUGr4Jw7QQ=)
                          2: NUHMSZ91VQ9aijP6NP65PNKnp5g.roa (hash: yD96gdBLazMXGrH4L/cZUia8UrghJkd3RyMhoxg7K64=)
                          3: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          4: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          5: jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa (hash: KVbYTEO9c7jfQrSlpqs7ND4XndUrbw5w4184ONdqawM=)
                          6: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
                          7: zweolzwrHnk3xZX75Vx487OApyI.roa (hash: fsFWViG1G306jQcDvI1DY5zG2KP6QpQyeNFqGF9udOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:91:41:18:8e:a3:7b:39:2c:69:52:b4:2c:5b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Mar 26 05:01:09 2026 GMT
            Not After : Mar 27 05:01:09 2026 GMT
        Subject: CN=2ddbb0c5b0f7c10624c6de4141d1d742e735600d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:55:6a:2c:9c:fb:4c:ea:78:b4:48:25:ac:
                    13:5b:a8:0f:c3:d9:35:40:06:70:0a:3b:2e:af:76:
                    8c:c9:0a:c8:6b:0b:ab:f8:b1:02:00:7a:5f:aa:df:
                    bc:02:2f:d9:f4:8c:a4:35:01:14:9b:64:52:77:bd:
                    c4:28:bd:a6:56:b1:25:81:20:8b:41:2d:df:12:c2:
                    bf:62:6c:5b:38:2d:88:60:25:b8:02:89:f4:82:91:
                    08:60:52:51:2d:62:36:f5:0e:7b:70:5c:fa:2e:65:
                    5a:46:90:70:d3:a5:48:fe:f9:88:a3:8b:4c:c3:1d:
                    f9:89:8c:50:f8:42:f0:d8:ac:d9:b9:63:c3:6c:ef:
                    e6:d1:47:ba:7a:f1:0f:a2:1e:6b:04:2d:db:cb:4a:
                    28:41:42:6c:bb:50:37:de:12:d5:f3:d3:04:64:aa:
                    4e:b1:8b:b3:fa:92:83:b1:ff:08:ce:b1:de:7a:99:
                    4f:8e:be:fa:bb:d2:9b:06:cf:91:d7:97:b9:22:0d:
                    e3:77:87:46:00:94:2a:d8:a6:99:69:bc:ea:f2:1d:
                    ec:81:82:a2:80:b8:d9:55:b3:f8:87:03:13:22:fd:
                    84:cf:34:ce:6d:d4:71:e1:c6:9d:44:32:6d:41:e7:
                    3e:01:92:33:de:5a:c6:9e:5d:df:d1:5c:10:fd:88:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:B0:C5:B0:F7:C1:06:24:C6:DE:41:41:D1:D7:42:E7:35:60:0D
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:06:cf:bd:ec:d8:be:ff:f8:e8:11:a3:8f:c5:36:cf:9f:d5:
         ec:22:d3:58:d3:36:8c:7f:60:b1:22:aa:ff:c8:83:c5:d1:77:
         71:c7:96:f1:9f:eb:60:48:40:b3:a4:6a:1e:b0:7e:77:f6:de:
         e1:ab:be:ea:11:b5:77:73:f0:fb:b8:05:c8:e3:47:4e:af:12:
         52:b5:37:04:2b:23:69:68:c5:47:7c:af:f9:85:37:fd:bd:87:
         c7:48:8b:76:40:61:b6:e0:96:dd:08:d2:3e:94:38:10:2b:af:
         c3:b6:8f:96:e1:47:ab:af:0a:dc:14:d1:23:44:e5:1d:50:a3:
         9c:90:db:6d:71:b1:ae:e3:a2:a8:8b:6c:c7:90:3a:83:9a:a1:
         39:f6:b6:93:c3:ca:11:90:a0:12:62:a2:be:8a:b6:8a:4d:76:
         4c:2c:0e:11:35:1d:a2:dd:43:48:20:c6:d8:9f:36:6a:15:b8:
         e9:48:14:b6:b8:ca:12:56:f1:e8:f6:29:c2:f4:05:c0:b0:74:
         dc:a5:63:c8:fb:f4:33:b1:02:07:db:ff:2b:5b:75:46:dc:a4:
         cb:35:0b:e3:74:3e:0e:2d:09:10:ed:63:85:45:fd:55:9f:6e:
         04:11:97:3f:ab:b4:98:0a:21:3f:6d:b8:58:7a:b9:0c:4f:89:
         ab:69:76:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJFBGI6jezksaVK0LFvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjYwMzI2MDUwMTA5WhcNMjYwMzI3MDUwMTA5WjAzMTEwLwYDVQQD
EygyZGRiYjBjNWIwZjdjMTA2MjRjNmRlNDE0MWQxZDc0MmU3MzU2MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLFVaiyc+0zqeLRIJawTW6gPw9k1
QAZwCjsur3aMyQrIawur+LECAHpfqt+8Ai/Z9IykNQEUm2RSd73EKL2mVrElgSCL
QS3fEsK/YmxbOC2IYCW4Aon0gpEIYFJRLWI29Q57cFz6LmVaRpBw06VI/vmIo4tM
wx35iYxQ+ELw2KzZuWPDbO/m0Ue6evEPoh5rBC3by0ooQUJsu1A33hLV89MEZKpO
sYuz+pKDsf8IzrHeeplPjr76u9KbBs+R15e5Ig3jd4dGAJQq2KaZabzq8h3sgYKi
gLjZVbP4hwMTIv2EzzTObdRx4cadRDJtQec+AZIz3lrGnl3f0VwQ/YiPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3bsMWw98EGJMbeQUHR10LnNWANMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAbPvezY
vv/46BGjj8U2z5/V7CLTWNM2jH9gsSKq/8iDxdF3cceW8Z/rYEhAs6RqHrB+d/be
4au+6hG1d3Pw+7gFyONHTq8SUrU3BCsjaWjFR3yv+YU3/b2Hx0iLdkBhtuCW3QjS
PpQ4ECuvw7aPluFHq68K3BTRI0TlHVCjnJDbbXGxruOiqItsx5A6g5qhOfa2k8PK
EZCgEmKivoq2ik12TCwOETUdot1DSCDG2J82ahW46UgUtrjKElbx6PYpwvQFwLB0
3KVjyPv0M7ECB9v/K1t1RtykyzUL43Q+Di0JEO1jhUX9VZ9uBBGXP6u0mAohP224
WHq5DE+Jq2l2cA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:51:58 2026 by rpki-client