Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          5561XNc/s3EWi72v6CqQwLb9PIrUx3tqf21TUwpeTdQ=
Subject key identifier:   D9:04:97:86:5E:99:8D:F9:21:01:7E:5C:21:A9:55:DA:C3:78:7F:1C
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       019CE3354EEDC22BEF40420B836B5A0CFE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0F45
Signing time:             Thu 12 Mar 2026 18:00:47 +0000
Manifest this update:     Thu 12 Mar 2026 18:00:47 +0000
Manifest next update:     Fri 13 Mar 2026 18:00:47 +0000
Files and hashes:         1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
                          2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: KlRniuibFdBcCedvTTD1SNeQubmgYSQjIZkOiFASu+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:35:4e:ed:c2:2b:ef:40:42:0b:83:6b:5a:0c:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Mar 12 18:00:47 2026 GMT
            Not After : Mar 13 18:00:47 2026 GMT
        Subject: CN=d90497865e998df921017e5c21a955dac3787f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:44:2d:35:67:25:ad:0a:7b:71:9f:56:20:
                    ca:61:66:39:e2:43:b5:34:4c:24:c5:68:dd:0f:4b:
                    d0:35:a3:67:44:26:30:a4:cb:b6:6b:70:0d:0b:49:
                    22:0e:30:3c:29:b1:d6:84:39:63:3c:08:2f:5a:73:
                    98:2b:ee:bf:9a:7b:50:98:dd:9f:51:1d:1f:a1:d0:
                    12:8f:10:bf:ce:6c:3b:e3:ee:aa:55:63:83:f1:bb:
                    4b:f4:7e:c6:a9:57:02:0c:c2:26:09:91:f3:69:1a:
                    4c:28:a0:a2:87:e3:6f:64:40:f6:da:e4:a5:a7:1b:
                    2c:3f:aa:79:0c:15:80:08:c0:28:86:5f:1f:e9:4c:
                    06:5f:76:c9:c9:7e:59:79:9e:a6:b5:a2:e5:54:2e:
                    23:1d:29:62:f4:de:5c:93:e6:f8:e6:2a:77:db:32:
                    b7:c5:9d:a4:2d:c3:ff:eb:a7:03:4b:ed:b0:00:6d:
                    79:d5:3e:bb:17:c5:30:23:75:79:21:e5:d1:be:01:
                    33:76:07:e7:7c:ba:5b:15:fa:44:ff:47:90:ef:1b:
                    f4:a2:1a:ad:31:7a:7f:68:56:18:35:ff:15:c6:96:
                    4d:70:9f:68:fa:ed:e1:48:e3:a0:83:2c:17:3d:67:
                    85:f9:2c:0c:98:97:9f:f5:95:7f:3d:e3:8e:f4:d8:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:04:97:86:5E:99:8D:F9:21:01:7E:5C:21:A9:55:DA:C3:78:7F:1C
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:a3:df:24:69:ed:c9:dc:34:0e:d7:b5:77:6d:1e:61:91:
         85:81:83:1a:ff:30:7d:4e:7c:e3:ea:a7:92:19:75:02:72:c0:
         5f:f0:24:9e:02:6e:77:d1:1f:35:a1:91:00:93:a6:96:e4:61:
         0e:e9:80:e0:80:99:d2:12:e1:0a:3c:2a:04:92:40:6e:68:ce:
         b7:51:54:86:43:92:bb:82:6c:3a:0d:ac:2c:eb:dc:d4:b0:53:
         17:66:f3:2b:9e:4a:05:7d:45:e9:03:cb:ea:70:39:31:6d:24:
         33:01:cf:9e:7d:9c:e1:ba:cf:e2:17:c5:b0:d0:7c:bb:b6:c2:
         80:29:78:5e:3a:df:b7:53:26:22:e4:ca:fb:b6:a8:01:12:83:
         af:a0:d1:87:8f:87:bd:1f:37:00:e2:71:f1:e1:68:3d:f5:d1:
         c2:9d:e5:9a:16:4b:25:08:99:5b:96:64:33:38:b9:1c:79:5f:
         e1:ec:9a:b0:52:45:40:d4:e6:da:69:f0:35:ec:26:49:41:07:
         57:96:44:f8:a2:24:7a:cb:77:32:71:f1:04:f2:a3:39:a5:1f:
         0e:0f:3b:75:4e:6d:28:3d:05:c6:49:c6:4a:49:61:b7:68:59:
         95:f4:f0:75:71:ec:82:48:88:84:06:ff:49:7c:4a:06:1e:01:
         22:31:98:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNU7twivvQEILg2taDP4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk
ODFhYTAwHhcNMjYwMzEyMTgwMDQ3WhcNMjYwMzEzMTgwMDQ3WjAzMTEwLwYDVQQD
EyhkOTA0OTc4NjVlOTk4ZGY5MjEwMTdlNWMyMWE5NTVkYWMzNzg3ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEFELTVnJa0Ke3GfViDKYWY54kO1
NEwkxWjdD0vQNaNnRCYwpMu2a3ANC0kiDjA8KbHWhDljPAgvWnOYK+6/mntQmN2f
UR0fodASjxC/zmw74+6qVWOD8btL9H7GqVcCDMImCZHzaRpMKKCih+NvZED22uSl
pxssP6p5DBWACMAohl8f6UwGX3bJyX5ZeZ6mtaLlVC4jHSli9N5ck+b45ip32zK3
xZ2kLcP/66cDS+2wAG151T67F8UwI3V5IeXRvgEzdgfnfLpbFfpE/0eQ7xv0ohqt
MXp/aFYYNf8VxpZNcJ9o+u3hSOOggywXPWeF+SwMmJef9ZV/PeOO9NhejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkEl4ZemY35IQF+XCGpVdrDeH8cMB8GA1UdIwQY
MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt
NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm
LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8Sj3yRp
7cncNA7XtXdtHmGRhYGDGv8wfU584+qnkhl1AnLAX/AkngJud9EfNaGRAJOmluRh
DumA4ICZ0hLhCjwqBJJAbmjOt1FUhkOSu4JsOg2sLOvc1LBTF2bzK55KBX1F6QPL
6nA5MW0kMwHPnn2c4brP4hfFsNB8u7bCgCl4Xjrft1MmIuTK+7aoARKDr6DRh4+H
vR83AOJx8eFoPfXRwp3lmhZLJQiZW5ZkMzi5HHlf4eyasFJFQNTm2mnwNewmSUEH
V5ZE+KIkest3MnHxBPKjOaUfDg87dU5tKD0FxknGSklht2hZlfTwdXHsgkiIhAb/
SXxKBh4BIjGY2w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:49 2026 by rpki-client