Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          sxwCVXQ/rSUP23wgc5cMkHSEOXJ8dHLdRvZY44QIyWw=
Subject key identifier:   F2:20:3B:65:BB:96:60:34:9C:6C:BE:E2:CE:CE:0B:2B:C8:AC:9C:11
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019CE2FDF1DC409E6948335E5F7C79768930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          09EC
Signing time:             Thu 12 Mar 2026 17:00:19 +0000
Manifest this update:     Thu 12 Mar 2026 17:00:19 +0000
Manifest next update:     Fri 13 Mar 2026 17:00:19 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: k50nWdYOA/aNVKUpd0Fj+0Ek+xCllOczNbY1/XoBczA=)
                          2: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
                          3: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
                          4: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
                          5: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
                          6: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
                          7: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:fd:f1:dc:40:9e:69:48:33:5e:5f:7c:79:76:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Mar 12 17:00:19 2026 GMT
            Not After : Mar 13 17:00:19 2026 GMT
        Subject: CN=f2203b65bb9660349c6cbee2cece0b2bc8ac9c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:14:87:13:14:a6:27:c2:88:43:3c:20:fb:
                    5a:e4:82:41:58:7c:6b:7f:6a:0e:d1:f3:1c:8d:c6:
                    1d:c2:69:18:2f:1e:e0:fa:90:6a:8f:7c:64:9c:82:
                    ea:93:e9:ff:86:76:cf:74:89:fb:4f:1d:e8:00:60:
                    24:88:2b:22:3a:0d:96:3e:e3:a5:7b:8e:7b:11:79:
                    5e:44:49:e7:a0:0d:f9:9a:60:83:13:b4:fc:f4:0f:
                    08:76:49:1a:da:6e:a9:1b:c2:b3:f7:cd:75:4a:19:
                    d8:52:01:d2:e6:ba:b1:aa:2b:27:a3:7e:d7:c0:47:
                    e7:86:ef:f2:81:6c:6b:a8:21:ca:02:6a:34:09:6e:
                    ba:4d:11:dd:bc:f7:7a:f9:eb:d6:4d:bb:7c:76:e4:
                    33:82:dd:b6:c2:dc:a0:26:b7:93:41:5a:76:23:af:
                    8d:37:1b:83:0b:b7:9e:f3:d6:ee:1f:94:d5:23:28:
                    6c:c4:a0:13:12:5f:ee:0c:70:be:e7:c9:a4:b1:a6:
                    de:06:d1:ea:ca:5a:59:c4:bc:85:d0:36:4c:83:0b:
                    5d:d2:5d:0d:bd:cc:93:a9:72:cf:73:20:40:d0:57:
                    10:ec:99:b6:87:2a:e1:09:57:8d:52:b8:7e:6b:8d:
                    6b:1d:ae:17:a2:a8:e9:66:2a:30:e2:93:0d:e3:f2:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:20:3B:65:BB:96:60:34:9C:6C:BE:E2:CE:CE:0B:2B:C8:AC:9C:11
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:60:02:ff:b6:f3:19:fe:c2:e2:f8:c9:5f:2c:82:94:d2:
         5c:44:9b:cf:06:9c:36:a3:ab:96:e2:e1:9d:1d:78:ba:c3:97:
         cb:85:1f:e3:8c:4b:4b:a9:44:98:ba:a3:21:00:83:4d:d9:d7:
         42:e9:0b:bb:4c:4e:33:63:6e:a1:17:b4:6c:2f:6e:be:f6:e9:
         15:42:79:cd:fc:3a:24:60:97:74:c4:9b:e3:fd:74:9e:8e:7b:
         eb:05:4f:6d:10:5b:af:b6:3e:fe:86:d9:e7:c6:e3:8f:72:61:
         cc:69:f8:5f:82:fb:92:95:21:b5:ab:0f:53:8f:12:47:2c:60:
         44:73:2e:01:c6:4e:93:33:4d:34:72:08:02:bf:13:72:99:38:
         b7:da:0d:d2:bb:98:d4:44:e7:c2:2e:fc:47:09:2d:14:3f:c3:
         c8:67:45:ea:d5:e6:24:ca:bf:f3:39:01:5b:c4:fe:f1:f0:41:
         e0:10:ba:ae:4e:64:31:f6:74:45:4a:33:e3:71:c9:9a:ce:8c:
         51:44:7f:c8:f3:42:ef:87:d0:a5:5b:1f:88:f7:1c:ba:13:45:
         a3:6d:14:d8:92:3e:ef:92:59:fb:9e:a5:67:c4:05:14:7d:16:
         4b:e7:91:8e:69:11:6b:1d:8b:29:cc:ce:de:70:e5:e9:13:8a:
         93:fd:30:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/fHcQJ5pSDNeX3x5dokwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjYwMzEyMTcwMDE5WhcNMjYwMzEzMTcwMDE5WjAzMTEwLwYDVQQD
EyhmMjIwM2I2NWJiOTY2MDM0OWM2Y2JlZTJjZWNlMGIyYmM4YWM5YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRoUhxMUpifCiEM8IPta5IJBWHxr
f2oO0fMcjcYdwmkYLx7g+pBqj3xknILqk+n/hnbPdIn7Tx3oAGAkiCsiOg2WPuOl
e457EXleREnnoA35mmCDE7T89A8Idkka2m6pG8Kz9811ShnYUgHS5rqxqisno37X
wEfnhu/ygWxrqCHKAmo0CW66TRHdvPd6+evWTbt8duQzgt22wtygJreTQVp2I6+N
NxuDC7ee89buH5TVIyhsxKATEl/uDHC+58mksabeBtHqylpZxLyF0DZMgwtd0l0N
vcyTqXLPcyBA0FcQ7Jm2hyrhCVeNUrh+a41rHa4XoqjpZiow4pMN4/LpmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIgO2W7lmA0nGy+4s7OCyvIrJwRMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXm5gAv+2
8xn+wuL4yV8sgpTSXESbzwacNqOrluLhnR14usOXy4Uf44xLS6lEmLqjIQCDTdnX
QukLu0xOM2NuoRe0bC9uvvbpFUJ5zfw6JGCXdMSb4/10no576wVPbRBbr7Y+/obZ
58bjj3JhzGn4X4L7kpUhtasPU48SRyxgRHMuAcZOkzNNNHIIAr8Tcpk4t9oN0ruY
1ETnwi78RwktFD/DyGdF6tXmJMq/8zkBW8T+8fBB4BC6rk5kMfZ0RUoz43HJms6M
UUR/yPNC74fQpVsfiPccuhNFo20U2JI+75JZ+56lZ8QFFH0WS+eRjmkRax2LKczO
3nDl6ROKk/0wIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 20:15:43 2026 by rpki-client