Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File:                     mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier:          F83GxH5UeiWnG5M/WZQxkD5J0XthQzfK+0HdcDX7qCg=
Subject key identifier:   57:CB:4E:18:F1:E1:B0:82:70:1D:76:B3:7B:04:35:4D:59:EA:1C:A4
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer:       /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial:       019D27E017F3B565372B0571925A11C585B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number:          0774
Signing time:             Thu 26 Mar 2026 02:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:30 +0000
Files and hashes:         1: Jpv9SoI3kGDyqv0pBDJ7LN0fBHk.roa (hash: 9hKDjqkV+zjeJgPKdV8lkrKW71TW0AgzmRdy+RD5KHQ=)
                          2: cBfzvfjBZ9QzsbzNAqBanT3PAEQ.roa (hash: 9GQHIoCRbaLBWwe64oMJBck16pra3GUNikVKVTlABGQ=)
                          3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: CzMCPQcZCh7BasZZQL5g1vkSXXhWI4CxYq3rUTfRaxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:17:f3:b5:65:37:2b:05:71:92:5a:11:c5:85:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
        Validity
            Not Before: Mar 26 02:01:30 2026 GMT
            Not After : Mar 27 02:01:30 2026 GMT
        Subject: CN=57cb4e18f1e1b082701d76b37b04354d59ea1ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d6:d7:31:bb:32:0c:b2:28:8e:cd:26:e8:0e:
                    3e:20:99:8c:c1:e8:af:38:ea:13:36:41:78:29:5f:
                    e0:7d:35:4f:e0:fb:73:eb:16:fd:53:1d:c2:cd:ff:
                    6c:0a:39:fc:80:52:be:e5:3e:35:18:33:f9:51:8e:
                    ee:93:d1:88:42:3a:3d:df:5d:86:10:ea:16:69:51:
                    26:8c:fe:23:f3:ae:08:68:ce:b1:58:15:b7:d2:40:
                    13:f9:12:7d:ba:be:2d:ea:bc:a4:83:bf:42:b8:ff:
                    4a:77:a0:7c:ab:da:2e:44:ba:59:04:3d:74:a0:28:
                    0c:fb:16:3a:fd:95:78:5b:0b:56:87:57:fd:a3:fd:
                    e1:9b:4d:de:58:11:72:c2:21:c3:31:44:f0:f5:23:
                    9b:12:18:a3:ed:44:77:3e:58:ee:eb:a8:dd:2c:48:
                    bb:0a:a1:5f:df:dc:db:8c:81:d6:26:12:46:ec:59:
                    a3:6e:95:66:b5:cb:b2:c4:e3:53:a6:91:49:42:5b:
                    8c:9f:5c:08:39:34:8f:16:df:67:a1:39:b4:b7:09:
                    1f:ae:c2:1e:fb:23:93:98:05:a9:a5:fc:ed:c2:92:
                    76:ef:41:40:97:91:e5:d0:c4:29:bd:55:59:c6:cd:
                    bc:cf:31:81:03:c7:c8:a9:97:08:04:9a:da:d7:7f:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CB:4E:18:F1:E1:B0:82:70:1D:76:B3:7B:04:35:4D:59:EA:1C:A4
            X509v3 Authority Key Identifier:
                keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:13:52:cc:e5:36:25:8a:a0:e3:6c:84:56:46:0b:af:b6:
         d5:4b:43:31:12:f9:14:8b:7c:fc:46:3e:53:ee:06:e7:55:57:
         f3:b5:de:35:0b:23:42:f0:c2:02:42:20:43:3d:7a:d1:a8:f5:
         e9:f8:44:14:12:ad:0e:48:1d:67:e9:0e:29:14:dd:91:4b:94:
         5d:24:df:0a:3a:b3:bc:0b:f1:4d:1e:e5:ba:e8:04:e6:47:0d:
         e0:7d:67:26:e1:9c:ad:90:ab:44:f1:6e:12:a9:dd:fe:de:e6:
         2d:a9:d9:54:28:f9:a9:fe:a1:c6:93:88:29:ae:d8:93:31:b8:
         f4:4b:fc:ca:87:32:da:c0:e5:17:d8:9a:8a:d4:2f:19:24:b5:
         70:80:ff:19:68:b8:f8:eb:e3:73:36:02:ed:3c:99:58:30:75:
         e1:8b:32:4e:68:a9:86:ce:10:51:f9:01:37:16:cb:1c:63:8b:
         95:2f:bd:dc:11:a7:97:54:a0:a0:ac:8c:63:80:b7:4f:a7:90:
         61:13:52:43:98:f4:dd:26:7e:92:6d:40:07:0e:9d:53:2b:08:
         bb:34:3e:5b:4a:31:1a:58:d2:9d:f7:b9:34:92:3d:bc:a8:08:
         c6:47:d3:3e:7a:6f:07:b3:96:31:92:b3:9c:d0:11:45:67:92:
         44:b4:9f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BfztWU3KwVxkloRxYWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzE3ZWQxZGM0ODgwNDRlNWUyYWIwMDc1NDMzNTU4Y2Zk
ZThjODUwHhcNMjYwMzI2MDIwMTMwWhcNMjYwMzI3MDIwMTMwWjAzMTEwLwYDVQQD
Eyg1N2NiNGUxOGYxZTFiMDgyNzAxZDc2YjM3YjA0MzU0ZDU5ZWExY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dbXMbsyDLIojs0m6A4+IJmMweiv
OOoTNkF4KV/gfTVP4Ptz6xb9Ux3Czf9sCjn8gFK+5T41GDP5UY7uk9GIQjo9312G
EOoWaVEmjP4j864IaM6xWBW30kAT+RJ9ur4t6rykg79CuP9Kd6B8q9ouRLpZBD10
oCgM+xY6/ZV4WwtWh1f9o/3hm03eWBFywiHDMUTw9SObEhij7UR3Plju66jdLEi7
CqFf39zbjIHWJhJG7FmjbpVmtcuyxONTppFJQluMn1wIOTSPFt9noTm0twkfrsIe
+yOTmAWppfztwpJ270FAl5Hl0MQpvVVZxs28zzGBA8fIqZcIBJra1398LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfLThjx4bCCcB12s3sENU1Z6hykMB8GA1UdIwQY
MBaAFJpxftHcSIBE5eKrAHVDNVjP3oyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYt
MTA5NDM5MTY2OWVmLzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYtMTA5NDM5MTY2OWVm
LzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwITUszl
NiWKoONshFZGC6+21UtDMRL5FIt8/EY+U+4G51VX87XeNQsjQvDCAkIgQz160aj1
6fhEFBKtDkgdZ+kOKRTdkUuUXSTfCjqzvAvxTR7luugE5kcN4H1nJuGcrZCrRPFu
Eqnd/t7mLanZVCj5qf6hxpOIKa7YkzG49Ev8yocy2sDlF9iaitQvGSS1cID/GWi4
+OvjczYC7TyZWDB14YsyTmiphs4QUfkBNxbLHGOLlS+93BGnl1SgoKyMY4C3T6eQ
YRNSQ5j03SZ+km1ABw6dUysIuzQ+W0oxGljSnfe5NJI9vKgIxkfTPnpvB7OWMZKz
nNARRWeSRLSfPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:22 2026 by rpki-client