Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          lHCCEJ5tbbm/kBah48FdU2GUaiT28QnTWSgMtfen/Oo=
Subject key identifier:   37:0C:F4:C2:FE:F6:53:EB:46:F3:53:42:04:B7:04:19:C7:0C:A8:15
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019CC7BE4FF60090B0BBB54F6918BD7318EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1314
Signing time:             Sat 07 Mar 2026 10:01:03 +0000
Manifest this update:     Sat 07 Mar 2026 10:01:03 +0000
Manifest next update:     Sun 08 Mar 2026 10:01:03 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: A9QFtUt7pVOkHz+8ot7/+CnhcWyTT19jA5NO7bYFYF8=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:be:4f:f6:00:90:b0:bb:b5:4f:69:18:bd:73:18:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Mar  7 10:01:03 2026 GMT
            Not After : Mar  8 10:01:03 2026 GMT
        Subject: CN=370cf4c2fef653eb46f3534204b70419c70ca815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:98:4f:f3:8c:59:40:82:07:28:47:06:f1:
                    46:52:0a:2c:ba:22:35:d3:dd:d6:66:8f:a8:48:55:
                    28:20:5a:62:14:fb:1c:ae:f3:90:0f:f2:2b:76:b7:
                    e8:da:32:b2:3f:11:bc:94:fe:a6:9a:31:5d:bd:69:
                    fa:40:6c:f6:00:c8:de:73:9d:0e:ee:90:0e:5c:86:
                    72:34:ba:4e:19:ca:75:da:ac:d2:56:70:82:db:80:
                    3e:9f:1d:f9:fe:bd:6b:76:4c:0f:87:50:0b:74:45:
                    14:9f:f5:94:61:5f:20:b2:54:34:d5:ef:bc:e0:ba:
                    c3:8d:b6:df:64:72:57:20:43:c6:8d:ac:c1:15:e2:
                    ec:14:bd:91:22:3c:33:80:7b:0a:85:5e:8e:c0:7b:
                    85:3c:d8:27:b0:50:c6:63:66:23:26:01:55:6b:63:
                    7b:2a:f6:f4:78:b8:0d:90:3f:98:35:ba:c0:67:60:
                    4f:db:52:59:ee:0f:2f:2d:c2:42:e3:90:a0:ce:38:
                    b5:8c:04:23:6a:18:f2:35:5c:a7:94:ea:da:db:bc:
                    ea:50:c6:80:e7:50:bf:fa:0d:eb:f2:5d:14:80:90:
                    64:96:cf:16:76:28:60:14:04:27:3c:ee:0a:17:94:
                    dd:f0:d1:1e:a6:d2:4d:38:d1:0f:2a:d9:70:2d:ff:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:F4:C2:FE:F6:53:EB:46:F3:53:42:04:B7:04:19:C7:0C:A8:15
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:2c:b6:7f:f1:f4:40:99:e0:27:cb:0b:57:1f:dc:83:fd:
         bf:29:7c:06:58:40:02:6f:94:cb:3a:86:b2:50:22:97:d5:a2:
         d7:53:e6:7f:9d:51:08:73:b9:0b:51:af:1d:68:b5:5c:99:37:
         65:42:07:cf:75:3d:f4:24:e0:e1:68:73:63:3d:ad:99:a8:c9:
         1c:05:7a:03:9f:61:01:37:4a:9c:2e:0e:b5:2e:f6:d8:97:d2:
         4b:ad:ba:8d:1e:b3:b5:81:ba:51:ac:b7:7d:f1:56:fa:73:f4:
         4f:31:de:90:24:44:cb:e0:87:b5:fb:16:c7:4f:a2:18:f5:5f:
         d6:4d:0b:fa:31:34:b5:88:35:b9:42:d9:6f:d7:92:6c:3f:95:
         f6:1b:cf:6f:db:d8:7b:a8:ab:6d:23:7a:83:24:6d:be:d8:a8:
         61:47:37:c3:32:92:f1:b1:a7:f7:43:6a:1b:3a:2e:97:48:07:
         56:1b:e4:4b:67:a5:a0:22:74:07:68:75:97:61:de:39:95:a1:
         51:f7:b5:42:5b:b0:e5:bf:ec:0d:42:5a:b4:f7:75:b4:e5:02:
         e5:10:9b:34:56:32:f5:0f:23:a1:85:89:c2:b6:ed:ca:95:0f:
         a9:9d:b9:d6:97:d5:12:7d:0e:de:68:52:86:3c:1b:bc:b9:76:
         cb:95:14:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHvk/2AJCwu7VPaRi9cxjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1
ZDJkZGYwHhcNMjYwMzA3MTAwMTAzWhcNMjYwMzA4MTAwMTAzWjAzMTEwLwYDVQQD
EygzNzBjZjRjMmZlZjY1M2ViNDZmMzUzNDIwNGI3MDQxOWM3MGNhODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9eYT/OMWUCCByhHBvFGUgosuiI1
093WZo+oSFUoIFpiFPscrvOQD/Irdrfo2jKyPxG8lP6mmjFdvWn6QGz2AMjec50O
7pAOXIZyNLpOGcp12qzSVnCC24A+nx35/r1rdkwPh1ALdEUUn/WUYV8gslQ01e+8
4LrDjbbfZHJXIEPGjazBFeLsFL2RIjwzgHsKhV6OwHuFPNgnsFDGY2YjJgFVa2N7
Kvb0eLgNkD+YNbrAZ2BP21JZ7g8vLcJC45Cgzji1jAQjahjyNVynlOra27zqUMaA
51C/+g3r8l0UgJBkls8WdihgFAQnPO4KF5Td8NEeptJNONEPKtlwLf9j1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcM9ML+9lPrRvNTQgS3BBnHDKgVMB8GA1UdIwQY
MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt
YjE4NGUzZjRiNTBlLzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl
LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9gstn/x
9ECZ4CfLC1cf3IP9vyl8BlhAAm+UyzqGslAil9Wi11Pmf51RCHO5C1GvHWi1XJk3
ZUIHz3U99CTg4WhzYz2tmajJHAV6A59hATdKnC4OtS722JfSS626jR6ztYG6Uay3
ffFW+nP0TzHekCREy+CHtfsWx0+iGPVf1k0L+jE0tYg1uULZb9eSbD+V9hvPb9vY
e6irbSN6gyRtvtioYUc3wzKS8bGn90NqGzoul0gHVhvkS2eloCJ0B2h1l2HeOZWh
Ufe1Qluw5b/sDUJatPd1tOUC5RCbNFYy9Q8joYWJwrbtypUPqZ251pfVEn0O3mhS
hjwbvLl2y5UUfg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:30 2026 by rpki-client