Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          XZZPqFm2/4GwHPP96jBSTMIQQSO0VrJyMKEtPYHHM9I=
Subject key identifier:   F8:DC:2B:F7:2A:B5:FB:91:2B:B0:5B:57:A3:AA:F2:68:38:5D:0A:77
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       019CE4B61C5F37106B7FE8079879ECC3393D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          0973
Signing time:             Fri 13 Mar 2026 01:01:05 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:05 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:05 +0000
Files and hashes:         1: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: tCkNS2zpqNpeHX7C9bnruv0BB7A0bHLPGYPjIOoVzaE=)
                          2: ibsoqErDKT3266b2vH5vf8KZDA0.roa (hash: UrhNuNL7GgbO0jHlNAEUHP2GLPJjzZnieCjHTk+nkGg=)
                          3: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (hash: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:1c:5f:37:10:6b:7f:e8:07:98:79:ec:c3:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Mar 13 01:01:05 2026 GMT
            Not After : Mar 14 01:01:05 2026 GMT
        Subject: CN=f8dc2bf72ab5fb912bb05b57a3aaf268385d0a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:92:aa:27:01:6b:40:9d:2f:a2:6f:7c:9b:
                    4f:5c:0b:7a:0c:7f:d9:3a:d0:ab:af:73:ae:ae:02:
                    01:4a:01:34:e2:ba:34:53:5b:6a:fb:c3:3c:03:e3:
                    79:d1:56:6b:c0:d7:b9:81:fb:9c:46:c8:58:f8:99:
                    51:ac:fd:7a:e6:48:14:23:f1:06:04:10:6a:c2:f2:
                    ac:06:2a:72:39:31:be:c4:d5:4d:5d:48:96:8f:01:
                    28:ee:66:48:af:9f:35:b7:22:01:dc:64:36:60:3a:
                    29:39:c4:04:e9:8f:02:81:a4:f9:c7:8f:76:e8:1d:
                    76:b8:ab:a0:db:7a:75:35:55:26:d5:d8:e9:f9:99:
                    c7:b5:79:e7:8c:90:b2:f8:a7:6b:30:7b:34:e3:5d:
                    19:e3:11:6a:09:6c:85:aa:67:47:eb:2a:0a:b5:da:
                    d0:93:db:39:89:05:67:db:be:4b:52:10:f8:6f:f8:
                    ed:e3:aa:e8:89:d9:da:48:27:2d:ab:bc:42:ef:04:
                    82:19:24:55:91:40:81:70:52:a5:00:5a:6a:13:e7:
                    85:e1:cf:05:05:fa:e9:39:5c:f1:1d:4c:f8:41:f3:
                    5a:68:8d:89:68:48:da:78:24:29:c8:53:eb:43:b4:
                    0b:0b:54:24:51:44:06:d3:69:71:d3:94:cf:f9:2c:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DC:2B:F7:2A:B5:FB:91:2B:B0:5B:57:A3:AA:F2:68:38:5D:0A:77
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:64:65:f4:fb:4d:0d:fc:3a:78:15:1d:c1:14:a9:b0:f7:
         7d:22:f7:bc:5a:ae:42:fd:76:d8:40:80:f8:a9:c7:38:9f:77:
         e6:b8:71:10:10:21:02:51:a0:10:a0:e8:a2:ba:bf:1e:b9:bc:
         a0:69:7c:0f:60:d7:3b:61:db:e1:f5:43:c4:af:3c:d2:b1:f0:
         9f:8f:0c:31:57:58:18:bd:8a:45:a3:9d:c7:96:ad:e7:b9:66:
         bb:d6:8d:ef:78:46:72:8b:d3:25:3e:53:34:9d:79:5c:88:2e:
         f4:65:a4:13:ca:67:72:3f:68:5a:86:2e:0f:9f:0c:7f:69:4a:
         7b:eb:d0:df:71:a3:c7:52:83:41:d4:de:8a:d9:51:5c:11:75:
         55:93:3f:97:cf:db:21:8c:35:a4:f2:7b:23:64:28:50:ea:c2:
         21:9a:f8:78:ba:54:b9:33:4d:ce:87:3c:de:25:e8:d7:f1:d6:
         7e:a2:b1:2b:e6:3b:85:f2:04:3b:df:69:d3:fa:71:a8:54:b6:
         c1:8e:7c:a3:0a:4f:6e:b9:d9:1b:f0:1a:a1:38:0c:91:cc:75:
         37:17:36:48:b4:a4:48:bc:cc:6c:8c:b5:1f:fd:49:8e:e9:52:
         37:5e:5f:78:17:e3:8d:8c:66:89:17:f7:5a:0b:33:81:a0:b9:
         6a:f5:fb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkthxfNxBrf+gHmHnswzk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5
NjE4ODMwHhcNMjYwMzEzMDEwMTA1WhcNMjYwMzE0MDEwMTA1WjAzMTEwLwYDVQQD
EyhmOGRjMmJmNzJhYjVmYjkxMmJiMDViNTdhM2FhZjI2ODM4NWQwYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjqSqicBa0CdL6JvfJtPXAt6DH/Z
OtCrr3OurgIBSgE04ro0U1tq+8M8A+N50VZrwNe5gfucRshY+JlRrP165kgUI/EG
BBBqwvKsBipyOTG+xNVNXUiWjwEo7mZIr581tyIB3GQ2YDopOcQE6Y8CgaT5x492
6B12uKug23p1NVUm1djp+ZnHtXnnjJCy+KdrMHs0410Z4xFqCWyFqmdH6yoKtdrQ
k9s5iQVn275LUhD4b/jt46roidnaSCctq7xC7wSCGSRVkUCBcFKlAFpqE+eF4c8F
BfrpOVzxHUz4QfNaaI2JaEjaeCQpyFPrQ7QLC1QkUUQG02lx05TP+SyR/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjcK/cqtfuRK7BbV6Oq8mg4XQp3MB8GA1UdIwQY
MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt
NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh
LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3pkZfT7
TQ38OngVHcEUqbD3fSL3vFquQv122ECA+KnHOJ935rhxEBAhAlGgEKDoorq/Hrm8
oGl8D2DXO2Hb4fVDxK880rHwn48MMVdYGL2KRaOdx5at57lmu9aN73hGcovTJT5T
NJ15XIgu9GWkE8pncj9oWoYuD58Mf2lKe+vQ33Gjx1KDQdTeitlRXBF1VZM/l8/b
IYw1pPJ7I2QoUOrCIZr4eLpUuTNNzoc83iXo1/HWfqKxK+Y7hfIEO99p0/pxqFS2
wY58owpPbrnZG/AaoTgMkcx1Nxc2SLSkSLzMbIy1H/1JjulSN15feBfjjYxmiRf3
WgszgaC5avX7HA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:50 2026 by rpki-client