Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          8k6IHoX6dh2f3FR/6lLPqaFXp8Xh8DnGtDbJeRLEWYc=
Subject key identifier:   11:0C:D3:72:DF:2A:65:82:E4:1E:8E:49:E6:C9:D1:C1:BC:32:9A:4F
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       019D2816F71C0070379B0921C9ED605A7032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          104A
Signing time:             Thu 26 Mar 2026 03:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:26 +0000
Files and hashes:         1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: 7nqlls8tGkKKz9ztxLsEgIn/h4NdsfMaV6cL88T7j54=)
                          2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f7:1c:00:70:37:9b:09:21:c9:ed:60:5a:70:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Mar 26 03:01:26 2026 GMT
            Not After : Mar 27 03:01:26 2026 GMT
        Subject: CN=110cd372df2a6582e41e8e49e6c9d1c1bc329a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:53:17:cd:87:69:1c:cc:ba:c9:82:9a:1c:
                    83:f4:5f:1c:a5:dd:1d:e4:3f:63:de:31:87:f8:05:
                    a6:43:a4:52:9c:41:61:24:18:bd:01:52:92:71:eb:
                    ac:c6:dd:62:b1:4c:a1:d3:17:f8:6d:79:87:1d:41:
                    a6:3d:3b:57:85:84:14:bb:a8:11:a0:08:45:f3:6d:
                    6a:cd:fc:2a:5b:e2:72:04:af:e9:e7:1c:9b:6b:5e:
                    41:f0:37:02:b2:e1:14:be:7f:92:bb:9b:44:60:df:
                    e5:3f:1f:80:44:5b:73:7c:f9:1f:c6:b3:d8:ec:a8:
                    7c:14:70:ae:ce:3d:68:4b:2c:1a:32:c8:40:ba:e3:
                    73:39:71:19:82:0e:4e:2d:0f:35:40:7e:91:57:4d:
                    8b:32:b2:81:c7:b9:02:b6:35:66:ca:af:67:4e:0d:
                    46:07:5a:27:b6:f5:4f:21:4d:a3:e9:35:4b:7c:7e:
                    6b:cd:e0:fd:97:d7:75:88:16:5c:e7:d0:1e:33:a0:
                    60:3a:5d:3e:09:58:65:34:0d:40:91:19:93:8e:6b:
                    a1:91:46:1e:dc:50:d2:f9:b6:cb:73:38:bb:d1:e4:
                    dd:39:c3:30:a0:d3:4b:8f:20:0c:56:67:3c:08:20:
                    46:9f:25:bc:66:7f:dd:77:79:fe:f0:28:3d:ec:ad:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0C:D3:72:DF:2A:65:82:E4:1E:8E:49:E6:C9:D1:C1:BC:32:9A:4F
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:3c:68:57:93:56:aa:10:4f:38:b1:11:82:b7:04:4e:cb:
         65:29:53:0f:2e:33:72:ac:8d:93:20:e4:f7:52:68:d0:99:4f:
         6b:4e:1a:e2:e0:52:6b:f6:02:69:6a:f0:2c:e4:c6:fe:86:7f:
         ee:9d:b3:93:4f:46:2d:e8:8d:dc:31:11:03:3a:1e:e6:80:70:
         ef:56:e2:fd:9c:05:1e:90:b5:a1:3e:e3:02:aa:d5:e7:1a:3d:
         32:9a:16:e1:6d:68:fd:3f:b0:a8:9c:0e:ca:54:97:ae:08:0f:
         e8:14:58:75:02:79:d5:3c:89:66:8c:d2:62:26:20:57:1f:8a:
         67:8a:5c:e4:36:5c:14:be:41:2f:54:75:51:ae:0b:ce:48:a7:
         b2:58:57:b4:45:a7:0e:6c:1d:73:02:65:57:09:3b:05:e7:d3:
         71:7d:d2:75:68:14:59:09:aa:cf:50:05:e5:bf:ce:52:73:e7:
         28:a0:18:6b:6c:0b:68:e4:67:25:dc:eb:9d:16:97:58:41:01:
         9b:31:1d:94:ec:60:46:3a:a7:a7:0f:11:c6:b7:e5:da:25:c5:
         9e:4b:23:7d:a7:16:b8:1a:86:60:2a:13:73:b4:c6:88:fa:4f:
         fc:04:07:a9:48:d3:09:8e:94:6a:db:d8:00:4b:e0:65:89:24:
         9f:6a:50:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvccAHA3mwkhye1gWnAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj
OWVmMGMwHhcNMjYwMzI2MDMwMTI2WhcNMjYwMzI3MDMwMTI2WjAzMTEwLwYDVQQD
EygxMTBjZDM3MmRmMmE2NTgyZTQxZThlNDllNmM5ZDFjMWJjMzI5YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXtTF82HaRzMusmCmhyD9F8cpd0d
5D9j3jGH+AWmQ6RSnEFhJBi9AVKSceusxt1isUyh0xf4bXmHHUGmPTtXhYQUu6gR
oAhF821qzfwqW+JyBK/p5xyba15B8DcCsuEUvn+Su5tEYN/lPx+ARFtzfPkfxrPY
7Kh8FHCuzj1oSywaMshAuuNzOXEZgg5OLQ81QH6RV02LMrKBx7kCtjVmyq9nTg1G
B1ontvVPIU2j6TVLfH5rzeD9l9d1iBZc59AeM6BgOl0+CVhlNA1AkRmTjmuhkUYe
3FDS+bbLczi70eTdOcMwoNNLjyAMVmc8CCBGnyW8Zn/dd3n+8Cg97K1DkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEM03LfKmWC5B6OSebJ0cG8MppPMB8GA1UdIwQY
MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt
MzJkZDUzNjQwYjljLzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj
LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcs8aFeT
VqoQTzixEYK3BE7LZSlTDy4zcqyNkyDk91Jo0JlPa04a4uBSa/YCaWrwLOTG/oZ/
7p2zk09GLeiN3DERAzoe5oBw71bi/ZwFHpC1oT7jAqrV5xo9MpoW4W1o/T+wqJwO
ylSXrggP6BRYdQJ51TyJZozSYiYgVx+KZ4pc5DZcFL5BL1R1Ua4LzkinslhXtEWn
DmwdcwJlVwk7BefTcX3SdWgUWQmqz1AF5b/OUnPnKKAYa2wLaORnJdzrnRaXWEEB
mzEdlOxgRjqnpw8Rxrfl2iXFnksjfacWuBqGYCoTc7TGiPpP/AQHqUjTCY6UatvY
AEvgZYkkn2pQAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:08 2026 by rpki-client