Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File:                     DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier:          8+Sz5YB3IFNqFdyhBKN8KdVLB5g+0CllyEhkUmhcBZ0=
Subject key identifier:   83:2B:28:33:A6:14:2B:4C:EC:05:FA:E2:7C:CD:21:81:74:A7:FE:12
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer:       /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial:       019D292942A933F738E36E5C18FE6CBE2199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number:          1302
Signing time:             Thu 26 Mar 2026 08:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:02 +0000
Files and hashes:         1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
                          2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: ZWxkY62oR+ctYa04zqzbnhfYaNdoJJVbVo/HOo0tdHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:42:a9:33:f7:38:e3:6e:5c:18:fe:6c:be:21:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
        Validity
            Not Before: Mar 26 08:01:02 2026 GMT
            Not After : Mar 27 08:01:02 2026 GMT
        Subject: CN=832b2833a6142b4cec05fae27ccd218174a7fe12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:02:94:1e:20:d7:a5:80:1a:ba:da:86:70:
                    90:bb:e8:91:02:12:53:27:52:dc:9f:f8:d2:2a:70:
                    35:9a:8d:60:33:52:27:6f:14:00:62:a4:35:c7:bb:
                    82:13:2b:7e:b0:d3:e9:41:a9:ba:82:19:8d:fc:9e:
                    f1:75:07:ed:d4:a2:88:e3:4d:e8:38:11:62:38:a2:
                    e9:fa:6d:81:8f:10:5c:d9:0e:91:fa:88:e1:20:7e:
                    16:5a:be:3a:0e:c8:04:ba:dd:c0:84:39:c9:76:a7:
                    c5:e8:e5:50:e0:a4:53:5f:42:39:63:60:b0:77:76:
                    11:3e:b9:c9:78:fd:9a:3f:93:c4:aa:f3:2f:00:a5:
                    50:9a:ee:6d:27:6c:54:c1:d6:90:67:c2:03:9b:8d:
                    ed:8c:56:43:35:ca:12:b7:e1:d4:43:d5:b2:95:28:
                    ee:c4:cd:ae:df:70:c3:c3:34:94:43:76:53:aa:d8:
                    b7:1d:56:1c:42:ad:39:7d:c2:24:1f:e4:18:fe:5a:
                    ad:6b:6c:22:1e:38:3a:37:9e:a8:10:eb:87:14:f0:
                    c3:f7:41:30:1e:01:69:34:25:75:88:11:8c:2e:1b:
                    29:52:e6:0a:14:b8:ff:7d:d7:ab:4a:5d:bd:8c:82:
                    5e:48:8f:4d:80:34:10:db:ee:95:5d:89:39:70:12:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:28:33:A6:14:2B:4C:EC:05:FA:E2:7C:CD:21:81:74:A7:FE:12
            X509v3 Authority Key Identifier:
                keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:03:2d:a5:77:0a:3a:be:cd:95:5c:9c:78:9e:dc:7a:8d:2a:
         e2:f8:e4:0a:99:fa:91:e8:d9:fe:f8:a2:d2:50:e1:f7:e6:2c:
         1b:e7:4c:c8:0a:83:58:2e:0a:89:ab:7a:7c:eb:e5:55:1f:75:
         1f:24:d7:7a:0e:1a:6e:cb:d7:7d:13:9a:56:cf:a3:62:41:24:
         18:0e:e2:f7:1b:7e:c2:6c:9d:cd:d5:8a:ee:f0:f3:67:a6:32:
         43:87:09:a1:db:44:fa:7d:3b:fc:c3:c0:ed:9b:07:ca:84:d3:
         d8:7a:99:ac:c3:8f:4a:f5:d0:83:fb:af:7f:f8:b2:11:e6:89:
         98:32:c6:8e:51:7c:a8:ec:67:30:8e:35:d6:de:22:8e:9a:b5:
         ad:b3:66:32:17:57:2a:a8:f1:5c:0c:58:fb:70:89:2b:e2:51:
         18:59:08:f1:f6:bc:aa:f1:04:79:6c:df:88:40:45:bc:94:de:
         29:ba:8b:ef:91:36:1a:31:8a:84:24:82:70:d3:b8:ce:9c:18:
         ee:d9:fe:0e:12:24:1e:ef:d9:cc:b0:48:54:19:8a:70:5c:ce:
         09:f2:bc:a0:4c:d7:e9:97:0b:fe:70:2a:9d:e2:4e:ab:58:be:
         e4:1c:1b:37:8b:75:27:18:6f:94:ed:fc:f1:4b:95:e5:8d:16:
         3f:5a:04:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUKpM/c4425cGP5sviGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjYwMzI2MDgwMTAyWhcNMjYwMzI3MDgwMTAyWjAzMTEwLwYDVQQD
Eyg4MzJiMjgzM2E2MTQyYjRjZWMwNWZhZTI3Y2NkMjE4MTc0YTdmZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq8ClB4g16WAGrrahnCQu+iRAhJT
J1Lcn/jSKnA1mo1gM1InbxQAYqQ1x7uCEyt+sNPpQam6ghmN/J7xdQft1KKI403o
OBFiOKLp+m2BjxBc2Q6R+ojhIH4WWr46DsgEut3AhDnJdqfF6OVQ4KRTX0I5Y2Cw
d3YRPrnJeP2aP5PEqvMvAKVQmu5tJ2xUwdaQZ8IDm43tjFZDNcoSt+HUQ9WylSju
xM2u33DDwzSUQ3ZTqti3HVYcQq05fcIkH+QY/lqta2wiHjg6N56oEOuHFPDD90Ew
HgFpNCV1iBGMLhspUuYKFLj/fderSl29jIJeSI9NgDQQ2+6VXYk5cBIJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMrKDOmFCtM7AX64nzNIYF0p/4SMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgMtpXcK
Or7NlVyceJ7ceo0q4vjkCpn6kejZ/vii0lDh9+YsG+dMyAqDWC4Kiat6fOvlVR91
HyTXeg4absvXfROaVs+jYkEkGA7i9xt+wmydzdWK7vDzZ6YyQ4cJodtE+n07/MPA
7ZsHyoTT2HqZrMOPSvXQg/uvf/iyEeaJmDLGjlF8qOxnMI411t4ijpq1rbNmMhdX
KqjxXAxY+3CJK+JRGFkI8fa8qvEEeWzfiEBFvJTeKbqL75E2GjGKhCSCcNO4zpwY
7tn+DhIkHu/ZzLBIVBmKcFzOCfK8oEzX6ZcL/nAqneJOq1i+5BwbN4t1JxhvlO38
8UuV5Y0WP1oEpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:41 2026 by rpki-client