Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          blaQxnz4RF2l3KT9Khgs1xN8ywVnpL/LNdRXdvTPfC4=
Subject key identifier:   B3:92:29:7E:2B:C9:EE:5B:80:00:29:A5:09:F3:5F:C4:7A:B8:F1:61
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       019CE411375288B9EBACDB41B16F344548E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          186D
Signing time:             Thu 12 Mar 2026 22:00:59 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:59 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:59 +0000
Files and hashes:         1: IwITwGp3B4_pSMBNtVpyOQEaMCE.roa (hash: DL9ccQKNzsDchyhG4KBBhWIj3j9jhXmlBTwSGH+MLOI=)
                          2: aX67thVuhkTa2S1WbEsDaaxyx_U.roa (hash: e6/sW4ioMZgIWgsgRys4jC3T5C0ZPSKh0y+ZX7aZe5E=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: OFy2NV5gEogZGqFpgX4tXAveuZABFpW+XHkCK5ARVNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:11:37:52:88:b9:eb:ac:db:41:b1:6f:34:45:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Mar 12 22:00:59 2026 GMT
            Not After : Mar 13 22:00:59 2026 GMT
        Subject: CN=b392297e2bc9ee5b800029a509f35fc47ab8f161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:9d:f4:0d:a2:56:49:3e:da:a7:13:a0:08:
                    d6:82:9f:6c:38:c6:6c:b3:67:ff:19:06:5d:6c:40:
                    a3:97:f8:97:c7:ac:01:11:dc:5c:f2:2e:dd:b9:43:
                    ea:50:f5:41:00:f5:c4:31:7e:7a:d3:94:e0:d0:21:
                    01:80:fe:11:b6:86:41:bd:e5:db:03:64:fc:aa:55:
                    bb:63:01:6c:c7:57:04:98:c3:9e:e4:d9:c5:fa:d4:
                    48:d8:be:63:1a:35:f4:62:93:0f:20:98:bd:3b:6a:
                    e6:4f:14:9a:10:0d:f4:c0:8d:7d:a7:5a:f6:6e:5c:
                    52:e0:ee:26:6a:91:68:ef:c1:f9:77:fd:07:47:7f:
                    66:d5:21:eb:d9:27:56:25:b9:3c:bc:28:16:13:80:
                    45:05:82:04:94:30:13:22:d7:e7:58:4c:85:70:00:
                    bd:71:26:45:60:91:1f:ab:8b:ff:4f:01:db:93:ac:
                    2a:b6:ad:e7:15:06:ce:a3:e0:d9:9c:df:79:4b:92:
                    1a:96:c5:a7:0e:8d:ec:97:3a:1a:d1:94:b2:81:aa:
                    82:1d:49:a8:2b:27:fb:15:be:cc:39:b6:c1:a5:73:
                    9c:4c:59:0b:83:3d:45:e9:7d:86:a1:da:0c:ec:07:
                    d7:16:1d:e2:15:a6:5a:b6:d4:88:e8:a1:d2:0b:49:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:92:29:7E:2B:C9:EE:5B:80:00:29:A5:09:F3:5F:C4:7A:B8:F1:61
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:e9:73:fb:20:45:0d:1b:65:93:b2:18:c0:3c:00:ad:38:
         ea:47:74:db:39:29:54:d3:cc:0f:46:41:e3:72:62:7f:fd:15:
         dc:40:8e:c2:3b:6e:64:3b:f6:0b:3f:cb:f0:c4:3c:1f:25:e2:
         3f:94:81:d0:a5:09:9f:ed:3a:6b:54:ab:6c:dd:94:d8:4a:e0:
         9b:53:6a:9a:f3:b4:d0:e7:a2:d6:2f:10:c7:c2:79:d5:8c:a0:
         77:09:32:93:49:1c:93:78:1e:5e:5b:2e:e0:e8:9d:bc:44:83:
         82:e2:74:51:68:22:02:55:ae:fb:1b:7a:70:5a:df:37:17:1d:
         17:c4:b4:64:d4:f0:2c:43:88:2d:21:d0:4a:44:38:0d:40:d1:
         19:01:96:a2:44:5c:69:bd:2d:63:b3:23:4c:4b:c6:51:45:16:
         2c:c0:72:ef:5d:c7:42:73:94:56:60:41:f1:d8:b3:d5:cd:d6:
         e3:9d:9c:bc:53:db:dd:06:20:ef:8c:2f:38:95:90:bc:bd:4b:
         26:12:0a:5c:50:db:31:ae:7a:67:5a:fc:f9:45:cf:4d:f4:e5:
         de:35:b6:c6:9b:fa:e0:8e:73:a4:cf:cb:32:6c:20:87:08:96:
         c6:06:aa:9b:56:22:fb:d5:35:2a:ca:be:65:1e:33:95:62:22:
         fa:eb:63:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkETdSiLnrrNtBsW80RUjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjYwMzEyMjIwMDU5WhcNMjYwMzEzMjIwMDU5WjAzMTEwLwYDVQQD
EyhiMzkyMjk3ZTJiYzllZTViODAwMDI5YTUwOWYzNWZjNDdhYjhmMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JSd9A2iVkk+2qcToAjWgp9sOMZs
s2f/GQZdbECjl/iXx6wBEdxc8i7duUPqUPVBAPXEMX5605Tg0CEBgP4RtoZBveXb
A2T8qlW7YwFsx1cEmMOe5NnF+tRI2L5jGjX0YpMPIJi9O2rmTxSaEA30wI19p1r2
blxS4O4mapFo78H5d/0HR39m1SHr2SdWJbk8vCgWE4BFBYIElDATItfnWEyFcAC9
cSZFYJEfq4v/TwHbk6wqtq3nFQbOo+DZnN95S5IalsWnDo3slzoa0ZSygaqCHUmo
Kyf7Fb7MObbBpXOcTFkLgz1F6X2GodoM7AfXFh3iFaZattSI6KHSC0lfKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOSKX4rye5bgAAppQnzX8R6uPFhMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKDpc/sg
RQ0bZZOyGMA8AK046kd02zkpVNPMD0ZB43Jif/0V3ECOwjtuZDv2Cz/L8MQ8HyXi
P5SB0KUJn+06a1SrbN2U2Ergm1NqmvO00Oei1i8Qx8J51Yygdwkyk0kck3geXlsu
4OidvESDguJ0UWgiAlWu+xt6cFrfNxcdF8S0ZNTwLEOILSHQSkQ4DUDRGQGWokRc
ab0tY7MjTEvGUUUWLMBy713HQnOUVmBB8diz1c3W452cvFPb3QYg74wvOJWQvL1L
JhIKXFDbMa56Z1r8+UXPTfTl3jW2xpv64I5zpM/LMmwghwiWxgaqm1Yi+9U1Ksq+
ZR4zlWIi+utjsA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:31:22 2026 by rpki-client