Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          VhbNDR3PqKqn/kf78VRml8Lq1Cx2gzcM9sNJoLn63/s=
Subject key identifier:   55:14:F2:83:D1:86:E1:25:4B:51:D1:CA:10:C0:3B:07:87:29:96:DD
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019D389C26979C2A37CB44B18C1562BE59EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0F19
Signing time:             Sun 29 Mar 2026 08:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:50 +0000
Files and hashes:         1: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (hash: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A=)
                          2: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (hash: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k=)
                          3: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: ChRirHY9yZUuqPVl3i0iX3vhftgo/Rh7/yCg4+P51Tk=)
                          4: zNU6IDjxCzR9kstGaRPoOLdFKys.roa (hash: /0Ll+33Qv6p8kiSxadN/S3UUnMBmdYJpGWJ0vqXCXNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:26:97:9c:2a:37:cb:44:b1:8c:15:62:be:59:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Mar 29 08:00:50 2026 GMT
            Not After : Mar 30 08:00:50 2026 GMT
        Subject: CN=5514f283d186e1254b51d1ca10c03b07872996dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:27:0f:8d:4b:9c:57:da:7a:f3:26:70:cf:
                    6b:e6:2b:a6:1f:0f:55:14:fa:1a:22:c7:10:da:2e:
                    d2:62:b8:a0:40:9d:f1:a8:3f:ab:ab:71:e3:b8:4a:
                    2b:63:fd:a7:f3:7a:2d:6e:c5:d6:f3:a2:8e:0e:0f:
                    76:b1:a1:ec:69:e3:16:f3:7d:c5:6c:2b:23:53:7c:
                    76:50:cb:86:e9:3e:24:92:29:32:22:b5:9d:23:60:
                    e2:ba:38:36:3e:de:52:8c:cb:0a:c6:89:d2:a3:ea:
                    d1:df:88:0a:f6:37:a5:74:29:f7:2f:70:63:02:13:
                    c1:96:f5:f5:43:33:77:1b:2a:32:cd:fa:4f:35:18:
                    68:7d:26:7b:e4:a1:df:91:b7:d0:64:14:29:7c:19:
                    57:b1:45:5b:f3:70:cd:c4:9c:23:71:1d:8a:49:a2:
                    88:17:2d:bf:78:b7:80:aa:14:75:f4:5f:81:24:dc:
                    5a:05:96:8f:87:17:ea:69:76:c6:a6:88:13:ea:d0:
                    fc:54:bb:11:d4:96:84:90:ee:11:65:26:c7:9a:64:
                    f3:da:2e:06:38:19:ba:30:bf:11:b1:60:ca:99:6c:
                    fd:d9:94:b0:e6:ac:21:81:ee:af:46:4f:9d:d3:4c:
                    3e:85:18:4b:b0:15:df:f0:e4:87:f0:ad:dc:d7:51:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:F2:83:D1:86:E1:25:4B:51:D1:CA:10:C0:3B:07:87:29:96:DD
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:08:7a:0e:1d:6c:7f:31:f6:4b:b5:94:82:6b:9a:a0:7c:67:
         af:dd:42:5c:7f:1d:d8:91:e8:17:6e:08:ed:33:b6:64:b0:63:
         b2:f2:b0:31:22:b1:3b:8a:1d:a5:cf:d1:92:1c:45:82:8b:f7:
         d9:cf:39:76:80:67:e8:df:40:b6:03:32:be:3b:d5:a6:0f:d9:
         4a:af:e6:88:68:63:66:97:1f:54:47:d0:9c:76:0b:e4:55:6d:
         7b:96:d3:b7:b5:3f:09:1a:ea:b8:4b:ec:27:07:42:0b:7f:80:
         e1:91:28:98:05:73:76:8c:69:8f:9b:87:80:cb:c0:c9:a1:fb:
         ed:35:64:5e:bd:50:32:20:27:02:36:ec:9a:ed:cd:07:80:e7:
         4f:67:0d:bc:90:8b:1d:e9:21:c6:88:8c:20:ad:64:d4:d1:3b:
         a2:96:bc:93:b0:46:1f:84:7a:04:d6:f7:f0:3f:e3:37:d3:30:
         72:c4:3c:93:b8:31:f6:f4:f9:12:02:c6:f8:bd:b4:72:ca:df:
         82:d8:b8:5c:9b:b4:f6:36:a9:ff:e4:dc:2d:86:e7:88:fb:8f:
         09:10:83:2d:29:ca:12:6d:81:3b:40:0a:71:03:d7:9c:c6:b0:
         0c:ec:ef:d8:f0:f9:66:08:c0:b3:1a:fe:f9:30:8f:72:c6:98:
         02:86:02:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCaXnCo3y0SxjBVivlnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjYwMzI5MDgwMDUwWhcNMjYwMzMwMDgwMDUwWjAzMTEwLwYDVQQD
Eyg1NTE0ZjI4M2QxODZlMTI1NGI1MWQxY2ExMGMwM2IwNzg3Mjk5NmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdMnD41LnFfaevMmcM9r5iumHw9V
FPoaIscQ2i7SYrigQJ3xqD+rq3HjuEorY/2n83otbsXW86KODg92saHsaeMW833F
bCsjU3x2UMuG6T4kkikyIrWdI2Diujg2Pt5SjMsKxonSo+rR34gK9jeldCn3L3Bj
AhPBlvX1QzN3GyoyzfpPNRhofSZ75KHfkbfQZBQpfBlXsUVb83DNxJwjcR2KSaKI
Fy2/eLeAqhR19F+BJNxaBZaPhxfqaXbGpogT6tD8VLsR1JaEkO4RZSbHmmTz2i4G
OBm6ML8RsWDKmWz92ZSw5qwhge6vRk+d00w+hRhLsBXf8OSH8K3c11GD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUU8oPRhuElS1HRyhDAOweHKZbdMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwh6Dh1s
fzH2S7WUgmuaoHxnr91CXH8d2JHoF24I7TO2ZLBjsvKwMSKxO4odpc/RkhxFgov3
2c85doBn6N9AtgMyvjvVpg/ZSq/miGhjZpcfVEfQnHYL5FVte5bTt7U/CRrquEvs
JwdCC3+A4ZEomAVzdoxpj5uHgMvAyaH77TVkXr1QMiAnAjbsmu3NB4DnT2cNvJCL
HekhxoiMIK1k1NE7opa8k7BGH4R6BNb38D/jN9MwcsQ8k7gx9vT5EgLG+L20csrf
gti4XJu09jap/+TcLYbniPuPCRCDLSnKEm2BO0AKcQPXnMawDOzv2PD5ZgjAsxr+
+TCPcsaYAoYCbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:41 2026 by rpki-client