Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          qFHJjoUtg29h/KwtSeWv2xVWqUFC9SVi6/axjcNuCWg=
Subject key identifier:   96:BB:60:DE:9E:F6:77:EF:9D:6F:DE:C9:0F:D5:71:0E:30:C3:F9:B9
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       019D281662186681A113954E1EDFF0FB25FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0C48
Signing time:             Thu 26 Mar 2026 03:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:48 +0000
Files and hashes:         1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
                          2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
                          3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: 2dKBO1Ie6VFKdmeYihQ10yt5+H0JGPvvcQG65NjUohM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:62:18:66:81:a1:13:95:4e:1e:df:f0:fb:25:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Mar 26 03:00:48 2026 GMT
            Not After : Mar 27 03:00:48 2026 GMT
        Subject: CN=96bb60de9ef677ef9d6fdec90fd5710e30c3f9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:26:6c:dc:63:c3:43:58:ce:2a:98:a3:c0:
                    fb:98:53:55:40:a3:6c:1e:35:8f:65:ed:b7:89:66:
                    69:54:0d:3f:ac:61:62:67:2c:ec:3d:84:71:c3:68:
                    30:ef:7b:57:78:9d:1a:63:7d:6d:60:da:58:c4:54:
                    57:1a:c3:da:51:34:6e:a9:12:43:cf:50:0f:75:a1:
                    48:b3:ac:7d:5f:45:a7:03:81:4d:0e:d8:70:b0:b8:
                    8e:4b:38:ff:68:9e:45:73:14:ca:83:3b:60:f4:32:
                    3a:df:12:8c:20:f9:15:a3:81:c1:53:d3:57:73:3c:
                    2b:26:af:ff:e1:92:42:e6:57:1a:30:f6:a4:77:be:
                    c9:5b:dc:a4:69:b8:b0:6f:c4:6c:b9:10:d0:b3:d5:
                    9c:4c:60:9a:99:4e:43:a6:e5:5e:4e:68:ef:73:42:
                    a7:26:b9:f1:23:17:9b:e6:0d:75:82:ca:22:66:e3:
                    af:8c:d4:dc:a5:78:b3:09:08:8f:03:47:7c:a2:9c:
                    30:6a:e3:51:03:ce:28:b5:23:03:f0:e1:92:27:ba:
                    45:cb:43:52:4e:5f:04:a3:5a:72:f7:b1:02:cc:97:
                    ec:ed:14:d5:7c:fc:45:9e:2e:c7:cd:53:fd:74:5f:
                    06:63:86:14:af:79:a0:a3:7b:40:47:00:2d:a7:b2:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:60:DE:9E:F6:77:EF:9D:6F:DE:C9:0F:D5:71:0E:30:C3:F9:B9
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:82:f8:7a:28:c1:99:ac:b3:dd:e6:a5:9f:bd:e5:92:b9:
         43:6e:39:cf:40:d8:27:40:cc:29:8b:a7:77:0f:cd:4e:7a:a3:
         25:1c:bb:2e:19:fb:3f:4b:95:80:41:7b:c3:c2:f9:c3:3e:93:
         a7:07:4e:56:c6:0d:b6:1f:37:20:1e:60:7c:1a:21:3f:96:02:
         df:0a:93:fb:17:26:3f:b2:31:b3:05:93:63:dc:2e:16:64:fb:
         b1:23:fc:d7:20:cf:c4:45:d2:fd:21:14:9a:26:02:13:72:ac:
         41:ba:97:a4:d3:d8:52:91:b9:3e:68:ab:35:3d:ea:fb:83:80:
         00:7d:46:a2:ed:d1:e0:c8:a2:b0:37:de:bf:16:44:37:c2:99:
         0a:5c:a4:aa:2b:bd:a2:3f:dd:5f:4b:f0:ef:7d:4c:14:fa:10:
         bc:03:29:0b:d7:1b:7c:fc:c3:53:45:f2:15:53:8a:13:ce:c2:
         4c:6b:e1:b3:19:a9:a9:df:25:df:57:f2:72:a5:a2:f5:17:d3:
         f8:96:d0:c3:8d:a7:dd:fb:eb:ce:75:c7:de:34:98:fa:05:f9:
         df:09:a6:b8:4a:7c:41:52:e1:19:43:d3:e3:ff:d3:fd:2c:0f:
         72:93:f5:e7:db:0f:85:0e:79:14:d2:c0:50:02:45:5a:28:88:
         3a:1c:65:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmIYZoGhE5VOHt/w+yX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjYwMzI2MDMwMDQ4WhcNMjYwMzI3MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg5NmJiNjBkZTllZjY3N2VmOWQ2ZmRlYzkwZmQ1NzEwZTMwYzNmOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qcmbNxjw0NYziqYo8D7mFNVQKNs
HjWPZe23iWZpVA0/rGFiZyzsPYRxw2gw73tXeJ0aY31tYNpYxFRXGsPaUTRuqRJD
z1APdaFIs6x9X0WnA4FNDthwsLiOSzj/aJ5FcxTKgztg9DI63xKMIPkVo4HBU9NX
czwrJq//4ZJC5lcaMPakd77JW9ykabiwb8RsuRDQs9WcTGCamU5DpuVeTmjvc0Kn
JrnxIxeb5g11gsoiZuOvjNTcpXizCQiPA0d8opwwauNRA84otSMD8OGSJ7pFy0NS
Tl8Eo1py97ECzJfs7RTVfPxFni7HzVP9dF8GY4YUr3mgo3tARwAtp7K7TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa7YN6e9nfvnW/eyQ/VcQ4ww/m5MB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpqC+Hoo
wZmss93mpZ+95ZK5Q245z0DYJ0DMKYundw/NTnqjJRy7Lhn7P0uVgEF7w8L5wz6T
pwdOVsYNth83IB5gfBohP5YC3wqT+xcmP7IxswWTY9wuFmT7sSP81yDPxEXS/SEU
miYCE3KsQbqXpNPYUpG5PmirNT3q+4OAAH1Gou3R4MiisDfevxZEN8KZClykqiu9
oj/dX0vw731MFPoQvAMpC9cbfPzDU0XyFVOKE87CTGvhsxmpqd8l31fycqWi9RfT
+JbQw42n3fvrznXH3jSY+gX53wmmuEp8QVLhGUPT4//T/SwPcpP159sPhQ55FNLA
UAJFWiiIOhxlVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:42 2026 by rpki-client