Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          yufdJ2xQJEwijr4Aodk+GGiihekY5yaBYrdLzkNagSU=
Subject key identifier:   26:F7:C4:73:FB:6A:9D:4D:88:FD:98:A8:F8:BF:21:31:C7:27:89:6F
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019CB3929E5030F56DEB41993550B5366D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0CA4
Signing time:             Tue 03 Mar 2026 12:00:56 +0000
Manifest this update:     Tue 03 Mar 2026 12:00:56 +0000
Manifest next update:     Wed 04 Mar 2026 12:00:56 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: G424g57xXENY2DHJSLRepGmj98E.roa (hash: fxFxeeNbC2BzkjzLduHQdCSo3bpyacMg+qlZ3fSgioQ=)
                          3: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: dxLkQSr2BRFk0nR5M5JHXASCzEmHNe7uLKm1UL5VHqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b3:92:9e:50:30:f5:6d:eb:41:99:35:50:b5:36:6d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Mar  3 12:00:56 2026 GMT
            Not After : Mar  4 12:00:56 2026 GMT
        Subject: CN=26f7c473fb6a9d4d88fd98a8f8bf2131c727896f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:c6:17:30:d1:eb:67:bf:67:7a:98:73:6e:
                    8e:48:61:88:06:8d:54:92:84:53:21:be:d1:7a:e8:
                    e4:7d:8c:9d:f4:47:c3:b1:e4:c3:18:ca:49:9a:dd:
                    5d:d7:56:f4:4d:1d:c9:80:22:cd:70:e6:c5:af:68:
                    94:19:9a:48:f0:cd:a8:a2:ee:07:7e:77:cb:4d:98:
                    76:d2:98:2a:10:79:ab:b7:f8:aa:29:6f:93:ee:c9:
                    06:e5:53:68:f5:39:ec:d9:c2:df:00:af:3d:3a:69:
                    e9:32:bf:36:ba:d5:99:1c:bb:37:53:82:6b:b5:8f:
                    f4:30:0b:10:f9:c6:64:98:34:35:4a:c5:d5:0a:ff:
                    e5:c3:16:eb:47:ce:45:ef:ff:f3:7f:84:d7:5b:ec:
                    75:73:70:1c:f0:36:f3:7c:6e:18:e5:aa:a2:78:4b:
                    e6:93:a7:aa:57:57:4a:9f:56:f2:ce:04:a8:25:aa:
                    57:ef:60:f9:70:10:ff:ab:41:24:33:15:f0:bc:44:
                    1b:c5:b3:2f:03:05:e5:11:d3:31:37:50:fb:b6:61:
                    e9:5b:1c:18:f0:b9:ae:88:b5:28:67:7f:24:45:82:
                    50:85:2e:85:6b:bf:87:b5:5e:9e:ce:d3:2f:6f:6e:
                    4a:e1:b0:96:29:b2:cf:59:56:0c:a7:f1:86:08:a2:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:C4:73:FB:6A:9D:4D:88:FD:98:A8:F8:BF:21:31:C7:27:89:6F
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:a3:12:26:d7:5e:5f:a9:f7:e0:32:e1:8b:94:73:7a:41:
         7b:68:d8:21:d1:7d:f4:1c:63:b7:ee:39:61:3d:93:0b:23:94:
         ff:86:88:f0:80:98:6a:42:2a:73:2a:d5:fa:c7:07:99:dc:a9:
         a4:7d:5e:f7:03:4a:f8:b4:7d:34:43:a4:65:2d:30:42:44:ef:
         ca:15:b7:af:ab:04:11:df:45:06:55:64:be:43:c4:ef:f1:29:
         a7:d2:26:37:34:b9:52:03:e3:37:d1:2a:9e:b7:c4:53:fc:26:
         1a:a9:b0:6a:a8:a8:d4:8d:22:6d:5f:79:77:e9:b3:70:b4:cb:
         c3:12:56:22:30:ce:8a:e8:92:ed:1e:8d:51:62:f6:50:1b:66:
         be:33:de:ec:d1:c7:6e:1f:94:ec:92:fe:0f:27:75:74:9c:9b:
         0c:62:de:f4:3b:9f:34:0e:c3:c2:7b:e1:af:0b:a6:04:2b:19:
         7f:07:91:0b:b8:89:43:f5:54:58:1c:b8:2e:05:f3:8d:7b:9a:
         81:da:b4:99:7f:75:bd:a9:63:1c:73:2f:2c:85:3b:77:5c:0d:
         24:e3:8d:ca:3d:27:61:a9:f8:42:92:f8:d9:52:2d:d5:33:d0:
         99:9c:e3:b7:d0:26:7f:fd:74:23:7b:8e:28:0b:13:a6:68:8c:
         2b:6d:0f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyzkp5QMPVt60GZNVC1Nm1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl
YzJkNjgwHhcNMjYwMzAzMTIwMDU2WhcNMjYwMzA0MTIwMDU2WjAzMTEwLwYDVQQD
EygyNmY3YzQ3M2ZiNmE5ZDRkODhmZDk4YThmOGJmMjEzMWM3Mjc4OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbnGFzDR62e/Z3qYc26OSGGIBo1U
koRTIb7ReujkfYyd9EfDseTDGMpJmt1d11b0TR3JgCLNcObFr2iUGZpI8M2oou4H
fnfLTZh20pgqEHmrt/iqKW+T7skG5VNo9Tns2cLfAK89OmnpMr82utWZHLs3U4Jr
tY/0MAsQ+cZkmDQ1SsXVCv/lwxbrR85F7//zf4TXW+x1c3Ac8DbzfG4Y5aqieEvm
k6eqV1dKn1byzgSoJapX72D5cBD/q0EkMxXwvEQbxbMvAwXlEdMxN1D7tmHpWxwY
8LmuiLUoZ38kRYJQhS6Fa7+HtV6eztMvb25K4bCWKbLPWVYMp/GGCKKF4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb3xHP7ap1NiP2YqPi/ITHHJ4lvMB8GA1UdIwQY
MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt
NmJiYjI3MDgxZGUyLzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy
LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV+jEibX
Xl+p9+Ay4YuUc3pBe2jYIdF99Bxjt+45YT2TCyOU/4aI8ICYakIqcyrV+scHmdyp
pH1e9wNK+LR9NEOkZS0wQkTvyhW3r6sEEd9FBlVkvkPE7/Epp9ImNzS5UgPjN9Eq
nrfEU/wmGqmwaqio1I0ibV95d+mzcLTLwxJWIjDOiuiS7R6NUWL2UBtmvjPe7NHH
bh+U7JL+Dyd1dJybDGLe9DufNA7DwnvhrwumBCsZfweRC7iJQ/VUWBy4LgXzjXua
gdq0mX91valjHHMvLIU7d1wNJOONyj0nYan4QpL42VIt1TPQmZzjt9Amf/10I3uO
KAsTpmiMK20P/g==
-----END CERTIFICATE-----
Generated at Tue Mar 3 16:34:26 2026 by rpki-client