Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          D46yUs1gHS9WoTxGn3kP2B7GkORW54dBYPCJsvtbt6Y=
Subject key identifier:   04:DF:65:63:1F:02:76:6B:33:E6:C3:F8:22:EB:20:FC:F9:02:A1:78
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019CE33525B792AD1A6D6D8F178BA81BA09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          1377
Signing time:             Thu 12 Mar 2026 18:00:36 +0000
Manifest this update:     Thu 12 Mar 2026 18:00:36 +0000
Manifest next update:     Fri 13 Mar 2026 18:00:36 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 1CQXS+n+UonLRrtLKuY8t/IAaj5KFw8APyYCpj7kQRA=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:35:25:b7:92:ad:1a:6d:6d:8f:17:8b:a8:1b:a0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Mar 12 18:00:36 2026 GMT
            Not After : Mar 13 18:00:36 2026 GMT
        Subject: CN=04df65631f02766b33e6c3f822eb20fcf902a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:76:db:f5:47:cc:9f:7d:82:cc:f6:20:c0:
                    08:e5:a6:f2:ff:ee:8b:f9:bd:49:55:97:2e:8b:6a:
                    3c:bc:86:83:41:f6:b9:3a:e3:19:62:bd:37:e9:60:
                    e1:cd:c6:e3:bd:ee:15:99:05:91:fc:35:0f:15:ec:
                    17:a8:27:f6:47:44:23:65:f6:9d:0d:44:4d:ca:18:
                    66:a4:de:9e:40:8d:07:70:f3:2f:8a:03:fd:f3:47:
                    91:38:8a:71:76:b5:65:95:8e:11:e9:40:1c:97:bd:
                    65:76:fa:7f:22:c5:54:3b:0a:f9:7d:87:04:a5:fb:
                    c7:1e:9c:a6:00:fc:63:b5:f1:1a:1b:27:c7:52:91:
                    3f:4b:2e:18:41:eb:99:6b:41:49:b9:73:bb:f1:55:
                    5b:e5:c2:2f:29:f7:87:b0:cf:31:8f:d5:d5:14:65:
                    c6:ba:1a:86:bc:ac:3a:0f:77:53:59:01:14:6a:a3:
                    98:61:00:6a:f6:86:88:65:83:83:e9:3d:20:92:aa:
                    34:1c:a6:d3:0b:6d:27:70:20:f2:c4:35:19:5b:e7:
                    50:0e:bb:f6:d2:31:bb:de:d1:ed:68:31:23:fe:6f:
                    e6:ee:bb:1f:60:60:e9:97:4f:d8:3c:01:2d:e3:0c:
                    4e:84:f8:ed:53:4e:6d:5d:56:db:36:ea:7d:e8:35:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:65:63:1F:02:76:6B:33:E6:C3:F8:22:EB:20:FC:F9:02:A1:78
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:71:2a:18:4d:b7:77:6c:7c:63:35:ca:b6:b2:f0:0f:6d:
         de:0e:db:1d:c5:d0:ca:a4:2c:2f:1f:0e:6a:75:f5:e4:5f:56:
         52:a1:7c:47:cb:79:c1:08:58:24:65:fe:81:60:85:8c:42:56:
         d6:ca:82:71:d3:e6:84:3d:d4:68:bb:56:6c:96:f3:63:2c:3e:
         ed:35:f5:7f:d4:f3:7d:9b:67:a3:71:df:ce:7e:ee:69:2b:e3:
         92:a0:97:d4:1f:a7:1d:4c:4e:08:bc:1e:2d:9f:0a:8d:35:69:
         ce:8f:60:c8:75:74:4b:eb:71:27:ee:f2:bc:43:64:84:c4:05:
         b3:29:c7:16:ee:aa:db:eb:07:0d:e3:9b:93:e3:31:0f:7b:46:
         c7:27:21:c2:8b:8d:c9:c0:5f:92:86:aa:de:b3:d5:ad:d4:11:
         c5:33:b6:ef:12:32:44:41:0b:fe:f7:1c:78:9f:83:e4:b1:b4:
         ad:40:46:b0:e1:58:ba:3b:46:04:cf:41:0e:45:db:92:52:42:
         3e:fe:14:b2:67:4e:66:76:e7:1a:34:5d:86:e4:4f:57:eb:e6:
         18:8b:1c:9a:3b:f4:0c:c0:e0:8c:77:e1:69:df:27:47:a0:8f:
         7a:9b:17:37:99:e7:3d:c5:04:11:b5:bc:24:28:9a:20:ac:91:
         b2:cb:33:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNSW3kq0abW2PF4uoG6CfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl
M2ZlZjMwHhcNMjYwMzEyMTgwMDM2WhcNMjYwMzEzMTgwMDM2WjAzMTEwLwYDVQQD
EygwNGRmNjU2MzFmMDI3NjZiMzNlNmMzZjgyMmViMjBmY2Y5MDJhMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt922/VHzJ99gsz2IMAI5aby/+6L
+b1JVZcui2o8vIaDQfa5OuMZYr036WDhzcbjve4VmQWR/DUPFewXqCf2R0QjZfad
DURNyhhmpN6eQI0HcPMvigP980eROIpxdrVllY4R6UAcl71ldvp/IsVUOwr5fYcE
pfvHHpymAPxjtfEaGyfHUpE/Sy4YQeuZa0FJuXO78VVb5cIvKfeHsM8xj9XVFGXG
uhqGvKw6D3dTWQEUaqOYYQBq9oaIZYOD6T0gkqo0HKbTC20ncCDyxDUZW+dQDrv2
0jG73tHtaDEj/m/m7rsfYGDpl0/YPAEt4wxOhPjtU05tXVbbNup96DVX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATfZWMfAnZrM+bD+CLrIPz5AqF4MB8GA1UdIwQY
MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt
ZGNiZTUzZGE3ODYwLzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw
LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV9xKhhN
t3dsfGM1yray8A9t3g7bHcXQyqQsLx8OanX15F9WUqF8R8t5wQhYJGX+gWCFjEJW
1sqCcdPmhD3UaLtWbJbzYyw+7TX1f9TzfZtno3Hfzn7uaSvjkqCX1B+nHUxOCLwe
LZ8KjTVpzo9gyHV0S+txJ+7yvENkhMQFsynHFu6q2+sHDeObk+MxD3tGxychwouN
ycBfkoaq3rPVrdQRxTO27xIyREEL/vcceJ+D5LG0rUBGsOFYujtGBM9BDkXbklJC
Pv4UsmdOZnbnGjRdhuRPV+vmGIscmjv0DMDgjHfhad8nR6CPepsXN5nnPcUEEbW8
JCiaIKyRssszIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:48 2026 by rpki-client