Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File:                     MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier:          kilm15xshWG/QNL1tL0anfWWWqM/8rdARFXXqyr9EiI=
Subject key identifier:   B4:29:82:9C:91:EF:26:F0:FE:97:BB:CC:AA:86:C1:B6:71:B1:5E:35
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer:       /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial:       019D28F24ED82969B750F77057ADBEC5ED92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number:          085C
Signing time:             Thu 26 Mar 2026 07:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:01 +0000
Files and hashes:         1: 1zoQceuOvt344ZlaLSwyO8txqS8.roa (hash: 9QVYcBnBzg93X4oPERVNxsL4xQPuP9NLRuwQb+0Ocws=)
                          2: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: wSape0UxfVYDw0i/XX0pBeFZFW/WhFyC4YNYKJcVBmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:4e:d8:29:69:b7:50:f7:70:57:ad:be:c5:ed:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
        Validity
            Not Before: Mar 26 07:01:01 2026 GMT
            Not After : Mar 27 07:01:01 2026 GMT
        Subject: CN=b429829c91ef26f0fe97bbccaa86c1b671b15e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:8d:ad:bf:98:8a:4b:a6:01:76:10:73:57:
                    d6:47:f3:15:66:c4:c1:96:bd:59:eb:35:00:57:f3:
                    87:5a:38:f4:55:8c:b9:a8:72:d8:e3:9f:19:9d:ad:
                    ce:22:c7:04:bd:5b:22:b1:67:1c:6f:b3:ef:f8:6c:
                    0e:90:d4:e7:ae:bb:e1:cf:78:9d:78:02:3c:ec:a5:
                    a3:cf:44:4f:46:6b:4e:71:1e:07:60:92:b4:50:c9:
                    22:22:f7:5a:10:57:26:0e:f6:7f:e7:9b:6e:e4:21:
                    5d:57:aa:6d:9b:8a:03:8a:a7:d4:66:a3:a2:9b:48:
                    f2:e3:cb:da:56:35:81:cd:da:ec:32:53:53:eb:d4:
                    ed:2e:76:ec:02:48:41:a5:79:02:c1:87:d5:cb:5c:
                    3d:59:fb:b0:d9:83:40:21:03:c0:19:91:cb:39:4a:
                    fa:8a:5d:a9:1a:9b:c4:3e:53:0b:ec:fe:b2:e7:6b:
                    8e:f1:e3:96:08:67:63:56:55:41:9b:35:92:94:12:
                    c4:40:06:82:5e:70:0c:cf:19:9a:e0:77:fe:e7:a2:
                    20:3e:56:ea:13:1e:f0:c2:23:20:96:ea:c7:b0:16:
                    07:3c:70:54:73:f2:0c:3e:55:74:5a:8b:41:b8:5a:
                    a2:bc:3e:72:a8:ec:de:48:2a:83:bb:a6:b2:99:6d:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:82:9C:91:EF:26:F0:FE:97:BB:CC:AA:86:C1:B6:71:B1:5E:35
            X509v3 Authority Key Identifier:
                keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:c9:4c:17:aa:a7:54:d9:ae:d2:ec:94:30:0f:3e:36:42:
         56:71:fb:e3:1c:2a:64:fe:05:3e:b0:d7:8a:44:2d:ee:3b:8f:
         85:07:a4:c2:b9:c0:dd:50:6f:97:51:b4:dd:4e:02:44:cb:f5:
         62:fd:44:f3:03:e6:41:41:2f:10:ee:75:05:5c:79:f6:bc:59:
         8e:93:0e:5e:6b:d9:6b:cd:e0:a8:ee:09:ec:2c:3a:0a:f3:b5:
         5e:82:ae:ee:c9:11:1d:94:c5:5c:2b:34:e3:0d:23:59:50:57:
         d0:f2:3e:99:b0:35:9f:61:cd:cc:9e:08:86:20:e6:fe:94:18:
         99:36:4f:90:9f:f1:80:67:90:17:06:27:6e:5f:31:a4:36:0f:
         a5:2b:d1:ed:24:83:d4:d9:06:7e:a0:4a:3d:b8:90:a4:0b:97:
         8b:a6:71:f6:02:68:dc:eb:63:64:b0:01:1e:ce:d6:cf:f6:75:
         97:b7:95:f5:d6:eb:fd:d8:b3:c1:03:d5:74:57:65:39:77:18:
         b9:b6:88:15:22:9b:90:3e:2e:1d:62:75:a1:42:06:d8:6f:c7:
         0a:74:44:9a:67:77:38:71:61:ca:56:c3:13:e7:6f:3d:e4:4f:
         ed:03:d4:e2:5e:ef:25:63:8a:65:1d:29:ce:32:ac:b0:77:14:
         a3:c5:31:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8k7YKWm3UPdwV62+xe2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZlMTI5ZmYyNmQ4YWRjMTA3MTRhOTFjYTUzZDgwMGIw
NmZlMjUwHhcNMjYwMzI2MDcwMTAxWhcNMjYwMzI3MDcwMTAxWjAzMTEwLwYDVQQD
EyhiNDI5ODI5YzkxZWYyNmYwZmU5N2JiY2NhYTg2YzFiNjcxYjE1ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqymNrb+YikumAXYQc1fWR/MVZsTB
lr1Z6zUAV/OHWjj0VYy5qHLY458Zna3OIscEvVsisWccb7Pv+GwOkNTnrrvhz3id
eAI87KWjz0RPRmtOcR4HYJK0UMkiIvdaEFcmDvZ/55tu5CFdV6ptm4oDiqfUZqOi
m0jy48vaVjWBzdrsMlNT69TtLnbsAkhBpXkCwYfVy1w9Wfuw2YNAIQPAGZHLOUr6
il2pGpvEPlML7P6y52uO8eOWCGdjVlVBmzWSlBLEQAaCXnAMzxma4Hf+56IgPlbq
Ex7wwiMglurHsBYHPHBUc/IMPlV0WotBuFqivD5yqOzeSCqDu6aymW26lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQpgpyR7ybw/pe7zKqGwbZxsV41MB8GA1UdIwQY
MBaAFDKG4Sn/JtitwQcUqRylPYALBv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9iaEtmOG0ySzNCQnhTcEhLVTlnQXNHX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NDk0NzYtMmIwMy00Y2ZmLWI5MTgt
OGE1ZmUwZWYxN2I4LzEvTW9iaEtmOG0ySzNCQnhTcEhLVTlnQXNHX2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82NDk0NzYtMmIwMy00Y2ZmLWI5MTgtOGE1ZmUwZWYxN2I4
LzEvTW9iaEtmOG0ySzNCQnhTcEhLVTlnQXNHX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg3JTBeq
p1TZrtLslDAPPjZCVnH74xwqZP4FPrDXikQt7juPhQekwrnA3VBvl1G03U4CRMv1
Yv1E8wPmQUEvEO51BVx59rxZjpMOXmvZa83gqO4J7Cw6CvO1XoKu7skRHZTFXCs0
4w0jWVBX0PI+mbA1n2HNzJ4IhiDm/pQYmTZPkJ/xgGeQFwYnbl8xpDYPpSvR7SSD
1NkGfqBKPbiQpAuXi6Zx9gJo3OtjZLABHs7Wz/Z1l7eV9dbr/dizwQPVdFdlOXcY
ubaIFSKbkD4uHWJ1oUIG2G/HCnREmmd3OHFhylbDE+dvPeRP7QPU4l7vJWOKZR0p
zjKssHcUo8UxWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:46 2026 by rpki-client