Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          C4fgIjOzFH1ACQ8QkDV1cAajLJc36GpWYAzl6KMaSKE=
Subject key identifier:   F9:B0:56:78:1E:8B:D9:D0:F6:83:3C:07:0E:98:8E:06:23:A6:E9:AD
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       019D38D3D64173A29EEAE6BCBE598613A70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0D0C
Signing time:             Sun 29 Mar 2026 09:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:40 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: mhlGl9P92c3mCFAnZULtK2kDyzM1l0n6h2pS+QUI+tQ=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:d6:41:73:a2:9e:ea:e6:bc:be:59:86:13:a7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Mar 29 09:01:40 2026 GMT
            Not After : Mar 30 09:01:40 2026 GMT
        Subject: CN=f9b056781e8bd9d0f6833c070e988e0623a6e9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:7a:da:10:83:28:e8:da:67:de:77:e3:5e:
                    dc:d4:9d:34:16:3b:c1:7d:39:4c:a6:66:7f:da:76:
                    5c:6d:a3:ad:0d:a1:59:2e:20:1a:28:5c:ba:f6:3f:
                    4a:83:44:e4:ec:a2:0b:93:0e:ca:24:fa:73:5f:00:
                    2d:f5:45:a4:9e:7e:93:4b:c7:d9:4c:1e:e0:0c:e1:
                    5c:6a:91:0f:95:76:1a:1c:54:c5:0e:9e:67:10:67:
                    08:6e:f0:a1:0b:9b:91:93:18:49:ac:3e:b6:80:56:
                    33:e3:0b:5f:b2:f5:a0:8d:51:c2:15:ad:60:ca:75:
                    26:8f:13:f7:ba:6c:1a:f5:67:07:7f:73:a2:90:d2:
                    af:08:d0:08:9b:00:7a:39:ed:1a:3d:ba:b5:37:dd:
                    d2:bc:0e:a6:ab:05:6f:37:22:18:f6:e4:8d:ce:0d:
                    87:02:b7:0c:47:b1:97:c2:93:d5:30:9d:43:cd:a2:
                    71:a4:bc:29:78:0f:3e:33:82:0e:df:30:56:a1:af:
                    50:bc:c9:3e:df:5f:c5:ae:94:c9:a1:3e:4c:f1:0b:
                    73:37:74:15:15:e3:99:b5:90:50:12:2e:75:e1:d2:
                    fb:85:98:ab:4e:79:7b:ec:26:3d:4d:8d:dd:eb:ea:
                    47:19:60:24:d2:44:22:da:ce:14:5f:fa:28:74:44:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:56:78:1E:8B:D9:D0:F6:83:3C:07:0E:98:8E:06:23:A6:E9:AD
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:5b:57:eb:54:15:3b:92:04:05:b3:00:cc:05:89:9d:9a:
         76:7c:b6:ea:1b:3f:3a:d1:cf:b7:8d:ef:d8:0b:65:2d:c5:cf:
         83:23:76:be:21:ad:7d:78:87:48:8e:f8:23:5c:d1:93:1e:28:
         17:11:b9:89:0d:4d:5e:68:09:7a:fe:7a:3b:2a:98:af:27:e0:
         00:02:61:e9:10:58:79:6b:1c:b7:bd:59:44:ca:4e:67:b3:6f:
         db:52:5e:8e:cb:40:8f:14:b3:0a:8a:50:b7:3a:5e:f3:ef:df:
         b1:5f:14:27:7d:cf:24:80:87:69:ee:30:ff:eb:47:90:4e:6a:
         98:d2:07:6f:8d:cf:7a:47:cd:d6:3b:4f:6b:f0:a7:19:0f:88:
         0a:8f:84:73:11:05:70:b3:ee:c2:01:03:1e:82:8d:cf:38:5b:
         fb:82:a0:ae:9d:dc:e1:9f:a5:68:d3:e7:5b:ab:8e:76:f8:02:
         d6:55:8c:fd:6b:af:f1:53:c4:fc:57:ee:d0:1f:27:f1:2d:66:
         b6:2e:6d:30:5c:2c:ae:7e:aa:13:fe:fd:f8:a8:59:f0:34:3f:
         36:cb:b9:c6:ff:24:b1:73:43:a7:00:5c:85:62:76:21:68:0a:
         d2:24:41:b5:0c:62:d0:2c:c2:de:14:9a:2a:5a:e7:e3:f7:a1:
         53:ec:12:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409ZBc6Ke6ua8vlmGE6cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1
YjcyZTEwHhcNMjYwMzI5MDkwMTQwWhcNMjYwMzMwMDkwMTQwWjAzMTEwLwYDVQQD
EyhmOWIwNTY3ODFlOGJkOWQwZjY4MzNjMDcwZTk4OGUwNjIzYTZlOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujd62hCDKOjaZ953417c1J00FjvB
fTlMpmZ/2nZcbaOtDaFZLiAaKFy69j9Kg0Tk7KILkw7KJPpzXwAt9UWknn6TS8fZ
TB7gDOFcapEPlXYaHFTFDp5nEGcIbvChC5uRkxhJrD62gFYz4wtfsvWgjVHCFa1g
ynUmjxP3umwa9WcHf3OikNKvCNAImwB6Oe0aPbq1N93SvA6mqwVvNyIY9uSNzg2H
ArcMR7GXwpPVMJ1DzaJxpLwpeA8+M4IO3zBWoa9QvMk+31/FrpTJoT5M8QtzN3QV
FeOZtZBQEi514dL7hZirTnl77CY9TY3d6+pHGWAk0kQi2s4UX/oodEST9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmwVngei9nQ9oM8Bw6YjgYjpumtMB8GA1UdIwQY
MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt
NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl
LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ9bV+tU
FTuSBAWzAMwFiZ2adny26hs/OtHPt43v2AtlLcXPgyN2viGtfXiHSI74I1zRkx4o
FxG5iQ1NXmgJev56OyqYryfgAAJh6RBYeWsct71ZRMpOZ7Nv21JejstAjxSzCopQ
tzpe8+/fsV8UJ33PJICHae4w/+tHkE5qmNIHb43PekfN1jtPa/CnGQ+ICo+EcxEF
cLPuwgEDHoKNzzhb+4Kgrp3c4Z+laNPnW6uOdvgC1lWM/Wuv8VPE/Ffu0B8n8S1m
ti5tMFwsrn6qE/79+KhZ8DQ/Nsu5xv8ksXNDpwBchWJ2IWgK0iRBtQxi0CzC3hSa
Klrn4/ehU+wSzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:20 2026 by rpki-client