Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          xwPUn+KUxhCGtrHe6WNL7ftM4aA3qCU3o/AcIn/FJDE=
Subject key identifier:   E8:E6:7B:5B:56:0D:F1:31:46:F7:7F:53:D0:4A:B8:C7:1D:BC:50:36
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019CF9862708DA8842D0E105D95152CBADFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          139C
Signing time:             Tue 17 Mar 2026 02:00:44 +0000
Manifest this update:     Tue 17 Mar 2026 02:00:44 +0000
Manifest next update:     Wed 18 Mar 2026 02:00:44 +0000
Files and hashes:         1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
                          2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
                          3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
                          4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
                          5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
                          6: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
                          7: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
                          8: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (hash: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA=)
                          9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
                          10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
                          11: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
                          12: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
                          13: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: KNbnzNIsYrpLiNV9Hwj4INdapCrfRKcENBEDJVIHSs8=)
                          14: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
                          15: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:86:27:08:da:88:42:d0:e1:05:d9:51:52:cb:ad:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Mar 17 02:00:44 2026 GMT
            Not After : Mar 18 02:00:44 2026 GMT
        Subject: CN=e8e67b5b560df13146f77f53d04ab8c71dbc5036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:ce:dd:c5:40:56:a8:d6:2a:44:9a:d5:ca:
                    c6:ac:fa:7b:ed:aa:27:4f:8e:64:f2:2f:2a:b8:22:
                    25:1d:2d:96:14:38:e8:cd:90:73:8d:46:4c:34:dd:
                    44:f1:cf:06:31:45:11:14:0c:7d:90:8e:54:a3:4f:
                    2d:85:11:35:ca:8d:49:4b:37:9c:66:ef:02:8a:34:
                    7e:8e:a6:f6:4b:67:a2:6f:72:81:b0:f4:0b:5c:32:
                    6c:d3:5a:b8:cc:52:8c:09:88:47:34:ee:5f:5d:24:
                    b1:9e:08:db:2d:82:85:2e:c4:a1:34:84:a9:27:4a:
                    42:13:e3:93:7b:fa:52:de:ea:09:4c:1e:98:ee:26:
                    1e:7c:b5:b6:8f:1e:be:45:d6:da:ea:78:8e:8a:63:
                    1d:f1:b5:11:0a:ab:f8:ff:8b:10:3a:d4:7d:e7:58:
                    b2:ca:0e:46:88:dc:24:f3:59:5c:e0:3e:59:ad:ab:
                    b1:a1:d6:ee:46:b0:9f:c8:85:38:0b:42:1c:0e:c4:
                    45:49:c4:05:8d:b1:02:f5:be:14:e3:ad:9b:c0:63:
                    4d:eb:25:82:03:04:4a:4e:5a:41:98:ae:93:91:b0:
                    10:d7:6f:58:a9:07:03:99:56:7d:fa:31:4c:18:52:
                    61:32:b6:42:3b:a7:1d:4a:12:51:b9:1d:9b:45:3b:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:7B:5B:56:0D:F1:31:46:F7:7F:53:D0:4A:B8:C7:1D:BC:50:36
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:df:f6:f4:d6:58:5f:b4:eb:ec:df:b7:d5:34:ef:c0:a7:9d:
         aa:a0:4b:7b:80:21:0f:43:23:1d:33:94:2e:60:38:8c:c7:69:
         fc:f4:20:01:95:70:58:a7:2c:95:be:c2:9d:12:04:a4:f3:33:
         5f:4a:13:e1:3b:32:b7:b1:74:9e:13:f5:7e:3b:c9:a7:0f:c5:
         e0:3c:dd:22:df:10:a1:73:04:56:56:14:ae:8f:05:8f:48:ad:
         bd:33:3a:be:af:f5:4a:83:e5:10:58:77:d5:0b:18:d3:aa:b1:
         fe:43:d6:c7:2c:a1:4b:ba:0b:38:35:cb:db:76:59:f5:78:45:
         c2:23:9d:f0:6e:4c:e7:74:42:1c:79:e9:04:7d:f5:93:fb:e8:
         d0:a4:5f:ca:3d:f3:e3:76:11:bd:dd:f7:c5:d4:d5:c0:13:13:
         2f:4b:b5:f9:c6:cd:0e:a6:2e:b7:75:cf:23:88:c7:54:5b:7d:
         c4:9f:80:d0:22:d6:5c:1b:ba:b8:b2:b9:73:98:8f:8e:2f:6b:
         e0:bc:1c:b2:ce:e7:94:78:65:de:ba:60:88:c1:40:a2:97:4e:
         a9:4d:ed:0d:35:73:99:e6:ed:a9:ca:a8:2d:c9:5a:36:af:19:
         cc:b4:e5:3d:91:d5:fd:5c:7d:2d:21:f4:b0:68:fc:80:f3:54:
         a7:44:2a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz5hicI2ohC0OEF2VFSy637MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjYwMzE3MDIwMDQ0WhcNMjYwMzE4MDIwMDQ0WjAzMTEwLwYDVQQD
EyhlOGU2N2I1YjU2MGRmMTMxNDZmNzdmNTNkMDRhYjhjNzFkYmM1MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LbO3cVAVqjWKkSa1crGrPp77aon
T45k8i8quCIlHS2WFDjozZBzjUZMNN1E8c8GMUURFAx9kI5Uo08thRE1yo1JSzec
Zu8CijR+jqb2S2eib3KBsPQLXDJs01q4zFKMCYhHNO5fXSSxngjbLYKFLsShNISp
J0pCE+OTe/pS3uoJTB6Y7iYefLW2jx6+Rdba6niOimMd8bURCqv4/4sQOtR951iy
yg5GiNwk81lc4D5ZrauxodbuRrCfyIU4C0IcDsRFScQFjbEC9b4U462bwGNN6yWC
AwRKTlpBmK6TkbAQ129YqQcDmVZ9+jFMGFJhMrZCO6cdShJRuR2bRTt7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjme1tWDfExRvd/U9BKuMcdvFA2MB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd/29NZY
X7Tr7N+31TTvwKedqqBLe4AhD0MjHTOULmA4jMdp/PQgAZVwWKcslb7CnRIEpPMz
X0oT4Tsyt7F0nhP1fjvJpw/F4DzdIt8QoXMEVlYUro8Fj0itvTM6vq/1SoPlEFh3
1QsY06qx/kPWxyyhS7oLODXL23ZZ9XhFwiOd8G5M53RCHHnpBH31k/vo0KRfyj3z
43YRvd33xdTVwBMTL0u1+cbNDqYut3XPI4jHVFt9xJ+A0CLWXBu6uLK5c5iPji9r
4Lwcss7nlHhl3rpgiMFAopdOqU3tDTVzmebtqcqoLclaNq8ZzLTlPZHV/Vx9LSH0
sGj8gPNUp0Qqbg==
-----END CERTIFICATE-----
Generated at Tue Mar 17 05:49:49 2026 by rpki-client