Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          RXD9abl5P+PmXL4M0iIDzdNMPuEqMA3bAXqHhtgxMYw=
Subject key identifier:   EA:95:3F:5C:7A:42:AE:94:35:14:B5:DA:70:4E:A1:19:72:7F:A3:AF
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       019D28BBDCBEF6984DB5EB912A95A57EE5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          15D9
Signing time:             Thu 26 Mar 2026 06:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:33 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: YfEyjwhYpfmER0yXwwtBm9KlUI3ul+WY4vHsdityNx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:dc:be:f6:98:4d:b5:eb:91:2a:95:a5:7e:e5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Mar 26 06:01:33 2026 GMT
            Not After : Mar 27 06:01:33 2026 GMT
        Subject: CN=ea953f5c7a42ae943514b5da704ea119727fa3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:0b:18:13:1a:bd:91:f1:f3:00:f9:5f:88:
                    12:6b:65:ac:92:1f:1d:1b:81:ac:bd:5d:c5:59:92:
                    5c:3e:25:42:ff:80:e5:43:fe:a6:90:83:97:3a:da:
                    c7:91:39:a1:12:33:5c:d2:90:d4:aa:b6:12:30:50:
                    53:63:32:80:78:00:78:e8:92:c9:fb:59:21:96:e8:
                    c3:22:4f:61:8c:8d:ce:b9:ea:75:a7:63:65:22:ce:
                    27:48:6f:a4:73:25:5e:af:a2:ed:ef:55:96:69:2e:
                    f2:8e:30:b2:df:1d:80:ed:2f:d9:95:65:51:a5:b7:
                    39:19:b4:b6:bc:e9:c7:6d:ad:9f:5d:c3:f6:2c:af:
                    93:76:ea:c8:5f:63:b0:67:4f:6c:4d:96:cd:d0:37:
                    15:59:f9:65:1d:bb:aa:0b:aa:fe:a6:65:dd:33:8d:
                    fa:73:92:b8:5d:e0:c1:66:52:e4:5b:85:47:e1:60:
                    15:2e:91:94:e6:67:45:81:d2:84:76:8e:3d:11:52:
                    40:d5:e3:ef:62:d8:73:cc:1b:7f:eb:e6:e3:38:a2:
                    3f:94:61:75:13:b2:5a:a9:65:5f:b4:80:dd:04:21:
                    9c:6d:a5:56:0d:56:7b:0b:7d:14:e2:d1:6a:b4:d8:
                    8a:92:5f:5d:41:e5:c0:18:fb:07:42:ce:d7:54:24:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:3F:5C:7A:42:AE:94:35:14:B5:DA:70:4E:A1:19:72:7F:A3:AF
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:70:15:a9:4d:fc:ae:d7:f4:1e:a1:e2:75:e7:84:e7:c5:
         91:33:ba:c2:98:6c:59:47:92:4d:f8:f7:c7:c0:47:e3:16:ec:
         96:b6:65:9b:29:56:56:79:d9:08:ce:86:77:7c:e3:0d:5c:4c:
         8e:8e:a0:1a:44:a2:1f:48:62:6b:07:8f:d1:8f:e7:4c:f3:b6:
         a6:b2:f1:a4:05:d6:8a:42:5e:34:da:0c:92:10:84:93:96:22:
         67:81:2e:c7:a6:52:e9:a5:04:b7:a4:1d:50:ec:e1:e5:fb:04:
         e7:9d:b0:85:a0:49:32:f4:59:53:79:65:f6:39:9a:b8:73:34:
         1c:a7:f4:1a:ab:3f:1a:73:63:4a:b7:56:09:ac:88:0a:bd:fa:
         9a:02:f1:69:c8:37:68:2d:c1:37:47:ba:bf:36:01:5f:75:44:
         64:06:ce:fd:1d:9e:ca:15:c1:bf:15:9d:e3:37:d1:60:fa:b1:
         d2:b4:35:35:7c:f6:69:7d:13:ab:73:23:47:b9:9b:9d:10:60:
         5e:aa:79:b0:3f:98:07:9d:cb:02:bf:be:e0:90:0e:d2:45:55:
         ec:a9:74:76:4d:b9:54:1d:ff:0d:64:bb:11:e3:99:29:b3:c1:
         84:91:3c:38:6f:77:7e:c1:18:63:6a:81:93:8d:7f:00:5a:88:
         dc:36:e2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9y+9phNteuRKpWlfuX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx
YzUyOWIwHhcNMjYwMzI2MDYwMTMzWhcNMjYwMzI3MDYwMTMzWjAzMTEwLwYDVQQD
EyhlYTk1M2Y1YzdhNDJhZTk0MzUxNGI1ZGE3MDRlYTExOTcyN2ZhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3YLGBMavZHx8wD5X4gSa2Wskh8d
G4GsvV3FWZJcPiVC/4DlQ/6mkIOXOtrHkTmhEjNc0pDUqrYSMFBTYzKAeAB46JLJ
+1khlujDIk9hjI3Ouep1p2NlIs4nSG+kcyVer6Lt71WWaS7yjjCy3x2A7S/ZlWVR
pbc5GbS2vOnHba2fXcP2LK+TdurIX2OwZ09sTZbN0DcVWfllHbuqC6r+pmXdM436
c5K4XeDBZlLkW4VH4WAVLpGU5mdFgdKEdo49EVJA1ePvYthzzBt/6+bjOKI/lGF1
E7JaqWVftIDdBCGcbaVWDVZ7C30U4tFqtNiKkl9dQeXAGPsHQs7XVCStVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqVP1x6Qq6UNRS12nBOoRlyf6OvMB8GA1UdIwQY
MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt
NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1
LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCFwFalN
/K7X9B6h4nXnhOfFkTO6wphsWUeSTfj3x8BH4xbslrZlmylWVnnZCM6Gd3zjDVxM
jo6gGkSiH0hiaweP0Y/nTPO2prLxpAXWikJeNNoMkhCEk5YiZ4Eux6ZS6aUEt6Qd
UOzh5fsE552whaBJMvRZU3ll9jmauHM0HKf0Gqs/GnNjSrdWCayICr36mgLxacg3
aC3BN0e6vzYBX3VEZAbO/R2eyhXBvxWd4zfRYPqx0rQ1NXz2aX0Tq3MjR7mbnRBg
Xqp5sD+YB53LAr++4JAO0kVV7Kl0dk25VB3/DWS7EeOZKbPBhJE8OG93fsEYY2qB
k41/AFqI3Dbifg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:35:58 2026 by rpki-client