Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File:                     ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier:          Z+BtVVCQ3jpQ9ntQZJLO8dKzV4aVFBJhHiw39utL3xU=
Subject key identifier:   D7:FD:69:D5:CF:4C:92:81:C3:1E:2D:A8:C1:0B:7D:81:EC:C0:8C:F7
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer:       /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial:       019CF15F76FD6FB6C3933C5DD9DE8FA135C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number:          180D
Signing time:             Sun 15 Mar 2026 12:01:31 +0000
Manifest this update:     Sun 15 Mar 2026 12:01:31 +0000
Manifest next update:     Mon 16 Mar 2026 12:01:31 +0000
Files and hashes:         1: kW4drk2LDPNcQ18FgzKd9iSfVfo.roa (hash: wnwxedVG+s68D4H1gWYhMG2g4d0oAegzbZPXw3fMM7c=)
                          2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: 2GUFsX0Xgf9NBhFFcm+QwMnJl4l2iEIcrRmNqw/VRk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f1:5f:76:fd:6f:b6:c3:93:3c:5d:d9:de:8f:a1:35:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
        Validity
            Not Before: Mar 15 12:01:31 2026 GMT
            Not After : Mar 16 12:01:31 2026 GMT
        Subject: CN=d7fd69d5cf4c9281c31e2da8c10b7d81ecc08cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:98:50:4d:51:6c:37:8f:67:52:5d:1c:6a:
                    d5:ea:7d:e2:8f:a6:3d:11:9e:ca:fc:16:51:70:4e:
                    9b:b5:9a:a7:b0:3b:4e:32:44:cb:f2:b6:38:b7:0c:
                    09:70:c7:9b:8b:e3:15:52:1c:ea:b8:42:fc:4e:82:
                    c7:d0:0b:a5:4e:6e:1d:10:fe:d3:05:e5:d8:29:b6:
                    d2:70:25:a6:b2:fc:11:16:19:22:0f:8e:be:13:e4:
                    7a:a9:67:4a:e6:1b:36:03:3c:09:9a:05:b9:5d:a7:
                    03:0b:80:12:32:e2:be:74:15:cf:ac:15:92:02:31:
                    4d:1d:4a:d3:9f:97:e4:8d:82:1f:b2:c0:0c:f9:f8:
                    31:44:f4:e1:4e:99:49:9b:8b:3f:59:55:9e:7e:6e:
                    6f:41:d3:a3:5a:7a:a8:5a:d3:93:24:db:89:2f:68:
                    21:a0:19:37:f5:00:17:e6:0e:b5:f3:7c:f3:53:96:
                    52:e4:55:99:66:ac:5d:41:32:a7:9f:4a:01:d3:3d:
                    b7:47:28:44:af:40:5e:fa:ea:46:72:3e:2b:2d:10:
                    3c:c4:1b:dd:9f:7d:e4:6f:28:73:c9:4e:63:30:2f:
                    64:74:cb:a4:e1:4a:f8:af:1b:02:38:17:91:06:7d:
                    27:57:ce:9a:79:97:9a:65:76:22:1d:c9:3f:c9:33:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:69:D5:CF:4C:92:81:C3:1E:2D:A8:C1:0B:7D:81:EC:C0:8C:F7
            X509v3 Authority Key Identifier:
                keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:74:dc:27:ae:62:55:e4:88:2d:d3:a1:98:6c:97:0b:9b:
         89:9b:a9:a6:cf:09:f3:bb:5b:42:7a:5d:03:f5:48:16:37:45:
         0c:5c:3d:71:6c:fb:37:6a:30:fe:5c:fb:47:91:64:d4:b2:a8:
         5b:24:82:87:48:e2:ef:3b:5c:ab:20:ea:01:01:f3:e4:52:d7:
         8e:e0:89:4d:b0:92:f8:71:ee:37:56:1c:6d:46:5f:92:09:87:
         ed:0a:79:ff:72:6a:66:25:56:c9:25:44:37:c4:dd:4e:9f:1b:
         68:e2:7c:4e:65:91:01:4d:f5:d3:37:09:08:41:fe:16:86:dd:
         8c:56:8d:e0:6a:3b:52:c8:b2:6c:c8:29:86:cb:6d:30:f5:c3:
         81:ce:d0:7b:9b:99:40:0b:b5:dd:a4:71:46:7e:e8:04:02:07:
         22:84:08:64:b4:b5:f3:85:38:36:de:07:b8:c6:aa:f3:2a:86:
         95:33:31:67:0e:2b:86:38:47:27:50:34:d7:02:fb:29:40:f8:
         f6:d5:ce:8b:e0:9e:46:96:92:02:f1:50:45:e5:67:7b:24:bb:
         32:92:6d:dd:16:b1:ac:b5:34:48:ca:f7:21:bc:19:09:5e:aa:
         7a:21:7d:db:d8:43:52:1a:56:60:a7:a8:60:1a:26:00:43:40:
         e7:f1:cc:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzxX3b9b7bDkzxd2d6PoTXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjFkN2MzYjRlZTg3MjMzMzZhNjU4NTM5YWE3MzQ2ZjIz
ZDY3NzIwHhcNMjYwMzE1MTIwMTMxWhcNMjYwMzE2MTIwMTMxWjAzMTEwLwYDVQQD
EyhkN2ZkNjlkNWNmNGM5MjgxYzMxZTJkYThjMTBiN2Q4MWVjYzA4Y2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslWYUE1RbDePZ1JdHGrV6n3ij6Y9
EZ7K/BZRcE6btZqnsDtOMkTL8rY4twwJcMebi+MVUhzquEL8ToLH0AulTm4dEP7T
BeXYKbbScCWmsvwRFhkiD46+E+R6qWdK5hs2AzwJmgW5XacDC4ASMuK+dBXPrBWS
AjFNHUrTn5fkjYIfssAM+fgxRPThTplJm4s/WVWefm5vQdOjWnqoWtOTJNuJL2gh
oBk39QAX5g6183zzU5ZS5FWZZqxdQTKnn0oB0z23RyhEr0Be+upGcj4rLRA8xBvd
n33kbyhzyU5jMC9kdMuk4Ur4rxsCOBeRBn0nV86aeZeaZXYiHck/yTNb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf9adXPTJKBwx4tqMELfYHswIz3MB8GA1UdIwQY
MBaAFMmx18O07ocjM2plhTmqc0byPWdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgt
MTY0Y2M2YTRlZDFlLzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgtMTY0Y2M2YTRlZDFl
LzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC503Ceu
YlXkiC3ToZhslwubiZupps8J87tbQnpdA/VIFjdFDFw9cWz7N2ow/lz7R5Fk1LKo
WySCh0ji7ztcqyDqAQHz5FLXjuCJTbCS+HHuN1YcbUZfkgmH7Qp5/3JqZiVWySVE
N8TdTp8baOJ8TmWRAU310zcJCEH+FobdjFaN4Go7UsiybMgphsttMPXDgc7Qe5uZ
QAu13aRxRn7oBAIHIoQIZLS184U4Nt4HuMaq8yqGlTMxZw4rhjhHJ1A01wL7KUD4
9tXOi+CeRpaSAvFQReVneyS7MpJt3RaxrLU0SMr3IbwZCV6qeiF929hDUhpWYKeo
YBomAENA5/HMIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 15 20:29:36 2026 by rpki-client