Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          M+OKkBYpaWyQH4yGHAD5q0pjWnnZGzmZejdtRgah74M=
Subject key identifier:   80:92:92:41:1F:A6:31:A9:21:BD:5F:6F:38:D3:FC:F6:DD:D0:84:E5
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       019CF384094D5B329837DB0D5D6BD9C22C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          0EFA
Signing time:             Sun 15 Mar 2026 22:00:42 +0000
Manifest this update:     Sun 15 Mar 2026 22:00:42 +0000
Manifest next update:     Mon 16 Mar 2026 22:00:42 +0000
Files and hashes:         1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
                          2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=)
                          3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
                          4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
                          5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: guyBsVOl9RhXqRna0ujYIkqjri5ArS4FbAE/RSPRqeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:84:09:4d:5b:32:98:37:db:0d:5d:6b:d9:c2:2c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Mar 15 22:00:42 2026 GMT
            Not After : Mar 16 22:00:42 2026 GMT
        Subject: CN=809292411fa631a921bd5f6f38d3fcf6ddd084e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:06:63:18:0f:1f:05:06:21:6e:a4:c5:4d:
                    bf:12:76:a1:01:e4:c7:00:6c:ef:f3:a9:3f:c0:b0:
                    f3:b1:ff:62:58:7a:c4:ce:80:2b:f3:1e:9b:d4:5c:
                    ad:21:de:00:c9:fd:49:b0:8d:d3:c5:92:39:2a:79:
                    3b:76:44:90:f3:cd:38:fd:f4:bd:98:64:cd:7d:00:
                    70:a1:3b:9f:60:a9:3c:a5:33:85:65:36:17:c1:1f:
                    dd:0b:65:43:0e:97:52:cc:be:15:e4:00:ea:24:03:
                    93:76:3c:8a:20:5d:f8:41:7c:08:58:84:e2:dc:36:
                    8b:fa:03:51:88:8d:46:92:78:54:76:f7:b7:df:28:
                    35:da:76:ae:f4:4c:28:77:8c:45:e8:ba:05:84:82:
                    c7:6c:d2:20:f7:fa:27:1c:9e:f2:f7:fc:f8:1e:81:
                    c3:f3:e4:6d:b1:2e:77:21:1c:a4:b3:94:0c:26:1e:
                    b6:71:2a:11:46:11:4c:a3:f9:db:27:60:f3:67:ab:
                    b5:1f:33:a4:b6:f1:43:7c:66:ab:60:97:8d:c6:16:
                    37:70:98:0d:6b:07:61:8f:dd:6b:47:49:ed:e3:53:
                    9e:fd:32:04:6c:af:9e:e0:2a:e7:62:f5:14:43:3a:
                    0b:14:6b:67:5c:ad:31:d0:b8:a2:39:35:26:26:92:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:92:41:1F:A6:31:A9:21:BD:5F:6F:38:D3:FC:F6:DD:D0:84:E5
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:55:3c:7f:9b:bd:c5:8e:4f:83:da:23:a9:50:17:62:7f:
         c6:ce:d6:31:b0:25:a3:d1:4a:c5:4a:94:78:15:b4:fb:7d:e6:
         41:93:ff:71:de:41:18:ae:1c:56:8c:41:43:66:b3:a8:1d:a5:
         46:cc:92:4d:e2:45:5d:21:34:ee:08:ff:c8:04:e0:d7:04:b4:
         6e:31:98:af:4d:b5:4d:5c:3a:99:eb:af:10:98:80:b0:74:35:
         f7:30:d1:9f:64:35:be:e3:6d:cf:b9:07:40:f1:bc:3a:a5:21:
         57:b6:68:c2:67:e0:b3:0f:38:77:da:5f:19:55:48:d6:06:57:
         ea:e9:1c:ec:2d:c1:4d:04:54:2b:7e:80:8a:54:74:0e:e2:0b:
         44:bd:c6:8b:db:da:47:d1:b3:29:bb:0a:42:0e:a1:19:18:fb:
         47:14:46:4e:ac:1d:97:5f:c4:49:16:93:62:4c:a3:d2:cd:80:
         93:02:e2:cb:e7:ac:4f:fc:4f:c4:83:9b:c2:ff:b1:42:a9:3f:
         a1:81:c2:54:d4:e9:b6:1c:6b:3a:06:25:77:bc:0a:58:3a:87:
         56:ef:b9:3b:83:93:cb:8e:78:46:89:8c:81:df:71:6b:79:08:
         0c:04:94:f6:4d:29:12:5e:f5:28:1b:90:a3:73:b0:e2:ad:53:
         3c:a1:36:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzhAlNWzKYN9sNXWvZwiyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjYwMzE1MjIwMDQyWhcNMjYwMzE2MjIwMDQyWjAzMTEwLwYDVQQD
Eyg4MDkyOTI0MTFmYTYzMWE5MjFiZDVmNmYzOGQzZmNmNmRkZDA4NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6QGYxgPHwUGIW6kxU2/EnahAeTH
AGzv86k/wLDzsf9iWHrEzoAr8x6b1FytId4Ayf1JsI3TxZI5Knk7dkSQ8804/fS9
mGTNfQBwoTufYKk8pTOFZTYXwR/dC2VDDpdSzL4V5ADqJAOTdjyKIF34QXwIWITi
3DaL+gNRiI1GknhUdve33yg12nau9Ewod4xF6LoFhILHbNIg9/onHJ7y9/z4HoHD
8+RtsS53IRyks5QMJh62cSoRRhFMo/nbJ2DzZ6u1HzOktvFDfGarYJeNxhY3cJgN
awdhj91rR0nt41Oe/TIEbK+e4CrnYvUUQzoLFGtnXK0x0LiiOTUmJpK7fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICSkkEfpjGpIb1fbzjT/Pbd0ITlMB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtJVPH+b
vcWOT4PaI6lQF2J/xs7WMbAlo9FKxUqUeBW0+33mQZP/cd5BGK4cVoxBQ2azqB2l
RsySTeJFXSE07gj/yATg1wS0bjGYr021TVw6meuvEJiAsHQ19zDRn2Q1vuNtz7kH
QPG8OqUhV7Zowmfgsw84d9pfGVVI1gZX6ukc7C3BTQRUK36AilR0DuILRL3Gi9va
R9GzKbsKQg6hGRj7RxRGTqwdl1/ESRaTYkyj0s2AkwLiy+esT/xPxIObwv+xQqk/
oYHCVNTpthxrOgYld7wKWDqHVu+5O4OTy454RomMgd9xa3kIDASU9k0pEl71KBuQ
o3Ow4q1TPKE2Eg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:21:36 2026 by rpki-client