Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          fFwxmSqF7q5ZNL2K5EyS9JIlu2tLF40gNwbqdfTKObk=
Subject key identifier:   47:24:02:8A:DB:DB:1C:7B:0A:37:BF:A5:A6:A9:44:B4:35:44:E0:2A
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019CE7B7745B74609E5D1C8E6E7C00C60B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 15:01:25 +0000
Manifest this update:     Fri 13 Mar 2026 15:01:25 +0000
Manifest next update:     Sat 14 Mar 2026 15:01:25 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: tE9dZrubSoTd43QODJkbR8mYynpCHsWfks1iD727Bb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:b7:74:5b:74:60:9e:5d:1c:8e:6e:7c:00:c6:0b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Mar 13 15:01:25 2026 GMT
            Not After : Mar 14 15:01:25 2026 GMT
        Subject: CN=4724028adbdb1c7b0a37bfa5a6a944b43544e02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:3d:de:3f:b2:bb:c7:3f:7f:7a:d0:2a:ef:
                    99:24:0f:4a:ef:f4:cd:41:db:02:5e:e1:53:54:bb:
                    ca:11:d3:f4:db:50:c7:f5:d4:25:12:96:de:a5:cb:
                    d8:d8:6a:39:de:30:ea:1d:8a:ff:e2:29:4f:cf:92:
                    0b:1a:d1:b4:c0:44:0b:0a:53:f1:71:53:57:c6:8f:
                    00:51:1a:b1:10:a3:f1:44:aa:1d:72:35:df:ec:28:
                    fc:bb:95:ec:7f:ff:b5:0f:4a:45:3a:ad:ab:a0:27:
                    89:74:5f:ec:f9:72:45:ef:a5:b1:92:01:0e:9a:65:
                    03:fc:04:53:03:f3:ed:41:2a:00:c5:76:19:a6:36:
                    10:2a:1f:42:dc:71:1a:01:42:02:cc:01:f4:7d:f2:
                    de:9d:e7:b8:de:f9:57:13:d5:d2:1f:fe:2a:67:48:
                    21:c6:6f:12:d8:4b:b3:3a:57:70:23:43:26:dd:08:
                    59:b8:a5:66:29:c9:ea:0f:21:41:6a:b1:a5:e1:be:
                    7d:d7:b5:d2:98:71:ba:e0:48:20:06:44:bd:0f:a6:
                    3e:2e:ba:3f:df:f6:23:78:ac:af:49:14:f0:bc:e0:
                    89:5f:bf:64:0a:7a:58:dc:40:6a:03:34:f8:19:27:
                    1c:6c:b6:a5:bd:54:99:eb:30:d1:3a:75:03:e0:2c:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:02:8A:DB:DB:1C:7B:0A:37:BF:A5:A6:A9:44:B4:35:44:E0:2A
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:20:43:01:c7:78:42:8f:03:2b:58:a6:86:12:a8:07:e3:
         ca:d2:cc:68:43:21:76:13:49:3a:8c:99:af:1f:b2:8f:95:f2:
         8c:c4:5d:45:fe:4c:f7:6a:f3:73:73:3d:8d:25:c4:5b:4c:32:
         38:23:ce:db:03:2d:2f:a6:54:bd:e9:5d:93:b4:9e:84:d8:45:
         db:cb:f1:5e:2a:21:46:2f:7d:bd:4d:4f:ed:db:f3:c7:b4:fa:
         01:0e:ba:1a:7b:aa:8b:7b:77:e4:13:86:a2:5e:78:a1:d0:70:
         8f:ae:93:12:2d:44:21:d0:97:4d:89:da:96:ef:6f:b3:03:35:
         1b:31:34:50:96:58:6b:bc:10:c6:ab:5b:0c:cc:ac:9c:23:09:
         22:ee:08:76:4c:11:5b:28:6a:26:46:d8:b8:4e:4d:ae:bb:3b:
         0f:31:a1:28:47:49:a3:40:ec:8b:8c:67:b6:c2:31:4a:e5:b2:
         a2:2f:3d:33:39:5c:cb:81:52:de:21:4f:b6:09:ea:7f:53:dd:
         1d:ff:a3:49:8d:30:ff:1a:a1:cf:09:23:9c:c1:52:57:c9:21:
         f7:2b:7c:c9:ef:25:aa:5d:af:59:f3:85:aa:90:ac:a9:2a:0a:
         a9:8e:90:ca:ba:38:97:75:6d:1e:e7:4b:0e:8e:fb:b0:dc:60:
         00:df:b6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznt3RbdGCeXRyObnwAxgs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw
NjY5NjUwHhcNMjYwMzEzMTUwMTI1WhcNMjYwMzE0MTUwMTI1WjAzMTEwLwYDVQQD
Eyg0NzI0MDI4YWRiZGIxYzdiMGEzN2JmYTVhNmE5NDRiNDM1NDRlMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZc93j+yu8c/f3rQKu+ZJA9K7/TN
QdsCXuFTVLvKEdP021DH9dQlEpbepcvY2Go53jDqHYr/4ilPz5ILGtG0wEQLClPx
cVNXxo8AURqxEKPxRKodcjXf7Cj8u5Xsf/+1D0pFOq2roCeJdF/s+XJF76WxkgEO
mmUD/ARTA/PtQSoAxXYZpjYQKh9C3HEaAUICzAH0ffLenee43vlXE9XSH/4qZ0gh
xm8S2EuzOldwI0Mm3QhZuKVmKcnqDyFBarGl4b5917XSmHG64EggBkS9D6Y+Lro/
3/YjeKyvSRTwvOCJX79kCnpY3EBqAzT4GSccbLalvVSZ6zDROnUD4CydQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEckAorb2xx7Cje/paapRLQ1ROAqMB8GA1UdIwQY
MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt
ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5
LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+wgQwHH
eEKPAytYpoYSqAfjytLMaEMhdhNJOoyZrx+yj5XyjMRdRf5M92rzc3M9jSXEW0wy
OCPO2wMtL6ZUveldk7SehNhF28vxXiohRi99vU1P7dvzx7T6AQ66Gnuqi3t35BOG
ol54odBwj66TEi1EIdCXTYnalu9vswM1GzE0UJZYa7wQxqtbDMysnCMJIu4IdkwR
WyhqJkbYuE5Nrrs7DzGhKEdJo0Dsi4xntsIxSuWyoi89Mzlcy4FS3iFPtgnqf1Pd
Hf+jSY0w/xqhzwkjnMFSV8kh9yt8ye8lql2vWfOFqpCsqSoKqY6Qyro4l3VtHudL
Do77sNxgAN+2Lw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 21:30:32 2026 by rpki-client