Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          fg5zNB6MDBxg09VRkvIFFdy7DKIoU9OIzw3zr2/bz50=
Subject key identifier:   EA:F4:5E:45:F0:77:CC:D0:6F:14:09:FB:57:BC:FB:4F:4E:74:9C:58
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019D39776CFC8F88C804B4A72BD9762321E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          12F9
Signing time:             Sun 29 Mar 2026 12:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:21 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: sjMxNjJtkIYUIMUd9C9Im13w5TxcnArCaTjsh2jnMXk=)
                          2: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          3: MkcX9GenTKmR5jedlZaDXtOqlb8.roa (hash: HYFxXiizcZIEgsQl7ewj/koOWIU6qo+dNkAHdlTz/+A=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          7: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (hash: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:6c:fc:8f:88:c8:04:b4:a7:2b:d9:76:23:21:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Mar 29 12:00:21 2026 GMT
            Not After : Mar 30 12:00:21 2026 GMT
        Subject: CN=eaf45e45f077ccd06f1409fb57bcfb4f4e749c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:61:b3:ba:95:dc:79:3d:11:e8:d7:fd:6d:
                    6c:f2:d6:6b:75:fd:1c:5c:c8:64:5c:5a:80:50:25:
                    cb:3d:ec:f5:27:6f:83:40:d0:e6:c9:3a:b0:d7:3a:
                    ef:86:11:a8:fa:78:6c:9c:77:66:bf:de:cb:4c:ba:
                    c9:b7:dc:17:67:14:27:55:11:66:d8:af:24:d4:5c:
                    4d:ce:8d:8a:25:c8:99:33:5b:3e:97:7b:d4:40:91:
                    aa:1f:b9:13:64:8e:c3:6f:26:ba:6e:9d:2c:70:17:
                    8b:be:29:bf:26:8a:a9:98:39:f0:b2:77:a1:b4:cb:
                    c7:94:52:82:b0:46:4c:44:f7:d0:0f:12:c4:ae:81:
                    f0:31:b4:0d:68:1a:fa:aa:bf:88:aa:b8:68:12:72:
                    67:ae:34:28:53:65:f6:b4:2b:02:94:5b:ba:c0:0e:
                    f1:0f:ce:e2:a4:c4:ef:28:6b:7c:f9:ed:c8:49:eb:
                    bb:e0:8b:f7:aa:df:3f:e4:a2:df:f0:d4:d7:db:b4:
                    e7:82:25:b7:43:8f:15:64:33:0f:ae:65:a8:86:90:
                    d5:f5:d6:39:85:1a:0d:4f:64:21:ee:1c:e1:3b:30:
                    50:41:91:f2:8f:0c:74:ca:09:c3:53:e5:db:4a:5e:
                    e1:25:55:3e:52:83:b6:b3:42:7f:8c:b8:04:46:e0:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:5E:45:F0:77:CC:D0:6F:14:09:FB:57:BC:FB:4F:4E:74:9C:58
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:33:d2:ea:18:f9:ce:98:0d:32:73:5a:b0:07:7d:4e:ae:a6:
         ba:22:64:5b:9e:24:ba:d9:b0:35:57:74:04:1d:1d:60:6f:29:
         5a:78:8e:c6:1f:da:3e:0b:6a:a8:e4:df:ca:b2:22:fd:65:de:
         28:af:70:5a:8e:da:e8:59:bf:26:53:67:a7:df:a9:80:60:dc:
         de:5c:14:0b:80:ab:f2:2e:a9:d4:b9:a6:fc:f0:79:14:6f:52:
         c8:c1:8a:42:8b:93:3e:05:05:d4:b0:73:37:25:6b:4a:6a:82:
         fc:68:d6:c0:f8:d1:56:97:dd:19:ff:ee:c4:2f:98:67:1a:a9:
         4f:64:c5:0f:be:58:a2:94:b6:5e:97:22:80:84:b6:e7:6d:4e:
         77:0b:a7:cc:e8:8b:f6:a9:71:28:00:f0:fa:d3:c6:41:03:b8:
         6a:be:cc:99:2e:d2:13:bf:53:76:4f:62:d0:c8:bc:dc:e9:53:
         7b:a5:08:e8:e1:22:e4:ac:8a:b4:7b:3e:6d:77:38:bc:f2:68:
         39:90:79:98:9f:9f:23:1e:82:9d:28:0c:c7:df:f4:a1:5d:06:
         64:c6:b2:12:0c:4a:eb:57:3d:49:1b:77:a9:28:6c:46:5f:e0:
         84:e5:71:bc:f5:4e:82:ad:3d:92:fd:b0:db:ac:af:2f:11:32:
         ba:4d:0c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d2z8j4jIBLSnK9l2IyHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjYwMzI5MTIwMDIxWhcNMjYwMzMwMTIwMDIxWjAzMTEwLwYDVQQD
EyhlYWY0NWU0NWYwNzdjY2QwNmYxNDA5ZmI1N2JjZmI0ZjRlNzQ5YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9hs7qV3Hk9EejX/W1s8tZrdf0c
XMhkXFqAUCXLPez1J2+DQNDmyTqw1zrvhhGo+nhsnHdmv97LTLrJt9wXZxQnVRFm
2K8k1FxNzo2KJciZM1s+l3vUQJGqH7kTZI7Dbya6bp0scBeLvim/JoqpmDnwsneh
tMvHlFKCsEZMRPfQDxLEroHwMbQNaBr6qr+IqrhoEnJnrjQoU2X2tCsClFu6wA7x
D87ipMTvKGt8+e3ISeu74Iv3qt8/5KLf8NTX27TngiW3Q48VZDMPrmWohpDV9dY5
hRoNT2Qh7hzhOzBQQZHyjwx0ygnDU+XbSl7hJVU+UoO2s0J/jLgERuBK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr0XkXwd8zQbxQJ+1e8+09OdJxYMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxzPS6hj5
zpgNMnNasAd9Tq6muiJkW54kutmwNVd0BB0dYG8pWniOxh/aPgtqqOTfyrIi/WXe
KK9wWo7a6Fm/JlNnp9+pgGDc3lwUC4Cr8i6p1Lmm/PB5FG9SyMGKQouTPgUF1LBz
NyVrSmqC/GjWwPjRVpfdGf/uxC+YZxqpT2TFD75YopS2XpcigIS2521OdwunzOiL
9qlxKADw+tPGQQO4ar7MmS7SE79Tdk9i0Mi83OlTe6UI6OEi5KyKtHs+bXc4vPJo
OZB5mJ+fIx6CnSgMx9/0oV0GZMayEgxK61c9SRt3qShsRl/ghOVxvPVOgq09kv2w
26yvLxEyuk0MMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:02 2026 by rpki-client