Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          wbG+NFTES6tcTWyRLMHJXP/ETAioYV+TrebDKTxLCbw=
Subject key identifier:   62:36:AF:BE:D7:B4:2A:40:5A:EC:87:D3:58:04:21:4A:C7:85:59:9B
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019D378932BA8C3194542243CEFE333CA067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          08E1
Signing time:             Sun 29 Mar 2026 03:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:31 +0000
Files and hashes:         1: 6y5j61yQs9ML87yoag96S0_BhkE.roa (hash: YB0eU7XTjea05VRo6u6VvG8EuWCcMo4Xwog45PL4Uec=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: G2DnTApxoKzIEeJdnLwwtEbDYSp8mUJxS90rK4lTGc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:32:ba:8c:31:94:54:22:43:ce:fe:33:3c:a0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Mar 29 03:00:31 2026 GMT
            Not After : Mar 30 03:00:31 2026 GMT
        Subject: CN=6236afbed7b42a405aec87d35804214ac785599b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:c0:df:a7:4a:a5:51:b5:2d:6d:d7:63:6e:
                    54:11:f6:41:c5:a9:ba:4b:d7:f3:b5:c3:29:6c:da:
                    3d:56:3a:54:6f:ee:f2:90:c8:c7:6e:f6:71:e3:69:
                    1b:4d:1a:e4:95:e9:ce:62:e3:a1:b5:f9:e6:1c:9c:
                    c1:41:9f:a1:85:f6:cc:0f:77:c3:db:15:74:75:7a:
                    97:0d:8b:cf:0d:00:03:e9:fc:74:ee:c7:a7:8a:1c:
                    2e:05:e5:b4:22:1a:aa:ca:4e:22:b9:e2:d2:ae:b6:
                    95:ef:98:df:6b:e5:51:d3:0a:63:23:f5:19:28:f4:
                    7b:db:c2:20:15:60:f4:90:b4:84:67:89:1e:8a:34:
                    50:f7:9b:d5:0e:bb:85:68:93:1b:e3:05:9a:bc:69:
                    7b:b5:5b:44:4c:ca:7c:8e:98:1e:cc:fe:af:2e:b0:
                    4f:ea:2a:f4:ca:ea:55:c6:f7:12:5d:02:4a:5f:26:
                    f9:7c:ac:4c:56:0f:79:f4:f3:05:2b:c5:02:6c:b9:
                    4e:6f:04:5e:10:4a:b7:6d:06:e5:50:ba:03:d8:b4:
                    de:12:c5:f7:2f:bd:dd:cf:9d:c2:94:87:10:21:b4:
                    73:23:55:79:c3:7c:21:08:88:55:d9:9c:e1:17:4a:
                    ec:d4:05:44:9d:d5:5a:f2:ee:31:7c:a6:22:68:0e:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:36:AF:BE:D7:B4:2A:40:5A:EC:87:D3:58:04:21:4A:C7:85:59:9B
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:1a:f8:e5:13:48:c2:29:18:da:a8:fe:05:64:9e:2d:5c:
         90:cd:31:d8:ce:40:07:ba:b3:44:f5:70:bd:a7:fe:9f:b7:d9:
         79:6d:33:d3:a5:ee:a7:20:9c:f7:82:dd:41:cb:3c:0b:4d:a8:
         a0:fa:7c:a6:27:cf:df:13:79:eb:28:ea:fe:9b:11:ac:3d:f6:
         ea:a3:df:f0:c4:ce:01:5f:e6:ba:48:85:18:ae:85:27:df:36:
         55:ee:99:aa:6e:b6:9e:18:3d:f1:13:33:eb:18:e9:47:59:ee:
         3e:2c:61:f7:f0:43:ed:ff:90:ae:33:aa:86:37:c8:c1:e3:0f:
         56:a6:84:08:a1:f7:9d:64:bf:97:a5:9d:b1:59:07:62:f0:92:
         be:20:ee:e3:b8:f5:d0:db:05:b9:3f:ce:db:8a:58:06:fe:b8:
         12:47:3f:d6:c5:dd:b8:94:22:eb:83:62:df:62:0c:c6:8e:3d:
         09:f4:43:1a:c9:c1:89:25:47:0f:17:59:d0:57:f9:d3:66:7c:
         39:bb:a3:a2:b8:de:2e:25:01:e9:17:4b:59:41:ba:91:8c:47:
         50:57:50:9c:c6:e2:2c:06:2b:5b:83:61:fc:0a:f7:cf:97:81:
         26:cf:64:5b:a4:a4:41:37:cb:80:db:67:d1:12:96:b9:13:65:
         35:d9:8e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTK6jDGUVCJDzv4zPKBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMDU0ZmVjMjU1ZDBjZGM2YmEzYWJhOTZhYjI2MDM2NjMy
NzJkYjMwHhcNMjYwMzI5MDMwMDMxWhcNMjYwMzMwMDMwMDMxWjAzMTEwLwYDVQQD
Eyg2MjM2YWZiZWQ3YjQyYTQwNWFlYzg3ZDM1ODA0MjE0YWM3ODU1OTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHA36dKpVG1LW3XY25UEfZBxam6
S9fztcMpbNo9VjpUb+7ykMjHbvZx42kbTRrklenOYuOhtfnmHJzBQZ+hhfbMD3fD
2xV0dXqXDYvPDQAD6fx07senihwuBeW0Ihqqyk4iueLSrraV75jfa+VR0wpjI/UZ
KPR728IgFWD0kLSEZ4keijRQ95vVDruFaJMb4wWavGl7tVtETMp8jpgezP6vLrBP
6ir0yupVxvcSXQJKXyb5fKxMVg959PMFK8UCbLlObwReEEq3bQblULoD2LTeEsX3
L73dz53ClIcQIbRzI1V5w3whCIhV2ZzhF0rs1AVEndVa8u4xfKYiaA7CvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI2r77XtCpAWuyH01gEIUrHhVmbMB8GA1UdIwQY
MBaAFJsFT+wlXQzca6OrqWqyYDZjJy2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzct
ZjgwYTQ4YWQwYTJjLzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzctZjgwYTQ4YWQwYTJj
LzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFMa+OUT
SMIpGNqo/gVkni1ckM0x2M5AB7qzRPVwvaf+n7fZeW0z06XupyCc94LdQcs8C02o
oPp8pifP3xN56yjq/psRrD326qPf8MTOAV/mukiFGK6FJ982Ve6Zqm62nhg98RMz
6xjpR1nuPixh9/BD7f+QrjOqhjfIweMPVqaECKH3nWS/l6WdsVkHYvCSviDu47j1
0NsFuT/O24pYBv64Ekc/1sXduJQi64Ni32IMxo49CfRDGsnBiSVHDxdZ0Ff502Z8
ObujorjeLiUB6RdLWUG6kYxHUFdQnMbiLAYrW4Nh/Ar3z5eBJs9kW6SkQTfLgNtn
0RKWuRNlNdmOtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:25 2026 by rpki-client