Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          YsjZ/4hoDxoxIEYKdAvVSjYjA9JOvd1hAWHdoKyNdUc=
Subject key identifier:   08:35:DF:16:B7:D7:DF:B9:30:01:77:86:33:EE:CC:6A:E1:C4:7B:9B
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       019C9EF90D21F628B7757F7FCFF8ED4C9419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          156D
Signing time:             Fri 27 Feb 2026 12:00:47 +0000
Manifest this update:     Fri 27 Feb 2026 12:00:47 +0000
Manifest next update:     Sat 28 Feb 2026 12:00:47 +0000
Files and hashes:         1: KwoH9rX0fG1WK7HpMnqPB23ssB4.roa (hash: sjYd4LRAPn0dfzC2/zot0w98zlOUul3pMhPUiDIGgp8=)
                          2: QE7PLDiHb0x2muKYuWtBYtxL0Ts.roa (hash: YpAKtMU8tI8U8IsGd+RqIJCWCNQwjIwLB/IARRYcudc=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: RuoygSz5CSOb5ZZkwg/vjCYaKl/PPjifpWhZumAi/7E=)
                          4: oi0HFw6JtNN08QaNsA8THU8Vbms.roa (hash: zHlUEhPLG1p2ScID/nk2LlCxjRARDuLVIC4jlOT5y58=)
                          5: sFgFPnQJtYAI4EUbnjw6_T-C6b8.roa (hash: ruPE7+aitW/C9n9h5OlbX5hnSAYFeh1OYL3ysBGOgGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Feb 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9e:f9:0d:21:f6:28:b7:75:7f:7f:cf:f8:ed:4c:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Feb 27 12:00:47 2026 GMT
            Not After : Feb 28 12:00:47 2026 GMT
        Subject: CN=0835df16b7d7dfb93001778633eecc6ae1c47b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:58:2d:8b:7a:d6:36:ec:92:b3:dd:4c:9d:
                    4a:af:9a:1e:b5:e8:e0:03:2f:fc:42:70:03:5e:1b:
                    4d:50:4d:76:ad:7f:0f:87:81:6f:91:d6:a1:85:00:
                    90:7f:36:bc:21:06:34:4e:82:67:b6:58:76:39:b0:
                    1a:32:c8:7c:dd:a7:59:94:63:4b:4d:f5:4e:85:cc:
                    45:55:48:56:3e:57:d6:1c:f5:96:a0:4b:5e:18:4e:
                    17:60:8c:d0:7d:c6:68:92:33:b7:a0:66:41:f0:0d:
                    4f:6a:69:ed:17:a4:e9:7f:5e:35:43:aa:25:21:19:
                    e5:38:cb:bd:27:26:35:18:c7:0d:30:7a:31:55:50:
                    e7:fa:76:35:2e:f5:2c:a4:58:23:51:76:64:e9:fd:
                    18:17:c7:5a:e9:6c:b7:1c:34:31:36:bd:f3:16:8d:
                    ee:4f:9f:98:c6:98:b0:cf:ec:f2:bc:43:71:d8:79:
                    e6:4e:96:31:84:0a:f8:46:d9:8a:01:d0:bd:d7:70:
                    d7:34:b4:3f:ca:4f:cf:52:dc:b4:54:85:ab:37:78:
                    54:ba:0d:ed:28:93:58:ff:d4:e9:e9:7b:64:7d:04:
                    09:64:2e:bd:19:98:30:15:bb:df:34:e1:95:0c:57:
                    4d:c4:7c:95:7b:5b:82:f4:80:ee:78:e6:60:97:c9:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:DF:16:B7:D7:DF:B9:30:01:77:86:33:EE:CC:6A:E1:C4:7B:9B
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:db:e3:3c:5c:13:6c:05:80:15:07:eb:35:76:f1:48:4c:
         3d:9f:d6:8e:df:89:17:2c:f1:6d:8a:b6:a8:3e:41:58:c0:ec:
         b0:88:3f:cd:35:00:36:98:1d:d8:c7:bf:70:81:9a:29:0b:30:
         8e:ba:6e:c9:c7:bc:00:58:07:bf:0d:68:34:66:8d:9b:e8:9e:
         32:3d:fc:20:14:88:75:f1:1f:15:ab:fb:ff:08:93:93:0f:70:
         78:de:b2:d1:24:c8:c2:96:a7:ee:d5:d9:86:ce:75:c1:7b:d0:
         01:61:27:41:dc:c9:ad:72:62:b4:0c:14:f0:ea:f5:77:40:fd:
         88:46:af:be:f1:02:19:38:08:ae:a7:2e:7f:9d:6d:78:2b:9f:
         ed:77:6f:56:c7:d0:a6:e7:5e:8c:f9:35:07:e3:a9:4b:0d:95:
         2f:c9:81:c5:03:06:07:a8:2f:36:8c:30:13:fb:41:ac:9a:19:
         1e:89:10:84:28:f9:47:25:1e:75:ff:df:4a:bb:b1:f0:da:ea:
         77:3d:80:65:c1:b2:f0:64:c7:74:9d:0a:58:c3:ce:59:76:e2:
         ec:a3:28:33:62:33:90:6b:3a:f0:e4:70:83:97:56:21:50:c5:
         ca:48:57:fc:68:0b:2d:6a:ec:f3:44:bc:1c:a0:f6:24:c5:5d:
         2c:86:12:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZye+Q0h9ii3dX9/z/jtTJQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm
YWJiZGYwHhcNMjYwMjI3MTIwMDQ3WhcNMjYwMjI4MTIwMDQ3WjAzMTEwLwYDVQQD
EygwODM1ZGYxNmI3ZDdkZmI5MzAwMTc3ODYzM2VlY2M2YWUxYzQ3YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OJYLYt61jbskrPdTJ1Kr5oetejg
Ay/8QnADXhtNUE12rX8Ph4FvkdahhQCQfza8IQY0ToJntlh2ObAaMsh83adZlGNL
TfVOhcxFVUhWPlfWHPWWoEteGE4XYIzQfcZokjO3oGZB8A1PamntF6Tpf141Q6ol
IRnlOMu9JyY1GMcNMHoxVVDn+nY1LvUspFgjUXZk6f0YF8da6Wy3HDQxNr3zFo3u
T5+Yxpiwz+zyvENx2HnmTpYxhAr4RtmKAdC913DXNLQ/yk/PUty0VIWrN3hUug3t
KJNY/9Tp6XtkfQQJZC69GZgwFbvfNOGVDFdNxHyVe1uC9IDueOZgl8lf1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg13xa319+5MAF3hjPuzGrhxHubMB8GA1UdIwQY
MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt
YzYyM2VkOGYyZjI4LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4
LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAzb4zxc
E2wFgBUH6zV28UhMPZ/Wjt+JFyzxbYq2qD5BWMDssIg/zTUANpgd2Me/cIGaKQsw
jrpuyce8AFgHvw1oNGaNm+ieMj38IBSIdfEfFav7/wiTkw9weN6y0STIwpan7tXZ
hs51wXvQAWEnQdzJrXJitAwU8Or1d0D9iEavvvECGTgIrqcuf51teCuf7XdvVsfQ
pudejPk1B+OpSw2VL8mBxQMGB6gvNowwE/tBrJoZHokQhCj5RyUedf/fSrux8Nrq
dz2AZcGy8GTHdJ0KWMPOWXbi7KMoM2IzkGs68ORwg5dWIVDFykhX/GgLLWrs80S8
HKD2JMVdLIYSCw==
-----END CERTIFICATE-----
Generated at Fri Feb 27 14:26:42 2026 by rpki-client