Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File:                     RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier:          GmSdWwBzWU+UUaIgl+sgvfw5YlsReI5G9gMyZ27zVRY=
Subject key identifier:   D7:7C:EE:74:38:E0:55:C4:12:A8:CE:BB:02:77:24:18:DB:BF:07:15
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer:       /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial:       019D39776B89EE9E223A45FBA7AF1596AA2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number:          1896
Signing time:             Sun 29 Mar 2026 12:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:20 +0000
Files and hashes:         1: JOp-tx-YUBEPF_3-VsIHevvanSc.roa (hash: 6cD/pjo1d/sDsw6tGOIEud52crieFifk4nobcONjU7o=)
                          2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: wct6iRxka5Km87WuewaXxu9B7YO6Ri2eAeuFh8HqNrg=)
                          3: mSaJNzvw1TRw2Tyl8PqHmQloT2Y.roa (hash: akcjPInjpbgBMW37u3Gc+pCADgLD4wA1ZjBiqTCia3E=)
                          4: qw9D7rMN2NZTDb-0Us5jWgNJ6yM.roa (hash: 1etgiesCIDnmF4D/vGGoSf8zJOp8X0mJoxZw4HvWNUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:6b:89:ee:9e:22:3a:45:fb:a7:af:15:96:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
        Validity
            Not Before: Mar 29 12:00:20 2026 GMT
            Not After : Mar 30 12:00:20 2026 GMT
        Subject: CN=d77cee7438e055c412a8cebb02772418dbbf0715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:89:d8:09:6d:a2:17:95:9f:91:e0:de:b9:
                    1b:a1:4e:ff:e0:6a:fa:f5:1b:fe:69:8e:26:64:8b:
                    ae:a4:36:87:e2:59:55:25:47:4c:59:a6:2f:1c:08:
                    8a:ea:66:11:52:c7:97:0d:be:8b:e1:56:fe:07:f1:
                    97:8c:12:36:d6:1f:9c:79:3c:74:88:17:57:5c:17:
                    95:2e:bd:07:d5:46:27:b7:b8:30:6e:47:99:eb:67:
                    28:99:9d:66:b1:b0:9c:34:f4:da:cd:81:ab:79:3f:
                    21:2f:09:7b:ea:ce:51:b9:f4:07:22:94:ce:55:c7:
                    d7:39:bf:fb:14:e7:19:56:df:8b:c5:1e:ba:eb:c4:
                    b5:23:42:73:9f:73:b6:2b:ae:b1:79:1c:4d:2a:3a:
                    b6:21:51:43:95:f8:d9:89:eb:c9:26:c4:87:7c:0a:
                    1f:1e:f6:ca:0f:e9:91:e1:55:a7:c1:1f:76:7d:89:
                    3b:b5:48:76:2c:f4:c5:45:88:a2:bb:da:a9:8d:3d:
                    7f:1a:41:7c:5c:90:8c:72:d7:b0:4a:6c:12:d6:4c:
                    65:bf:da:56:9b:ad:b3:e0:87:50:c9:06:9b:ec:9b:
                    80:4a:00:db:25:b2:d6:53:f9:ad:1e:63:61:30:94:
                    f1:23:be:35:a8:b1:10:01:c4:ab:92:8a:89:cb:e5:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:EE:74:38:E0:55:C4:12:A8:CE:BB:02:77:24:18:DB:BF:07:15
            X509v3 Authority Key Identifier:
                keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:98:28:cd:08:12:cb:74:c0:5f:dd:52:59:e1:08:fc:5d:
         c8:d5:e3:92:c1:78:46:51:34:f9:8f:6f:82:7c:b0:38:c7:51:
         a9:0e:a3:47:cb:a1:fe:bf:b6:25:76:4b:30:18:25:e3:fb:85:
         a4:c4:9a:c2:2c:52:4f:33:9c:ee:14:3e:1d:fd:8e:6d:5b:66:
         24:19:b1:c7:4b:fb:63:c6:67:2b:c1:99:d8:08:ab:0a:43:d6:
         59:2e:f5:8c:28:3c:74:80:d5:8a:e6:4a:96:a0:23:6d:33:0f:
         20:5e:65:d2:25:01:44:94:c0:1d:b4:6d:d6:72:94:c6:7b:13:
         44:8a:50:de:12:ae:fc:1a:45:12:b8:13:1c:ff:7c:a0:71:7f:
         9f:4c:0d:41:4c:2d:19:c8:3c:e6:c7:d2:44:f8:6a:e4:fc:d3:
         ef:0d:42:71:87:5e:7c:10:bb:78:34:61:93:78:01:dd:d6:1b:
         c7:c6:84:fb:0c:54:1a:89:97:35:98:ac:f5:4e:69:a8:a0:28:
         b7:cb:a3:54:2d:ef:a8:8a:10:a9:06:52:25:80:35:a6:75:98:
         24:45:37:cd:18:36:96:8d:8c:b4:74:cf:a6:f0:0f:af:28:1b:
         12:6c:49:b0:e0:f2:97:90:3b:b3:41:e8:92:85:d6:0d:3f:5d:
         e1:2e:43:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d2uJ7p4iOkX7p68VlqosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTNiZGY0ZGM3NDM1ZmFmNTFiYTkzNGQ2NTU3MGY3MWMy
MTczMWEwHhcNMjYwMzI5MTIwMDIwWhcNMjYwMzMwMTIwMDIwWjAzMTEwLwYDVQQD
EyhkNzdjZWU3NDM4ZTA1NWM0MTJhOGNlYmIwMjc3MjQxOGRiYmYwNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6J2AltoheVn5Hg3rkboU7/4Gr6
9Rv+aY4mZIuupDaH4llVJUdMWaYvHAiK6mYRUseXDb6L4Vb+B/GXjBI21h+ceTx0
iBdXXBeVLr0H1UYnt7gwbkeZ62comZ1msbCcNPTazYGreT8hLwl76s5RufQHIpTO
VcfXOb/7FOcZVt+LxR6668S1I0Jzn3O2K66xeRxNKjq2IVFDlfjZievJJsSHfAof
HvbKD+mR4VWnwR92fYk7tUh2LPTFRYiiu9qpjT1/GkF8XJCMctewSmwS1kxlv9pW
m62z4IdQyQab7JuASgDbJbLWU/mtHmNhMJTxI741qLEQAcSrkoqJy+VpwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd87nQ44FXEEqjOuwJ3JBjbvwcVMB8GA1UdIwQY
MBaAFEQTvfTcdDX69RupNNZVcPccIXMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTkt
YmM5ZWNjMmFkYjQzLzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTktYmM5ZWNjMmFkYjQz
LzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1mYKM0I
Est0wF/dUlnhCPxdyNXjksF4RlE0+Y9vgnywOMdRqQ6jR8uh/r+2JXZLMBgl4/uF
pMSawixSTzOc7hQ+Hf2ObVtmJBmxx0v7Y8ZnK8GZ2AirCkPWWS71jCg8dIDViuZK
lqAjbTMPIF5l0iUBRJTAHbRt1nKUxnsTRIpQ3hKu/BpFErgTHP98oHF/n0wNQUwt
Gcg85sfSRPhq5PzT7w1CcYdefBC7eDRhk3gB3dYbx8aE+wxUGomXNZis9U5pqKAo
t8ujVC3vqIoQqQZSJYA1pnWYJEU3zRg2lo2MtHTPpvAPrygbEmxJsODyl5A7s0Ho
koXWDT9d4S5DBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:50 2026 by rpki-client