Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          kEkGMwk9X+5nmE6aD2WvmjcVokhX1zu7/rv+S6QoMOw=
Subject key identifier:   92:BA:F6:6C:57:1B:E0:E1:DB:C4:E8:FF:69:0C:3F:86:9C:2A:D8:46
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019CDA9F9B96D2679269DB42F85DC3E47C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1653
Signing time:             Wed 11 Mar 2026 02:00:18 +0000
Manifest this update:     Wed 11 Mar 2026 02:00:18 +0000
Manifest next update:     Thu 12 Mar 2026 02:00:18 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: ze+hh39diiYgbVp/fnQB1aT+Eru5cjRG2Jo7WfInMUE=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:da:9f:9b:96:d2:67:92:69:db:42:f8:5d:c3:e4:7c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Mar 11 02:00:18 2026 GMT
            Not After : Mar 12 02:00:18 2026 GMT
        Subject: CN=92baf66c571be0e1dbc4e8ff690c3f869c2ad846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:8a:6c:f9:e0:c4:01:95:95:c5:7e:67:2e:
                    d8:15:ba:5b:51:9e:6a:4b:ad:54:09:7d:62:17:51:
                    08:37:8d:9c:5c:a3:b7:06:a9:fb:71:78:d4:b0:bb:
                    c3:c8:a7:43:59:b5:3b:c0:9e:a6:9d:a8:9c:7d:15:
                    52:a5:e9:7e:46:12:2e:a3:eb:9b:f8:e0:ce:87:0f:
                    4c:96:8e:c0:5c:ad:74:85:16:e3:fe:c5:2e:18:78:
                    e1:40:02:64:67:83:cd:73:04:db:14:25:e7:29:ed:
                    8e:df:dd:70:81:f8:5b:8a:4f:e3:12:96:64:c5:a7:
                    27:a0:27:32:86:da:a3:63:64:63:42:0b:a5:a8:77:
                    8b:e4:eb:32:15:c1:90:42:8e:c3:31:c3:2c:17:e0:
                    27:d8:57:bb:7e:aa:3a:32:b6:84:9d:b4:a2:72:10:
                    1b:c0:56:16:69:71:85:f3:4f:4c:cb:39:ee:b8:dd:
                    a1:f4:c4:ef:e7:b1:52:14:65:ac:ab:02:0c:d3:f4:
                    90:53:52:5f:40:c9:f0:a6:ff:1a:81:30:10:50:b6:
                    dc:90:3f:73:6a:73:22:58:b3:7c:ca:bc:58:43:08:
                    28:15:53:15:b3:aa:22:14:47:3f:01:8a:52:d2:87:
                    84:59:e1:8c:06:7b:77:f5:20:75:cc:ba:62:12:09:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BA:F6:6C:57:1B:E0:E1:DB:C4:E8:FF:69:0C:3F:86:9C:2A:D8:46
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:db:32:7b:fc:a3:af:5f:22:db:af:e9:19:a8:c5:b0:8f:
         44:6e:ae:26:3b:c7:53:f9:11:96:84:0b:89:ed:0a:a2:9d:c6:
         2d:ed:3c:62:94:db:90:dc:4b:6c:89:86:9b:21:ca:fa:9c:e8:
         ae:f2:75:b0:8a:d3:27:df:c6:d0:90:ff:38:77:03:cc:a6:07:
         2d:a1:fa:3d:5b:37:e0:2d:32:da:9d:66:53:1c:2a:d6:cf:a4:
         c0:68:ca:63:41:c5:bb:2a:56:5f:5c:94:89:b6:ee:97:9d:f1:
         e8:bc:e3:ca:6e:a1:22:06:e0:ef:94:1e:69:9b:c7:d7:19:f4:
         40:06:28:fc:b3:47:98:10:d2:8b:58:4e:6c:f5:4a:22:c9:bd:
         37:e0:13:d4:e9:f3:0b:41:bb:70:4f:50:e2:5b:8d:a9:a7:1e:
         fa:46:f7:60:34:aa:e5:9d:8f:64:33:6c:ce:b0:a2:0d:69:29:
         f7:b1:7e:62:51:e0:5b:89:14:63:a4:ab:61:b7:f1:e6:fd:6f:
         77:c3:d4:c6:a6:4b:f4:e1:3e:26:95:00:60:10:e0:6f:e8:4a:
         b0:0f:9c:0d:8a:c8:4d:11:d7:ba:19:a9:cb:0c:8c:fc:12:da:
         42:60:7e:81:bc:4f:a7:dd:5c:03:04:a6:3d:46:c0:19:27:76:
         72:7c:bb:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzan5uW0meSadtC+F3D5HxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwMzExMDIwMDE4WhcNMjYwMzEyMDIwMDE4WjAzMTEwLwYDVQQD
Eyg5MmJhZjY2YzU3MWJlMGUxZGJjNGU4ZmY2OTBjM2Y4NjljMmFkODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3uKbPngxAGVlcV+Zy7YFbpbUZ5q
S61UCX1iF1EIN42cXKO3Bqn7cXjUsLvDyKdDWbU7wJ6mnaicfRVSpel+RhIuo+ub
+ODOhw9Mlo7AXK10hRbj/sUuGHjhQAJkZ4PNcwTbFCXnKe2O391wgfhbik/jEpZk
xacnoCcyhtqjY2RjQgulqHeL5OsyFcGQQo7DMcMsF+An2Fe7fqo6MraEnbSichAb
wFYWaXGF809MyznuuN2h9MTv57FSFGWsqwIM0/SQU1JfQMnwpv8agTAQULbckD9z
anMiWLN8yrxYQwgoFVMVs6oiFEc/AYpS0oeEWeGMBnt39SB1zLpiEgn8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK69mxXG+Dh28To/2kMP4acKthGMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2fbMnv8
o69fItuv6RmoxbCPRG6uJjvHU/kRloQLie0Kop3GLe08YpTbkNxLbImGmyHK+pzo
rvJ1sIrTJ9/G0JD/OHcDzKYHLaH6PVs34C0y2p1mUxwq1s+kwGjKY0HFuypWX1yU
ibbul53x6Lzjym6hIgbg75QeaZvH1xn0QAYo/LNHmBDSi1hObPVKIsm9N+AT1Onz
C0G7cE9Q4luNqace+kb3YDSq5Z2PZDNszrCiDWkp97F+YlHgW4kUY6SrYbfx5v1v
d8PUxqZL9OE+JpUAYBDgb+hKsA+cDYrITRHXuhmpywyM/BLaQmB+gbxPp91cAwSm
PUbAGSd2cny7fw==
-----END CERTIFICATE-----
Generated at Wed Mar 11 09:59:03 2026 by rpki-client