Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          +3krowpPAGE+X6hGEiC7O6U7pKLeRs6FRjH1ThbI5uU=
Subject key identifier:   FE:66:57:D0:61:93:18:69:89:95:DF:19:73:41:DB:41:91:50:DE:10
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       019D27A8FB15E3DB666725DB3AA7B217D4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          18C6
Signing time:             Thu 26 Mar 2026 01:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:18 +0000
Files and hashes:         1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
                          2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
                          3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: d+UHlicXWlwIjP+N/g2v0dZ9Bae1OlcHLv1cEgxSLag=)
                          4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
                          5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
                          6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
                          7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:fb:15:e3:db:66:67:25:db:3a:a7:b2:17:d4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Mar 26 01:01:18 2026 GMT
            Not After : Mar 27 01:01:18 2026 GMT
        Subject: CN=fe6657d0619318698995df197341db419150de10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:42:4d:b3:b6:fc:9a:c1:f7:fa:03:af:80:
                    ec:22:64:c8:11:53:ad:3a:bb:89:ff:eb:6a:5d:97:
                    16:12:af:45:4c:60:ee:40:85:39:3c:c6:cb:e4:12:
                    33:36:f2:f0:8d:1a:42:84:4a:0e:50:34:c1:73:96:
                    ad:28:a6:74:73:38:ab:45:9e:86:1b:6c:55:52:86:
                    49:c4:61:e2:58:69:08:6c:11:52:6f:80:f2:4f:d1:
                    84:eb:13:88:a1:10:98:c1:3c:b3:7c:4d:35:fd:4e:
                    55:93:e1:b8:f3:1f:11:c4:a1:0e:18:c4:77:1f:26:
                    90:b2:49:2e:0b:15:2b:58:73:ad:41:41:b6:0e:14:
                    66:04:ef:26:16:34:fe:3a:1e:34:77:4b:f2:23:b7:
                    44:13:f9:41:c3:8f:08:eb:75:5a:67:f5:96:3f:cc:
                    6e:e9:d0:a2:4a:02:5b:bf:08:1c:9f:4f:78:60:44:
                    12:e8:cc:01:5a:22:1e:08:5e:5c:c6:1c:c4:e1:3a:
                    c9:9f:13:16:77:3c:a4:5c:49:ff:80:07:0c:27:6b:
                    77:c8:73:4d:c1:01:82:51:49:ae:31:d4:0a:b2:de:
                    26:8d:7b:45:49:92:58:73:1c:ee:e3:58:16:00:25:
                    40:ca:2e:89:39:f4:ad:50:86:a7:60:d7:93:56:02:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:66:57:D0:61:93:18:69:89:95:DF:19:73:41:DB:41:91:50:DE:10
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:3d:72:ae:15:44:40:77:76:3d:3e:44:eb:d5:bf:e9:8f:
         2c:c9:33:39:63:57:42:bb:00:46:cf:e7:4f:3f:ba:33:6e:fd:
         17:40:0b:5c:61:81:bd:2b:4a:28:10:60:65:83:99:0c:bb:66:
         c2:02:5a:ad:83:59:1b:18:0f:db:ea:94:62:a1:59:58:ae:4c:
         db:aa:4f:f0:95:c3:2c:fe:a7:2a:78:d8:f3:31:3a:06:9a:49:
         23:a1:41:d1:84:10:9a:60:55:01:7a:06:58:fd:13:7d:71:ed:
         14:55:6f:b7:0b:a2:6b:2f:a2:11:08:5b:52:57:68:78:63:05:
         46:b1:06:6b:e5:b1:74:c3:17:a0:d6:b0:b0:a1:d2:3c:a8:81:
         b1:2b:08:23:b5:8e:3c:53:0d:c8:db:76:87:1e:2b:a9:15:29:
         0f:a7:16:85:b3:c5:b9:fb:32:78:2e:7d:c2:21:cb:0d:d8:a5:
         e4:59:61:31:ab:aa:1a:a5:f9:64:ca:96:2b:8a:57:50:cc:d3:
         00:26:44:78:6d:57:99:ba:99:08:88:90:a3:9a:cb:b3:3a:46:
         fa:bb:04:4a:27:c4:f4:da:96:d3:36:bd:2e:ba:04:c8:df:df:
         fb:72:fc:de:7a:80:e7:22:35:b3:c6:7f:33:f1:26:a8:e8:ef:
         e3:3b:f6:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPsV49tmZyXbOqeyF9TMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjYwMzI2MDEwMTE4WhcNMjYwMzI3MDEwMTE4WjAzMTEwLwYDVQQD
EyhmZTY2NTdkMDYxOTMxODY5ODk5NWRmMTk3MzQxZGI0MTkxNTBkZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkhCTbO2/JrB9/oDr4DsImTIEVOt
OruJ/+tqXZcWEq9FTGDuQIU5PMbL5BIzNvLwjRpChEoOUDTBc5atKKZ0czirRZ6G
G2xVUoZJxGHiWGkIbBFSb4DyT9GE6xOIoRCYwTyzfE01/U5Vk+G48x8RxKEOGMR3
HyaQskkuCxUrWHOtQUG2DhRmBO8mFjT+Oh40d0vyI7dEE/lBw48I63VaZ/WWP8xu
6dCiSgJbvwgcn094YEQS6MwBWiIeCF5cxhzE4TrJnxMWdzykXEn/gAcMJ2t3yHNN
wQGCUUmuMdQKst4mjXtFSZJYcxzu41gWACVAyi6JOfStUIanYNeTVgKRswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5mV9BhkxhpiZXfGXNB20GRUN4QMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz49cq4V
REB3dj0+ROvVv+mPLMkzOWNXQrsARs/nTz+6M279F0ALXGGBvStKKBBgZYOZDLtm
wgJarYNZGxgP2+qUYqFZWK5M26pP8JXDLP6nKnjY8zE6BppJI6FB0YQQmmBVAXoG
WP0TfXHtFFVvtwuiay+iEQhbUldoeGMFRrEGa+WxdMMXoNawsKHSPKiBsSsII7WO
PFMNyNt2hx4rqRUpD6cWhbPFufsyeC59wiHLDdil5FlhMauqGqX5ZMqWK4pXUMzT
ACZEeG1XmbqZCIiQo5rLszpG+rsESifE9NqW0za9LroEyN/f+3L83nqA5yI1s8Z/
M/EmqOjv4zv2xA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:24 2026 by rpki-client