Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
File:                     eyIdrMbD43H18LsnbJ_liMXuX9w.mft (raw, json)
Hash identifier:          8T/QH1i2+GxeRzYqySTRODzVbUjVbJF6ydGTLnzFWzI=
Subject key identifier:   36:81:12:6A:BC:32:73:6D:CF:42:E7:8A:D6:40:3D:00:96:E9:E5:10
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Certificate issuer:       /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial:       019CE4108F2F3010FC359A09DE8D3073F86F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
Manifest number:          14C9
Signing time:             Thu 12 Mar 2026 22:00:16 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:16 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:16 +0000
Files and hashes:         1: ZNrvjotlQOtdpumb5j5SXd-9p7g.roa (hash: ALA2v62Ac1lc1SGvbPyMa55Goz4i4lNfHtEmQgdOtbE=)
                          2: eyIdrMbD43H18LsnbJ_liMXuX9w.crl (hash: H4wgC7u96mENe5Go/dsCPXKPIUx1o0/QuIGdNEqiVAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:8f:2f:30:10:fc:35:9a:09:de:8d:30:73:f8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
        Validity
            Not Before: Mar 12 22:00:16 2026 GMT
            Not After : Mar 13 22:00:16 2026 GMT
        Subject: CN=3681126abc32736dcf42e78ad6403d0096e9e510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:5b:c7:71:29:dd:bf:5b:13:33:3a:d0:85:
                    1e:80:83:d5:e1:6c:6d:30:f0:9a:e2:39:67:91:56:
                    ea:de:cf:2b:0d:31:e7:e2:2b:46:64:f7:23:1b:31:
                    9e:34:cf:2e:0a:2c:ef:53:19:83:bc:c4:48:37:2c:
                    58:4c:1a:4d:fc:ae:d8:fc:1b:5f:8f:6b:96:61:e1:
                    61:e0:6f:c9:0f:65:e4:4f:c5:3c:c6:50:26:d1:7e:
                    6a:b7:a8:d2:fc:a3:58:ea:11:40:0f:7b:72:16:d2:
                    74:9c:8d:00:92:dd:91:c8:e7:e3:d6:f5:3f:ab:df:
                    cf:b9:1c:d7:e1:71:cc:d7:dc:ca:cd:81:f4:dc:a0:
                    3f:7a:ee:03:63:bf:7f:aa:34:3e:c1:0b:a5:a5:44:
                    cd:d4:46:aa:17:40:87:34:3f:a5:cf:28:20:96:66:
                    d8:05:73:08:b4:c6:97:fc:06:71:7c:5e:9e:c7:1a:
                    e8:92:63:2b:1e:a9:40:7e:3f:14:9c:22:ec:75:d2:
                    91:c4:2c:dc:b0:00:99:e9:76:49:63:12:bc:3b:5a:
                    4b:cc:23:44:49:f9:aa:b8:43:4f:b3:f3:6c:89:ef:
                    ca:17:91:5d:ea:c9:3b:55:a4:f9:5d:28:4d:13:d8:
                    6b:c4:38:dd:57:f1:88:78:61:57:37:a3:2e:1c:fb:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:12:6A:BC:32:73:6D:CF:42:E7:8A:D6:40:3D:00:96:E9:E5:10
            X509v3 Authority Key Identifier:
                keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:ea:97:3f:b2:8a:ec:bc:64:cf:49:58:3a:f4:40:23:01:
         ea:1c:c4:f9:bc:10:49:97:df:30:de:ad:a7:52:c2:94:6b:b7:
         3e:12:37:aa:49:90:23:40:d6:9a:ff:ac:e9:3f:9d:9e:38:11:
         10:db:81:f4:43:8f:0d:5e:ce:ae:29:31:ef:07:ab:2b:23:c4:
         09:b0:72:ab:3c:36:83:b6:b3:62:81:da:d0:89:56:64:b6:00:
         6e:7b:dc:ad:62:59:be:0f:7c:d5:6d:a3:d9:dc:71:ec:9d:89:
         0a:49:39:49:a6:80:86:7a:4d:b4:4f:61:22:cb:70:b8:32:fe:
         92:0f:08:98:67:3b:22:23:50:39:b0:bf:de:a8:c8:aa:ba:04:
         78:b7:16:c9:b6:f5:fd:6a:29:48:b3:e9:f1:d0:07:5b:95:23:
         2a:1f:1a:3b:f5:0b:b1:d9:0a:de:87:ef:ff:46:49:e9:ea:d7:
         73:42:b0:b0:57:e2:ca:d1:8c:32:94:a2:73:21:a8:6c:39:5e:
         ed:30:df:6b:82:f7:59:5a:3b:a3:54:74:ef:9a:c4:84:ce:a7:
         2d:52:08:12:c1:1d:b6:e0:93:0b:15:c7:c9:7c:7c:28:db:ba:
         9d:e3:3b:ca:2c:a9:3e:6c:3a:9f:83:b5:45:48:cc:9d:fa:37:
         a2:16:05:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkEI8vMBD8NZoJ3o0wc/hvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjIxZGFjYzZjM2UzNzFmNWYwYmIyNzZjOWZlNTg4YzVl
ZTVmZGMwHhcNMjYwMzEyMjIwMDE2WhcNMjYwMzEzMjIwMDE2WjAzMTEwLwYDVQQD
EygzNjgxMTI2YWJjMzI3MzZkY2Y0MmU3OGFkNjQwM2QwMDk2ZTllNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1txbx3Ep3b9bEzM60IUegIPV4Wxt
MPCa4jlnkVbq3s8rDTHn4itGZPcjGzGeNM8uCizvUxmDvMRINyxYTBpN/K7Y/Btf
j2uWYeFh4G/JD2XkT8U8xlAm0X5qt6jS/KNY6hFAD3tyFtJ0nI0Akt2RyOfj1vU/
q9/PuRzX4XHM19zKzYH03KA/eu4DY79/qjQ+wQulpUTN1EaqF0CHND+lzygglmbY
BXMItMaX/AZxfF6exxrokmMrHqlAfj8UnCLsddKRxCzcsACZ6XZJYxK8O1pLzCNE
SfmquENPs/Nsie/KF5Fd6sk7VaT5XShNE9hrxDjdV/GIeGFXN6MuHPvSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaBEmq8MnNtz0LnitZAPQCW6eUQMB8GA1UdIwQY
MBaAFHsiHazGw+Nx9fC7J2yf5YjF7l/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iMWU2YjAtZjNhMC00ZjVmLWJmMjUt
ODEyZDQ1MjY1MTg2LzEvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iMWU2YjAtZjNhMC00ZjVmLWJmMjUtODEyZDQ1MjY1MTg2
LzEvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCPqlz+y
iuy8ZM9JWDr0QCMB6hzE+bwQSZffMN6tp1LClGu3PhI3qkmQI0DWmv+s6T+dnjgR
ENuB9EOPDV7Orikx7werKyPECbByqzw2g7azYoHa0IlWZLYAbnvcrWJZvg981W2j
2dxx7J2JCkk5SaaAhnpNtE9hIstwuDL+kg8ImGc7IiNQObC/3qjIqroEeLcWybb1
/WopSLPp8dAHW5UjKh8aO/ULsdkK3ofv/0ZJ6erXc0KwsFfiytGMMpSicyGobDle
7TDfa4L3WVo7o1R075rEhM6nLVIIEsEdtuCTCxXHyXx8KNu6neM7yiypPmw6n4O1
RUjMnfo3ohYFlw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:05 2026 by rpki-client