Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          IAl3RFxe+YXI4DZswwSHL7vXA7snrw56PRtHeW66bpI=
Subject key identifier:   63:F1:AA:A2:49:7E:FE:CD:40:AB:AD:1B:86:74:A9:7B:43:32:73:C1
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       019CE523838D282AAE80938673D8B613FBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          081A
Signing time:             Fri 13 Mar 2026 03:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:35 +0000
Files and hashes:         1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
                          2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: 64Ma3km+2AkOZnx5uAw0Hw2BKyCjdND6+E/LbDyUhRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:83:8d:28:2a:ae:80:93:86:73:d8:b6:13:fb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Mar 13 03:00:35 2026 GMT
            Not After : Mar 14 03:00:35 2026 GMT
        Subject: CN=63f1aaa2497efecd40abad1b8674a97b433273c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:d1:df:67:b0:3d:a5:d0:b7:24:d5:24:ef:
                    f0:eb:e6:21:76:1b:fb:e6:91:7f:a3:ed:60:62:38:
                    61:98:d4:fd:f4:1f:35:a8:ea:96:19:d3:ec:62:56:
                    65:67:5d:b5:7f:64:18:23:95:53:c1:cb:94:40:98:
                    2d:10:97:78:33:7a:45:31:b6:8f:81:ff:c9:52:d1:
                    c4:8e:e8:13:08:5e:5a:63:b8:6d:27:98:38:8c:25:
                    de:01:23:cc:3f:a7:45:09:a6:f0:da:61:b9:e2:f5:
                    cd:2f:6a:50:c2:b0:ae:e3:a5:07:82:25:4d:ab:a6:
                    bd:90:08:28:01:91:85:04:95:4b:78:85:32:b9:5b:
                    6f:0d:d1:4e:66:52:82:da:2e:34:57:36:6a:5b:92:
                    d9:78:37:e0:a5:7f:29:f2:19:d1:da:37:b8:dd:7c:
                    a8:5a:0c:5d:5f:d3:0e:f7:73:38:94:2b:ae:27:56:
                    9e:c0:85:ae:5a:84:ab:a4:f6:8b:56:fd:36:99:ed:
                    49:2b:5b:eb:cc:bd:d9:17:4e:0b:05:27:1d:fb:39:
                    d9:88:50:e2:ad:eb:b8:91:fd:d0:ee:fb:c3:56:28:
                    b0:09:4f:9f:9b:5b:38:79:58:47:04:0c:66:f7:24:
                    5f:46:4d:7d:35:5d:b4:3b:f9:46:4c:d1:d6:2a:2a:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:AA:A2:49:7E:FE:CD:40:AB:AD:1B:86:74:A9:7B:43:32:73:C1
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:18:eb:0e:3c:af:e0:3a:a7:c1:b5:12:c8:4b:20:84:ae:
         1c:e6:35:8c:b7:b0:18:a0:3d:59:aa:1a:15:b0:0c:18:0f:6a:
         9b:47:a5:20:2a:fb:7c:7b:79:34:57:73:59:da:5a:8f:b9:6d:
         9c:4f:b0:95:90:5a:6f:fb:d9:0c:16:c3:22:05:ba:72:22:9d:
         08:3d:ef:b2:65:fd:0f:41:14:cb:e2:88:15:44:a0:49:78:93:
         c0:a0:3d:ad:56:76:2d:fa:d2:6f:c5:0f:45:41:5b:60:34:08:
         c2:57:f4:33:29:5c:a2:b5:2e:6e:d0:83:b8:0d:a4:29:28:27:
         72:6b:99:ba:03:4b:01:18:be:7f:9c:27:70:47:df:ef:ca:0a:
         52:00:39:0c:af:50:70:fd:b9:b2:ea:cb:5e:9d:e4:27:34:d8:
         33:db:e5:c6:3b:9e:e7:ca:8f:c8:3b:bc:04:49:38:e9:f7:b2:
         14:98:b8:b2:6f:c7:3b:e6:a8:fc:b3:a2:c5:cd:78:b7:c6:65:
         1c:07:f7:a4:f3:f5:a7:b2:6a:8e:80:36:4a:b3:20:c5:7a:7a:
         65:01:d7:84:b8:8e:d6:b7:97:d7:bf:84:21:04:3e:ec:11:47:
         30:12:3d:ce:0a:cd:17:23:30:3a:af:56:98:98:ee:fd:d7:48:
         ec:38:3c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI4ONKCqugJOGc9i2E/viMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3
OWM2ZGEwHhcNMjYwMzEzMDMwMDM1WhcNMjYwMzE0MDMwMDM1WjAzMTEwLwYDVQQD
Eyg2M2YxYWFhMjQ5N2VmZWNkNDBhYmFkMWI4Njc0YTk3YjQzMzI3M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+zR32ewPaXQtyTVJO/w6+Yhdhv7
5pF/o+1gYjhhmNT99B81qOqWGdPsYlZlZ121f2QYI5VTwcuUQJgtEJd4M3pFMbaP
gf/JUtHEjugTCF5aY7htJ5g4jCXeASPMP6dFCabw2mG54vXNL2pQwrCu46UHgiVN
q6a9kAgoAZGFBJVLeIUyuVtvDdFOZlKC2i40VzZqW5LZeDfgpX8p8hnR2je43Xyo
WgxdX9MO93M4lCuuJ1aewIWuWoSrpPaLVv02me1JK1vrzL3ZF04LBScd+znZiFDi
reu4kf3Q7vvDViiwCU+fm1s4eVhHBAxm9yRfRk19NV20O/lGTNHWKirfLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPxqqJJfv7NQKutG4Z0qXtDMnPBMB8GA1UdIwQY
MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt
ZDYwYWE3MzNjZDEwLzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw
LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuMY6w48
r+A6p8G1EshLIISuHOY1jLewGKA9WaoaFbAMGA9qm0elICr7fHt5NFdzWdpaj7lt
nE+wlZBab/vZDBbDIgW6ciKdCD3vsmX9D0EUy+KIFUSgSXiTwKA9rVZ2LfrSb8UP
RUFbYDQIwlf0MylcorUubtCDuA2kKSgncmuZugNLARi+f5wncEff78oKUgA5DK9Q
cP25surLXp3kJzTYM9vlxjue58qPyDu8BEk46feyFJi4sm/HO+ao/LOixc14t8Zl
HAf3pPP1p7JqjoA2SrMgxXp6ZQHXhLiO1reX17+EIQQ+7BFHMBI9zgrNFyMwOq9W
mJju/ddI7Dg80Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:23 2026 by rpki-client