Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File:                     szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier:          6mGCGmQ1Ecsw7+KkIUr9tD1G4sjInyWPy1C3OCb0rMk=
Subject key identifier:   1E:00:56:F7:71:C9:DA:73:1B:D8:70:91:50:AD:B4:6E:48:0E:03:8A
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer:       /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial:       019CE3D9C859EDB08FF4BA47369B70F5D210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number:          1361
Signing time:             Thu 12 Mar 2026 21:00:26 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:26 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:26 +0000
Files and hashes:         1: j8okqCAv-bm5TM6KaEHR7C-_b7I.roa (hash: Zbr8YUxVFxjKVegr6g8BaKH6zOh/4KrcP5xs+WRZJuA=)
                          2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: t6ynM7q6r/x0/DC3OIlJFlimTs8MJz78PQULBI+91Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:c8:59:ed:b0:8f:f4:ba:47:36:9b:70:f5:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
        Validity
            Not Before: Mar 12 21:00:26 2026 GMT
            Not After : Mar 13 21:00:26 2026 GMT
        Subject: CN=1e0056f771c9da731bd8709150adb46e480e038a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:07:f0:3c:a5:95:bd:e0:02:65:c3:39:86:
                    19:38:82:8d:7c:ee:24:38:4a:63:44:ba:c7:1f:20:
                    a9:9a:e0:fa:9c:83:74:b3:97:95:b2:dd:61:7f:fe:
                    8e:68:46:17:54:79:38:7b:98:8b:95:a9:b5:e0:23:
                    19:5e:f8:ff:73:52:c2:df:2a:55:b2:8a:81:ea:11:
                    ca:58:c9:2f:36:5a:d2:aa:2e:b1:63:be:05:39:f7:
                    66:8b:5e:ff:e2:9f:40:01:5c:d1:4b:2e:c2:52:88:
                    44:af:4d:02:df:f1:66:83:62:71:ef:59:2a:b4:ca:
                    77:34:44:28:59:92:fd:0f:33:24:c7:39:10:3c:8a:
                    f9:10:a9:2e:ea:9b:3a:bd:37:b7:32:e7:e1:ab:79:
                    9f:f2:95:60:33:a9:c9:db:02:16:2f:b4:b2:a6:d3:
                    12:1c:8d:5a:fd:09:a0:f9:2c:10:da:2f:6a:7f:62:
                    de:26:19:5a:6e:f1:50:41:ec:f1:26:1a:80:2a:a0:
                    80:2c:cf:88:c3:d4:2f:a2:cd:f7:06:b3:ce:11:36:
                    09:26:b3:53:37:cb:57:3e:4f:82:6c:fa:e9:32:2c:
                    1e:1d:3e:28:73:7c:83:17:6a:12:38:99:e2:8e:09:
                    d2:49:9a:b4:c4:bb:c9:15:22:93:96:41:ea:29:be:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:56:F7:71:C9:DA:73:1B:D8:70:91:50:AD:B4:6E:48:0E:03:8A
            X509v3 Authority Key Identifier:
                keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:85:c3:b9:63:f5:44:93:b3:36:5b:d9:4d:80:8f:c5:8b:b3:
         e5:a9:d0:86:59:81:76:36:97:05:e4:a0:1b:b8:c4:db:eb:b0:
         73:36:95:13:53:8e:29:3c:01:cc:be:92:c2:f7:8c:8e:4f:e2:
         39:9f:6a:23:5c:fc:4f:a7:49:03:02:82:be:3c:fb:4f:18:9a:
         5a:5b:4a:94:42:e1:24:88:ac:3f:62:6f:22:1a:54:97:89:a0:
         0d:d7:de:86:d6:66:66:14:e0:24:8f:b7:ff:d2:91:92:67:59:
         0e:47:55:10:ad:bf:f8:e2:c5:ab:49:47:42:91:5a:1f:2f:ac:
         e5:3c:2b:67:71:91:f7:97:8d:69:9e:d5:a2:b2:aa:1d:5f:f9:
         8b:5e:b9:db:49:65:5c:e5:1a:14:6f:c5:cc:9d:f5:58:4f:18:
         50:e1:ab:f5:1b:9f:8d:f4:db:66:b6:54:07:74:4e:b3:4a:f7:
         1f:a7:05:eb:a2:ae:8b:6c:78:1b:18:94:9c:f0:0b:35:4f:61:
         d6:8b:2d:93:73:6c:d3:37:f3:4f:e1:b4:6a:02:c8:aa:f9:f5:
         56:79:45:39:8d:1a:80:ea:07:dc:a8:3b:7d:86:57:84:09:a2:
         6a:5a:71:85:dc:13:5a:86:53:86:f5:aa:96:14:07:65:4f:47:
         44:29:15:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2chZ7bCP9LpHNptw9dIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzk4YjViMWQ5YTk2ZTQxMTViN2JjZjZmY2E2M2ZiYWY2
MzljYTcwHhcNMjYwMzEyMjEwMDI2WhcNMjYwMzEzMjEwMDI2WjAzMTEwLwYDVQQD
EygxZTAwNTZmNzcxYzlkYTczMWJkODcwOTE1MGFkYjQ2ZTQ4MGUwMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WoH8Dyllb3gAmXDOYYZOIKNfO4k
OEpjRLrHHyCpmuD6nIN0s5eVst1hf/6OaEYXVHk4e5iLlam14CMZXvj/c1LC3ypV
soqB6hHKWMkvNlrSqi6xY74FOfdmi17/4p9AAVzRSy7CUohEr00C3/Fmg2Jx71kq
tMp3NEQoWZL9DzMkxzkQPIr5EKku6ps6vTe3Mufhq3mf8pVgM6nJ2wIWL7SyptMS
HI1a/Qmg+SwQ2i9qf2LeJhlabvFQQezxJhqAKqCALM+Iw9Qvos33BrPOETYJJrNT
N8tXPk+CbPrpMiweHT4oc3yDF2oSOJnijgnSSZq0xLvJFSKTlkHqKb7stwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4AVvdxydpzG9hwkVCttG5IDgOKMB8GA1UdIwQY
MBaAFLM5i1sdmpbkEVt7z2/KY/uvY5ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQt
NzljYzUyYzA2ZDRmLzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQtNzljYzUyYzA2ZDRm
LzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIXDuWP1
RJOzNlvZTYCPxYuz5anQhlmBdjaXBeSgG7jE2+uwczaVE1OOKTwBzL6SwveMjk/i
OZ9qI1z8T6dJAwKCvjz7TxiaWltKlELhJIisP2JvIhpUl4mgDdfehtZmZhTgJI+3
/9KRkmdZDkdVEK2/+OLFq0lHQpFaHy+s5TwrZ3GR95eNaZ7VorKqHV/5i16520ll
XOUaFG/FzJ31WE8YUOGr9RufjfTbZrZUB3ROs0r3H6cF66Kui2x4GxiUnPALNU9h
1ostk3Ns0zfzT+G0agLIqvn1VnlFOY0agOoH3Kg7fYZXhAmialpxhdwTWoZThvWq
lhQHZU9HRCkV+w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:50 2026 by rpki-client