Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          nWd8Kj0FTgGFUwjzlWhdmykdIaXGXrS68a8nD7YPAGE=
Subject key identifier:   F9:B1:54:DF:24:38:4B:CB:9B:44:8A:E1:C4:88:C6:48:B2:1B:75:BD
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       019D284E2B378D7330E053B86DE58DA3ED09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          08B6
Signing time:             Thu 26 Mar 2026 04:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:44 +0000
Files and hashes:         1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
                          2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: AXfTMCMIfV8vT1rx46NVz+zS/933JPDWg8tK8nctZNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:2b:37:8d:73:30:e0:53:b8:6d:e5:8d:a3:ed:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: Mar 26 04:01:44 2026 GMT
            Not After : Mar 27 04:01:44 2026 GMT
        Subject: CN=f9b154df24384bcb9b448ae1c488c648b21b75bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:4a:dc:b4:f1:63:76:5b:43:99:7f:cc:04:
                    db:3a:4c:bc:87:34:a6:51:31:b5:24:e0:68:60:cf:
                    a8:cf:4d:c8:99:bb:76:9a:1d:da:ff:c1:44:80:e0:
                    bf:61:22:35:f7:31:8b:87:6b:1b:52:b6:27:3c:ed:
                    6f:20:3c:71:0f:e0:89:20:22:c3:b1:14:50:fb:76:
                    1e:04:a9:d2:1d:df:cb:32:b5:b4:5e:f6:ca:ea:ed:
                    92:30:cd:09:82:b5:fb:c7:10:0c:c3:85:2a:7a:ee:
                    92:17:51:ac:de:5f:06:3c:16:fd:03:e9:cc:66:15:
                    8a:07:1b:e7:61:9b:fb:ed:4a:54:39:2e:e0:04:31:
                    d3:17:2e:cc:92:b8:e9:30:64:47:ec:45:61:c7:53:
                    39:e4:de:f5:81:41:b5:9f:f1:b3:f7:90:bd:97:ed:
                    14:94:d8:bc:0d:f3:30:95:a9:f6:86:ac:1c:3f:d7:
                    0d:83:28:89:05:2e:f1:92:f0:c6:31:9e:57:08:c1:
                    ba:44:8a:08:42:f3:6e:8f:12:b4:d1:c8:c6:df:1d:
                    39:b4:d6:cc:fb:6e:28:8f:af:e6:c7:d5:95:e7:c3:
                    f5:ad:ae:61:02:19:cf:38:28:6e:6f:4b:3c:4f:f3:
                    9c:48:8d:1d:d0:13:b9:12:27:35:cb:40:db:14:b5:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:54:DF:24:38:4B:CB:9B:44:8A:E1:C4:88:C6:48:B2:1B:75:BD
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:73:00:49:f0:5b:d4:0e:88:aa:bb:a1:dc:fb:d8:e9:17:13:
         2d:b8:93:83:60:7e:4a:cc:a9:9c:df:b7:78:fb:e7:62:e0:8c:
         88:a4:d3:a0:a3:aa:7e:09:2d:8c:00:32:82:be:20:99:0e:ca:
         6f:dc:b1:2e:df:9f:56:bc:2e:c1:20:11:dc:c4:63:f1:47:d6:
         6a:09:20:b1:6b:75:a5:ae:b2:ea:53:58:15:56:81:12:d3:c5:
         17:7b:4a:fd:95:48:48:f5:aa:65:69:61:55:98:01:95:d5:05:
         ce:58:68:fb:eb:be:fb:2f:2f:e2:c0:07:e4:25:30:e2:9c:d1:
         d7:18:5a:3c:68:ac:b7:32:08:39:61:d0:bc:ed:6b:b8:41:82:
         00:8f:c3:45:a5:36:21:fe:26:dd:97:f8:77:eb:af:cc:49:37:
         91:58:44:33:73:a8:78:42:ff:43:26:79:b9:2a:66:73:a4:e8:
         f9:cf:67:51:8a:c5:5c:c3:6c:94:0d:fb:b4:e2:f8:f2:55:54:
         79:18:a0:72:8d:3f:c2:ab:6d:07:92:7f:03:d1:c2:87:62:f8:
         6c:e0:dc:2e:a9:eb:b3:2f:db:e5:0f:96:10:24:e1:60:4e:b8:
         c3:63:8a:90:bd:dd:f0:54:da:89:3a:fe:ba:61:1a:55:0e:5e:
         58:6b:5b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTis3jXMw4FO4beWNo+0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5
MjdkNzgwHhcNMjYwMzI2MDQwMTQ0WhcNMjYwMzI3MDQwMTQ0WjAzMTEwLwYDVQQD
EyhmOWIxNTRkZjI0Mzg0YmNiOWI0NDhhZTFjNDg4YzY0OGIyMWI3NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JK3LTxY3ZbQ5l/zATbOky8hzSm
UTG1JOBoYM+oz03Imbt2mh3a/8FEgOC/YSI19zGLh2sbUrYnPO1vIDxxD+CJICLD
sRRQ+3YeBKnSHd/LMrW0XvbK6u2SMM0JgrX7xxAMw4Uqeu6SF1Gs3l8GPBb9A+nM
ZhWKBxvnYZv77UpUOS7gBDHTFy7MkrjpMGRH7EVhx1M55N71gUG1n/Gz95C9l+0U
lNi8DfMwlan2hqwcP9cNgyiJBS7xkvDGMZ5XCMG6RIoIQvNujxK00cjG3x05tNbM
+24oj6/mx9WV58P1ra5hAhnPOChub0s8T/OcSI0d0BO5Eic1y0DbFLWPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmxVN8kOEvLm0SK4cSIxkiyG3W9MB8GA1UdIwQY
MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt
N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh
LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnMASfBb
1A6Iqruh3PvY6RcTLbiTg2B+SsypnN+3ePvnYuCMiKTToKOqfgktjAAygr4gmQ7K
b9yxLt+fVrwuwSAR3MRj8UfWagkgsWt1pa6y6lNYFVaBEtPFF3tK/ZVISPWqZWlh
VZgBldUFzlho++u++y8v4sAH5CUw4pzR1xhaPGistzIIOWHQvO1ruEGCAI/DRaU2
If4m3Zf4d+uvzEk3kVhEM3OoeEL/QyZ5uSpmc6To+c9nUYrFXMNslA37tOL48lVU
eRigco0/wqttB5J/A9HCh2L4bODcLqnrsy/b5Q+WECThYE64w2OKkL3d8FTaiTr+
umEaVQ5eWGtbag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:37 2026 by rpki-client