Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File:                     3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier:          q8E1r0xgQ6eS4c3tA+N6RAOlM9Qjl48vPCSh9QYmCRI=
Subject key identifier:   B4:DF:06:3C:D1:D6:DA:C4:69:95:89:5E:3F:A2:82:53:3E:A8:2A:F2
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer:       /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial:       019D281654039534E515F14CE8CF4213F59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number:          0580
Signing time:             Thu 26 Mar 2026 03:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:45 +0000
Files and hashes:         1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: 5xKbnqgLY/oiXizHz1HUV50KJ2A+nIYC0jibZPFgaCM=)
                          2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
                          3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
                          4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
                          5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:54:03:95:34:e5:15:f1:4c:e8:cf:42:13:f5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
        Validity
            Not Before: Mar 26 03:00:45 2026 GMT
            Not After : Mar 27 03:00:45 2026 GMT
        Subject: CN=b4df063cd1d6dac46995895e3fa282533ea82af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:fc:09:45:2a:e7:1a:42:ce:fe:b4:11:03:
                    2d:8f:39:9e:73:fd:67:bc:42:22:a5:3e:72:71:43:
                    d0:d9:ab:b7:f1:ef:aa:bb:25:09:7d:8e:15:53:2c:
                    6b:12:b0:c4:c8:df:8c:8e:46:42:69:65:f2:8d:f6:
                    60:95:9f:72:62:6e:e3:ac:59:35:22:5c:1a:d7:83:
                    d7:4c:00:5e:87:ee:30:e9:66:6c:fd:96:7a:cc:3f:
                    18:cb:c6:74:61:06:db:75:ce:17:98:e5:4c:48:6b:
                    28:4b:30:8b:f8:1c:9a:57:3c:37:c3:6c:d6:3d:48:
                    fd:e9:fd:b6:bf:9b:f3:e5:ec:17:23:69:d1:10:47:
                    a8:cc:fd:1d:7a:8c:b5:0f:65:23:35:1f:b8:b3:01:
                    14:6e:0b:75:3d:1e:15:30:00:c9:e3:4d:a4:c2:23:
                    2b:2c:2b:e4:9a:56:9f:6a:19:b0:14:79:17:1f:00:
                    5c:9e:27:35:90:9d:04:23:53:f1:eb:01:7f:53:2b:
                    bb:b7:b4:86:d8:cd:ab:e3:2e:af:16:08:9b:3d:44:
                    48:5b:37:59:8c:59:3c:db:51:26:bc:16:0c:9d:8a:
                    b7:48:a5:b7:07:60:04:33:6f:80:31:07:ae:d8:24:
                    58:69:c7:25:55:a5:8f:66:74:f5:11:d9:62:be:6f:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:06:3C:D1:D6:DA:C4:69:95:89:5E:3F:A2:82:53:3E:A8:2A:F2
            X509v3 Authority Key Identifier:
                keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:f4:cc:f4:3b:7c:42:2c:cb:df:0f:15:f4:9e:a8:36:e7:
         62:1a:ce:3f:0a:2d:70:63:8d:f6:51:81:6f:ff:29:c0:53:92:
         4a:dc:68:32:6d:3a:04:6d:e4:40:be:3b:1e:da:b8:da:5b:5f:
         8d:60:69:80:6a:3a:42:47:ac:04:8e:15:2b:0b:48:0d:d7:b0:
         83:f1:8d:e1:2f:7e:c3:75:aa:0f:1b:48:06:de:95:77:92:04:
         af:ec:16:17:66:e9:dc:75:66:56:cb:7f:02:49:68:e4:f8:54:
         d2:1c:1a:2c:60:a2:01:54:a7:ae:60:c9:39:f2:a6:27:97:82:
         7a:e4:65:2b:f8:63:b1:b7:98:73:f9:d2:2b:88:2a:45:60:9b:
         30:08:5e:bb:94:cd:4b:6d:2f:4f:38:f5:81:4a:9e:f9:d5:a4:
         6e:cd:52:ed:b1:c1:83:3f:94:dd:98:09:5b:47:14:15:e3:0a:
         44:c1:5b:47:a3:1d:4e:01:5d:5a:cb:b1:16:8e:6f:d6:87:97:
         d3:e9:26:7f:8e:05:48:4d:02:a3:a7:69:34:e2:a8:b2:16:c1:
         48:cc:d2:db:ba:f0:32:ff:1e:78:8c:70:1a:19:40:fb:ea:ff:
         21:0c:ed:28:4c:e1:83:80:59:26:86:83:3e:4c:a0:e8:21:54:
         81:0a:67:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlQDlTTlFfFM6M9CE/WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0
OTk4ZjcwHhcNMjYwMzI2MDMwMDQ1WhcNMjYwMzI3MDMwMDQ1WjAzMTEwLwYDVQQD
EyhiNGRmMDYzY2QxZDZkYWM0Njk5NTg5NWUzZmEyODI1MzNlYTgyYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0b8CUUq5xpCzv60EQMtjzmec/1n
vEIipT5ycUPQ2au38e+quyUJfY4VUyxrErDEyN+MjkZCaWXyjfZglZ9yYm7jrFk1
Ilwa14PXTABeh+4w6WZs/ZZ6zD8Yy8Z0YQbbdc4XmOVMSGsoSzCL+ByaVzw3w2zW
PUj96f22v5vz5ewXI2nREEeozP0deoy1D2UjNR+4swEUbgt1PR4VMADJ402kwiMr
LCvkmlafahmwFHkXHwBcnic1kJ0EI1Px6wF/Uyu7t7SG2M2r4y6vFgibPURIWzdZ
jFk821EmvBYMnYq3SKW3B2AEM2+AMQeu2CRYacclVaWPZnT1Edlivm9kYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTfBjzR1trEaZWJXj+iglM+qCryMB8GA1UdIwQY
MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt
ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5
LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1/0zPQ7
fEIsy98PFfSeqDbnYhrOPwotcGON9lGBb/8pwFOSStxoMm06BG3kQL47Htq42ltf
jWBpgGo6QkesBI4VKwtIDdewg/GN4S9+w3WqDxtIBt6Vd5IEr+wWF2bp3HVmVst/
Aklo5PhU0hwaLGCiAVSnrmDJOfKmJ5eCeuRlK/hjsbeYc/nSK4gqRWCbMAheu5TN
S20vTzj1gUqe+dWkbs1S7bHBgz+U3ZgJW0cUFeMKRMFbR6MdTgFdWsuxFo5v1oeX
0+kmf44FSE0Co6dpNOKoshbBSMzS27rwMv8eeIxwGhlA++r/IQztKEzhg4BZJoaD
Pkyg6CFUgQpndA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:02 2026 by rpki-client