Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
File:                     Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft (raw, json)
Hash identifier:          Ypbt8nSpqN2Amnx+c977piKy2Bf71BnEOhrFxvEBiD0=
Subject key identifier:   C8:51:FE:04:08:95:E9:63:86:B7:19:9A:04:87:46:E2:5F:2E:06:05
Authority key identifier: 31:AE:80:7A:8F:CE:40:A3:2B:E8:76:ED:77:9D:14:F1:DE:6F:AD:9A
Certificate issuer:       /CN=31ae807a8fce40a32be876ed779d14f1de6fad9a
Certificate serial:       019D3A5449F85E9C56288EAD8178B7468B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
Manifest number:          2D
Signing time:             Sun 29 Mar 2026 16:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:35 +0000
Files and hashes:         1: IHECthmlpDpJGsSkgns0x3n0yLw.roa (hash: X2aYRmqqSOfsP22FqmMtKLm3/ujZWCql9BMXfBL/SYE=)
                          2: Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl (hash: rY0I3QocbCIo7Qa8d55gqU4uTDr76GULaT1QgSXs1BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:49:f8:5e:9c:56:28:8e:ad:81:78:b7:46:8b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ae807a8fce40a32be876ed779d14f1de6fad9a
        Validity
            Not Before: Mar 29 16:01:35 2026 GMT
            Not After : Mar 30 16:01:35 2026 GMT
        Subject: CN=c851fe040895e96386b7199a048746e25f2e0605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:86:72:1f:ce:30:49:93:36:0f:2b:77:8a:7b:
                    9b:3b:bb:8a:06:6c:ca:ef:a0:28:74:1d:0d:0a:51:
                    79:88:37:5f:e0:c4:78:2f:cb:a6:33:8e:fc:30:d7:
                    d1:5f:65:91:71:1c:d7:fb:f3:b0:13:45:d7:2e:a3:
                    c4:75:13:4f:ad:cd:a4:13:fb:ca:56:3b:10:bd:08:
                    ce:aa:7e:40:94:0f:6e:31:a6:c8:d1:a6:bd:da:a6:
                    0d:36:1f:15:0a:3e:5a:23:d6:98:f7:8d:6e:35:ec:
                    d8:c0:e6:7c:43:74:d3:a6:88:e3:46:c8:77:a1:91:
                    d2:8a:4b:a3:55:60:37:fc:b6:bd:c7:99:13:c6:e7:
                    60:40:9b:72:f2:1c:ca:3a:b8:1e:02:37:84:3b:9d:
                    10:43:ad:f1:ae:00:c4:89:2f:98:04:33:0e:e3:3f:
                    09:51:72:9b:43:76:81:94:f9:c0:df:46:fd:eb:5b:
                    cf:c7:7a:d6:d1:34:44:9b:65:c3:a6:ca:1a:6b:41:
                    59:b9:3a:21:c6:b4:ff:25:f3:28:44:0f:75:80:ba:
                    e9:68:f4:62:21:35:3d:f5:37:16:f4:e7:1f:c3:76:
                    26:26:89:7e:e8:f7:1e:9b:91:df:46:d5:fa:19:a6:
                    88:ff:97:20:12:2e:32:68:21:6b:38:5f:45:3e:50:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:FE:04:08:95:E9:63:86:B7:19:9A:04:87:46:E2:5F:2E:06:05
            X509v3 Authority Key Identifier:
                keyid:31:AE:80:7A:8F:CE:40:A3:2B:E8:76:ED:77:9D:14:F1:DE:6F:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:48:12:66:3e:02:2c:54:5b:89:f3:b3:0e:5a:76:d1:1c:
         27:d3:bf:04:ee:59:ef:c1:ca:e4:11:78:e3:99:99:8e:6f:42:
         ac:6b:58:f1:42:c1:71:27:ce:f3:8f:af:b1:2a:47:fb:75:63:
         f8:d4:87:80:c5:cf:07:3a:5c:ec:a4:a4:d6:81:0f:e7:ba:29:
         6b:91:3e:96:41:01:60:ff:54:7b:70:a4:de:e7:9b:d6:ae:44:
         70:73:03:1a:67:f9:e9:f7:6c:d4:e9:ec:dd:fe:59:23:b4:b1:
         e5:79:f7:5e:3e:f8:c5:4f:2a:c5:10:39:5c:13:b1:f4:65:ab:
         f6:4c:ec:ed:bd:e8:38:97:22:b2:af:ee:88:c3:c4:8d:87:65:
         ce:8b:cd:a4:4e:5f:17:36:c5:95:26:e1:42:f6:40:87:36:8a:
         f2:4e:03:d6:9f:0c:1c:c9:6c:8e:b5:58:93:46:b2:2d:87:a3:
         bd:00:07:52:33:f8:33:a6:2c:cc:3e:c2:b4:24:41:74:4c:66:
         a6:93:6d:45:26:d0:45:24:8e:8f:ab:88:2a:a5:c6:4d:d2:dc:
         dd:6b:46:bd:d9:a1:5a:d1:cf:36:81:04:77:67:e8:af:98:71:
         39:37:8a:23:8c:0a:ee:31:a5:d2:de:09:37:8f:31:c9:bd:f6:
         45:9d:8e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VEn4XpxWKI6tgXi3Ros2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYWU4MDdhOGZjZTQwYTMyYmU4NzZlZDc3OWQxNGYxZGU2
ZmFkOWEwHhcNMjYwMzI5MTYwMTM1WhcNMjYwMzMwMTYwMTM1WjAzMTEwLwYDVQQD
EyhjODUxZmUwNDA4OTVlOTYzODZiNzE5OWEwNDg3NDZlMjVmMmUwNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oZyH84wSZM2Dyt3inubO7uKBmzK
76AodB0NClF5iDdf4MR4L8umM478MNfRX2WRcRzX+/OwE0XXLqPEdRNPrc2kE/vK
VjsQvQjOqn5AlA9uMabI0aa92qYNNh8VCj5aI9aY941uNezYwOZ8Q3TTpojjRsh3
oZHSikujVWA3/La9x5kTxudgQJty8hzKOrgeAjeEO50QQ63xrgDEiS+YBDMO4z8J
UXKbQ3aBlPnA30b961vPx3rW0TREm2XDpsoaa0FZuTohxrT/JfMoRA91gLrpaPRi
ITU99TcW9Ocfw3YmJol+6Pcem5HfRtX6GaaI/5cgEi4yaCFrOF9FPlDTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhR/gQIleljhrcZmgSHRuJfLgYFMB8GA1UdIwQY
MBaAFDGugHqPzkCjK+h27XedFPHeb62aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWE2QWVvX09RS01yNkhidGQ1MFU4ZDV2clpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGU0YmItMmFlZS00NTNmLWEwZjct
YTQ4NmRjYTgxNjhiLzEvTWE2QWVvX09RS01yNkhidGQ1MFU4ZDV2clpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNGU0YmItMmFlZS00NTNmLWEwZjctYTQ4NmRjYTgxNjhi
LzEvTWE2QWVvX09RS01yNkhidGQ1MFU4ZDV2clpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9BIEmY+
AixUW4nzsw5adtEcJ9O/BO5Z78HK5BF445mZjm9CrGtY8ULBcSfO84+vsSpH+3Vj
+NSHgMXPBzpc7KSk1oEP57opa5E+lkEBYP9Ue3Ck3ueb1q5EcHMDGmf56fds1Ons
3f5ZI7Sx5Xn3Xj74xU8qxRA5XBOx9GWr9kzs7b3oOJcisq/uiMPEjYdlzovNpE5f
FzbFlSbhQvZAhzaK8k4D1p8MHMlsjrVYk0ayLYejvQAHUjP4M6YszD7CtCRBdExm
ppNtRSbQRSSOj6uIKqXGTdLc3WtGvdmhWtHPNoEEd2for5hxOTeKI4wK7jGl0t4J
N48xyb32RZ2Obw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client