Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File:                     aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier:          Oss1D2CRZkdCFYmSc/G4N/k5KJdi8ogfcecY1EQcj2c=
Subject key identifier:   39:6F:68:72:AD:3F:80:A1:C2:BF:FF:DA:D3:52:98:C9:90:AC:96:1D
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       019CE4ECB29B6C8E1B64DA57209E33F617AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number:          155C
Signing time:             Fri 13 Mar 2026 02:00:43 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:43 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:43 +0000
Files and hashes:         1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
                          2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
                          3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
                          4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: Q9HF1EOrAaG4FVRgwuN6MEbPg8gUhQSnkV/zW/0mTfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:b2:9b:6c:8e:1b:64:da:57:20:9e:33:f6:17:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Mar 13 02:00:43 2026 GMT
            Not After : Mar 14 02:00:43 2026 GMT
        Subject: CN=396f6872ad3f80a1c2bfffdad35298c990ac961d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:8c:ea:74:51:e1:e5:44:bd:12:ce:e0:8a:
                    6b:70:f5:d1:43:8f:71:3d:f3:59:90:70:16:c9:3f:
                    5b:a1:7d:eb:94:85:e4:f9:f4:2e:b0:76:47:15:c1:
                    b2:5a:a5:b1:a0:11:76:d0:ef:21:40:86:83:b2:e2:
                    09:5a:b1:bc:0b:ae:70:0a:d0:e3:f6:94:26:0a:34:
                    fd:50:ff:40:62:83:3f:84:50:75:a1:9d:2f:46:89:
                    30:49:de:79:ab:6c:39:3a:66:aa:bc:ea:89:56:24:
                    93:05:e2:43:62:7e:bf:df:d3:7c:31:48:21:6e:2d:
                    55:bd:a1:26:37:80:d5:8b:a9:e4:1b:c2:e7:ef:2f:
                    73:92:c8:73:62:dc:70:28:d6:5b:cd:17:86:b1:9d:
                    3a:f4:65:44:0b:8e:2b:48:89:5d:9a:4a:85:4e:f5:
                    d0:cf:29:57:1f:d9:b3:ca:a4:f8:d1:98:5e:66:db:
                    f8:3a:38:cc:65:34:07:7e:03:f2:cd:65:21:a9:93:
                    5e:e3:70:26:c9:9f:c5:37:6f:14:7f:3c:c7:ae:45:
                    2d:ac:3d:9f:fb:7f:48:0c:77:4b:7c:31:7a:4b:8e:
                    11:0e:c9:ca:89:47:5d:3c:e4:c7:d9:09:15:82:8f:
                    b7:26:cc:ff:71:2b:24:44:38:2f:09:2c:77:1e:85:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:68:72:AD:3F:80:A1:C2:BF:FF:DA:D3:52:98:C9:90:AC:96:1D
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ba:30:98:0c:fa:a1:c9:96:8f:47:08:f0:ad:d5:58:79:ad:
         54:2e:21:15:d4:d8:f6:06:81:d8:f3:f7:2e:a6:7e:23:30:90:
         dc:1f:ce:7c:15:db:20:f7:07:27:1e:c1:84:f5:32:62:8d:b4:
         96:7c:09:23:eb:ad:5a:51:05:7d:7e:58:37:a7:80:81:77:40:
         af:5b:88:3f:40:14:5b:56:b6:01:41:d6:72:c9:ab:64:0f:d1:
         d6:1b:43:a2:ee:cf:b1:c2:ec:b6:97:68:52:cc:3b:e0:f8:8b:
         4b:64:d6:29:e4:08:bb:6d:02:56:62:c3:24:ec:ae:18:63:b4:
         90:f5:de:5c:4c:39:a2:6c:8b:2c:4c:4c:83:35:17:07:fd:a5:
         63:3e:e9:3f:63:da:0b:b2:d6:21:f6:fd:c7:91:62:75:07:78:
         c5:76:59:97:b7:d4:b0:16:3e:5e:12:88:06:eb:7b:1f:58:e0:
         c7:6d:e8:0a:93:f8:ab:79:ed:77:c8:ee:da:0b:ed:59:af:3e:
         8c:4e:f4:a2:b2:6d:1c:27:6f:58:44:e4:00:4b:89:9f:c7:13:
         03:4b:66:10:ab:cb:10:a5:ec:56:bc:aa:c0:c7:08:af:5d:96:
         ed:95:ee:28:75:97:7b:31:f4:62:ed:31:23:8a:3c:75:c9:7a:
         c9:9a:29:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7LKbbI4bZNpXIJ4z9hesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjYwMzEzMDIwMDQzWhcNMjYwMzE0MDIwMDQzWjAzMTEwLwYDVQQD
EygzOTZmNjg3MmFkM2Y4MGExYzJiZmZmZGFkMzUyOThjOTkwYWM5NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaiM6nRR4eVEvRLO4IprcPXRQ49x
PfNZkHAWyT9boX3rlIXk+fQusHZHFcGyWqWxoBF20O8hQIaDsuIJWrG8C65wCtDj
9pQmCjT9UP9AYoM/hFB1oZ0vRokwSd55q2w5OmaqvOqJViSTBeJDYn6/39N8MUgh
bi1VvaEmN4DVi6nkG8Ln7y9zkshzYtxwKNZbzReGsZ069GVEC44rSIldmkqFTvXQ
zylXH9mzyqT40ZheZtv4OjjMZTQHfgPyzWUhqZNe43AmyZ/FN28UfzzHrkUtrD2f
+39IDHdLfDF6S44RDsnKiUddPOTH2QkVgo+3Jsz/cSskRDgvCSx3HoVnQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlvaHKtP4Chwr//2tNSmMmQrJYdMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorowmAz6
ocmWj0cI8K3VWHmtVC4hFdTY9gaB2PP3LqZ+IzCQ3B/OfBXbIPcHJx7BhPUyYo20
lnwJI+utWlEFfX5YN6eAgXdAr1uIP0AUW1a2AUHWcsmrZA/R1htDou7PscLstpdo
Usw74PiLS2TWKeQIu20CVmLDJOyuGGO0kPXeXEw5omyLLExMgzUXB/2lYz7pP2Pa
C7LWIfb9x5FidQd4xXZZl7fUsBY+XhKIBut7H1jgx23oCpP4q3ntd8ju2gvtWa8+
jE70orJtHCdvWETkAEuJn8cTA0tmEKvLEKXsVryqwMcIr12W7ZXuKHWXezH0Yu0x
I4o8dcl6yZopIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 06:07:40 2026 by rpki-client