Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File:                     dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier:          F+OPOaxV9VqNlCgBVHgI2ZEiZyMX8q4f4ppuESRlb3Q=
Subject key identifier:   8C:AC:C0:2A:43:4A:40:A0:44:E5:D0:8A:80:5B:08:34:BD:AA:D6:F5
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer:       /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial:       019D371B720450DBFDF2A569AF5CDCEB4673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number:          0A91
Signing time:             Sun 29 Mar 2026 01:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:38 +0000
Files and hashes:         1: Y8jEunuQdY8N-Q_wPNBi6EQ1so8.roa (hash: sxWYB45GJ6xUZu2JriMAd6bAc5EngOZoRfXuPOeM0mc=)
                          2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: OBdQ5+VPtaIRJMYL8xCHQ4hiLFr2GA0mB5gekZd7gOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:72:04:50:db:fd:f2:a5:69:af:5c:dc:eb:46:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
        Validity
            Not Before: Mar 29 01:00:38 2026 GMT
            Not After : Mar 30 01:00:38 2026 GMT
        Subject: CN=8cacc02a434a40a044e5d08a805b0834bdaad6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:01:3d:6d:49:85:59:53:7b:fe:4a:1b:85:
                    24:84:cf:41:e8:c3:91:ab:cb:43:37:36:e7:29:b3:
                    2d:9f:45:f7:cd:7e:7a:3c:73:fc:a9:19:11:05:10:
                    8a:61:f1:5d:5c:50:4c:ae:b9:7f:ee:4f:a4:4c:ed:
                    e3:7b:e7:87:da:3c:1b:55:fd:8e:10:1c:4e:24:14:
                    87:2b:6a:3e:2e:47:cb:05:f2:b4:1c:1d:02:bc:44:
                    2a:3e:a3:f6:79:f0:ea:70:3b:75:5e:b4:d3:df:23:
                    64:3e:ac:ee:67:ff:f7:b4:48:59:70:f9:6e:8f:46:
                    f2:b2:da:e5:c9:23:0e:20:81:cf:0a:4a:e5:5f:59:
                    c5:83:15:71:95:7d:5e:f4:c5:a3:aa:ef:8b:7f:25:
                    78:c0:55:8e:1e:bf:ee:7b:5e:4d:48:86:ca:b0:86:
                    2f:94:d1:77:e8:52:4f:72:61:d8:91:a8:28:39:f4:
                    e8:11:05:b6:4c:0d:0b:65:bb:46:a4:93:ce:27:67:
                    01:f7:fb:ab:70:eb:6a:48:9b:f3:2f:21:67:00:92:
                    3b:f2:14:a4:87:6d:10:f0:91:5a:f9:af:d0:0a:59:
                    2b:a7:ea:18:e7:6a:61:8a:3a:b5:c7:b1:43:92:f8:
                    65:63:30:c9:02:e8:71:de:58:a3:a2:ff:35:67:0b:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:C0:2A:43:4A:40:A0:44:E5:D0:8A:80:5B:08:34:BD:AA:D6:F5
            X509v3 Authority Key Identifier:
                keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b4:f7:e3:6a:ba:2e:01:bb:2d:54:1a:57:8c:af:9c:36:30:
         3b:b6:c3:2c:b1:39:5e:04:1e:cc:aa:f8:ea:cd:04:07:da:38:
         20:34:f2:6e:3e:c6:aa:ea:86:10:d1:32:f8:14:e7:cb:2f:1f:
         2e:fe:29:87:4b:1e:6c:3e:aa:fb:32:cc:01:aa:f5:1c:bd:4f:
         b7:56:20:2b:5e:2b:cd:dc:34:45:73:04:07:eb:eb:7a:0a:30:
         f6:e6:4b:54:89:7f:0a:ba:99:bb:ea:ef:6f:d6:cf:9b:8d:4f:
         ba:d4:6a:06:b1:82:b0:3a:cf:75:2d:b2:28:ef:60:61:a3:72:
         fd:a3:b9:ac:9a:30:63:28:45:72:c3:4f:b4:2f:d4:43:32:6c:
         ab:df:9e:a7:e6:e1:56:83:a3:5a:94:42:e1:0c:4e:f3:e5:26:
         4f:c6:20:33:f9:52:8e:9d:f8:59:a0:f6:cb:7d:8e:75:32:85:
         c0:73:1f:5c:21:93:ad:8f:0e:2b:7e:67:14:cb:07:e2:e2:4f:
         67:47:3f:45:c8:d2:d8:97:4a:0b:14:02:80:0b:5b:48:bd:d2:
         2c:26:6d:c3:d7:15:4a:ee:e8:61:aa:cb:48:8a:90:a7:8f:fa:
         66:39:ea:01:30:43:35:b2:da:fc:54:1c:8d:32:48:e2:af:89:
         9c:c4:10:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3IEUNv98qVpr1zc60ZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MGFlZDc3OTk5ZGU3ZDY3ZTlkZjMzZjU1NTkxZGVkZWVi
NjI2YTUwHhcNMjYwMzI5MDEwMDM4WhcNMjYwMzMwMDEwMDM4WjAzMTEwLwYDVQQD
Eyg4Y2FjYzAyYTQzNGE0MGEwNDRlNWQwOGE4MDViMDgzNGJkYWFkNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHABPW1JhVlTe/5KG4UkhM9B6MOR
q8tDNzbnKbMtn0X3zX56PHP8qRkRBRCKYfFdXFBMrrl/7k+kTO3je+eH2jwbVf2O
EBxOJBSHK2o+LkfLBfK0HB0CvEQqPqP2efDqcDt1XrTT3yNkPqzuZ//3tEhZcPlu
j0bystrlySMOIIHPCkrlX1nFgxVxlX1e9MWjqu+LfyV4wFWOHr/ue15NSIbKsIYv
lNF36FJPcmHYkagoOfToEQW2TA0LZbtGpJPOJ2cB9/urcOtqSJvzLyFnAJI78hSk
h20Q8JFa+a/QClkrp+oY52phijq1x7FDkvhlYzDJAuhx3lijov81Zwu/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyswCpDSkCgROXQioBbCDS9qtb1MB8GA1UdIwQY
MBaAFHcK7XeZnefWfp3zP1VZHe3utialMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmIt
ODQyOWJhNzkzMTlmLzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmItODQyOWJhNzkzMTlm
LzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLT342q6
LgG7LVQaV4yvnDYwO7bDLLE5XgQezKr46s0EB9o4IDTybj7GquqGENEy+BTnyy8f
Lv4ph0sebD6q+zLMAar1HL1Pt1YgK14rzdw0RXMEB+vregow9uZLVIl/CrqZu+rv
b9bPm41PutRqBrGCsDrPdS2yKO9gYaNy/aO5rJowYyhFcsNPtC/UQzJsq9+ep+bh
VoOjWpRC4QxO8+UmT8YgM/lSjp34WaD2y32OdTKFwHMfXCGTrY8OK35nFMsH4uJP
Z0c/RcjS2JdKCxQCgAtbSL3SLCZtw9cVSu7oYarLSIqQp4/6ZjnqATBDNbLa/FQc
jTJI4q+JnMQQFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client