Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          E+GDoAjL1qiJB1MbncfOgMDkBfEwO4vRHybFtftf0EY=
Subject key identifier:   58:5D:72:7F:3F:6D:14:84:DC:01:F5:72:7C:3B:CA:D8:36:6D:77:F2
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       019CE52377E5F63A68106537F4A087F7336D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          135F
Signing time:             Fri 13 Mar 2026 03:00:32 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:32 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:32 +0000
Files and hashes:         1: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (hash: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM=)
                          2: GVceVduBArktwOU6Mf55EriDNYs.roa (hash: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0=)
                          3: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (hash: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w=)
                          4: TaOkTEEE00uDuFBt0oukno2-oJM.roa (hash: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw=)
                          5: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (hash: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic=)
                          6: iK4oje7PnSRo9xAmtm698XYmzcU.roa (hash: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y=)
                          7: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: OfGkgronbbh8HAhiPFds2/6MQjOH4vV7u1bFIPpZYdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:77:e5:f6:3a:68:10:65:37:f4:a0:87:f7:33:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Mar 13 03:00:32 2026 GMT
            Not After : Mar 14 03:00:32 2026 GMT
        Subject: CN=585d727f3f6d1484dc01f5727c3bcad8366d77f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:5b:4a:93:bb:8b:1c:b0:f1:2a:a4:64:dd:
                    4a:1f:16:d6:96:70:bf:b0:38:6c:69:c8:ea:6b:d8:
                    a8:15:e0:90:b0:be:fd:e8:33:15:b8:f7:4d:8e:3b:
                    5a:26:f1:2a:5f:f7:ec:01:8a:78:69:5d:f3:7e:47:
                    e8:b3:67:37:96:f0:52:cb:41:cf:a0:48:a4:52:76:
                    53:6a:7b:89:3d:ea:65:64:81:5d:42:8f:7e:b7:0e:
                    f5:a6:28:af:3b:25:b8:35:01:8c:b7:24:1d:1d:85:
                    4a:f0:0d:59:11:be:a1:fa:38:78:79:27:42:bb:e0:
                    cf:ee:da:1a:fc:09:49:09:38:db:65:3e:e4:fc:d4:
                    d7:e7:b3:3a:91:ff:b5:90:aa:28:b8:9d:8e:f2:70:
                    d0:84:12:e3:1d:4e:54:71:aa:30:e2:cc:83:95:a4:
                    c1:64:4f:ab:bd:0e:79:be:96:0c:66:2a:30:7b:2a:
                    07:57:c2:ca:cc:75:18:b0:b8:1f:4d:ab:72:a3:17:
                    a3:a4:99:d3:16:a4:68:e8:0a:b1:25:64:ce:54:b7:
                    21:3e:60:85:ff:a4:54:28:a0:02:86:2e:94:59:9c:
                    01:a8:04:bc:31:86:fc:fb:07:be:5c:70:4e:ea:4d:
                    0a:6e:89:a7:f5:d5:e3:43:31:3b:78:2a:f8:9a:c3:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:72:7F:3F:6D:14:84:DC:01:F5:72:7C:3B:CA:D8:36:6D:77:F2
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:ee:f6:37:d2:3a:ca:f2:19:b3:87:a3:63:57:22:98:69:
         72:e8:81:70:bf:e5:9d:4e:e5:2b:43:3a:78:f0:46:2e:f3:18:
         31:4d:51:a8:e0:57:d8:b2:ff:7a:0a:5e:1b:85:04:82:0d:5e:
         60:88:42:5f:d1:79:bb:af:36:53:34:63:6e:a4:10:4d:8b:ac:
         14:c6:0d:6e:aa:e4:b5:1b:f2:a5:30:49:b4:a2:a3:98:c4:b5:
         86:3e:0f:d7:65:57:90:60:b0:4d:33:be:73:0d:51:d9:64:b1:
         e9:81:8d:a5:38:c0:c6:e9:c8:96:77:18:85:1a:ec:be:67:a9:
         da:71:0d:09:3b:b4:ba:a3:55:7f:c5:7f:0a:27:3a:cf:3e:1d:
         fe:3b:ab:49:a1:52:f1:c2:2f:64:c9:c2:68:b7:21:64:c5:09:
         69:9d:d7:e1:d7:97:f6:3b:a3:09:4b:cf:98:1d:b6:08:2d:c6:
         c9:74:8b:35:ef:f7:cb:e4:f8:2f:c7:5a:ad:50:e9:69:09:64:
         01:1b:c9:de:91:6f:2b:94:b0:21:7d:4f:a5:69:e3:c6:ce:3e:
         82:fd:05:5f:a7:c5:cd:79:a9:e7:cb:4d:74:27:99:d9:d7:ce:
         e4:0e:c2:75:90:5a:d5:95:01:df:2f:f5:1d:cc:de:53:07:1d:
         05:df:5e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI3fl9jpoEGU39KCH9zNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj
MDc0ODkwHhcNMjYwMzEzMDMwMDMyWhcNMjYwMzE0MDMwMDMyWjAzMTEwLwYDVQQD
Eyg1ODVkNzI3ZjNmNmQxNDg0ZGMwMWY1NzI3YzNiY2FkODM2NmQ3N2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmFbSpO7ixyw8SqkZN1KHxbWlnC/
sDhsacjqa9ioFeCQsL796DMVuPdNjjtaJvEqX/fsAYp4aV3zfkfos2c3lvBSy0HP
oEikUnZTanuJPeplZIFdQo9+tw71piivOyW4NQGMtyQdHYVK8A1ZEb6h+jh4eSdC
u+DP7toa/AlJCTjbZT7k/NTX57M6kf+1kKoouJ2O8nDQhBLjHU5Ucaow4syDlaTB
ZE+rvQ55vpYMZioweyoHV8LKzHUYsLgfTatyoxejpJnTFqRo6AqxJWTOVLchPmCF
/6RUKKAChi6UWZwBqAS8MYb8+we+XHBO6k0Kbomn9dXjQzE7eCr4msNc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhdcn8/bRSE3AH1cnw7ytg2bXfyMB8GA1UdIwQY
MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt
YTA0NWZmOGUyYWMwLzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw
LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmnu9jfS
OsryGbOHo2NXIphpcuiBcL/lnU7lK0M6ePBGLvMYMU1RqOBX2LL/egpeG4UEgg1e
YIhCX9F5u682UzRjbqQQTYusFMYNbqrktRvypTBJtKKjmMS1hj4P12VXkGCwTTO+
cw1R2WSx6YGNpTjAxunIlncYhRrsvmep2nENCTu0uqNVf8V/Cic6zz4d/jurSaFS
8cIvZMnCaLchZMUJaZ3X4deX9jujCUvPmB22CC3GyXSLNe/3y+T4L8darVDpaQlk
ARvJ3pFvK5SwIX1PpWnjxs4+gv0FX6fFzXmp58tNdCeZ2dfO5A7CdZBa1ZUB3y/1
HczeUwcdBd9ehA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:51 2026 by rpki-client