Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          I1PJpOWvhj3RK6xJvJNnqxpplA1J0X8i+I0EJSbjmbM=
Subject key identifier:   2B:D3:02:0F:51:F5:C0:3D:20:99:2A:80:FD:3C:AE:71:28:5A:79:B3
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       019D861466E3BC741A34108DB1849FA7DA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          099D
Signing time:             Mon 13 Apr 2026 09:02:57 +0000
Manifest this update:     Mon 13 Apr 2026 09:02:57 +0000
Manifest next update:     Tue 14 Apr 2026 09:02:57 +0000
Files and hashes:         1: 3XgDqgOihx3NwrFI4St7L8NvteA.roa (hash: 3mXliACvBMddfp691ki+E37y50uMYory7kU462XAVcM=)
                          2: 9KMoQY1gowbZEM4SdiT6qdPcaoY.roa (hash: 9tjgCLIhVP4gdJ0NRTzxaWLBRQyFzOb16vRDQVUO7SM=)
                          3: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: UI8y6965OC361Dyxn3RaFB0Enc3P34MHMCsIFXjHS/4=)
                          4: _dI7fAYNYvlzR2_TT35e3qHnTEg.roa (hash: fMLP46uHLpOTk8Ws3sC+augdPIpnziReWAy6AORNOyM=)
                          5: kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa (hash: m582BqFcPLn0BgLwQ/eeQutqG8eJoaxvasfexxjqW4E=)
                          6: nfjfWnhtI5wjidgXoFPNKZl2hok.roa (hash: sGiSIEqIVPO8w9D0sKdW1XKoGTvI+ujABJDMM86Yt0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 09:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:86:14:66:e3:bc:74:1a:34:10:8d:b1:84:9f:a7:da:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Apr 13 09:02:57 2026 GMT
            Not After : Apr 14 09:02:57 2026 GMT
        Subject: CN=2bd3020f51f5c03d20992a80fd3cae71285a79b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:cd:26:1d:b3:9b:55:1a:72:cb:47:b1:5e:
                    cd:7f:d1:92:06:9c:f0:df:28:aa:bc:b6:15:86:2c:
                    fd:b7:71:8d:f1:02:f9:b5:71:de:79:72:ad:a1:d4:
                    5e:21:08:5e:92:31:08:f3:93:d9:79:57:e6:41:42:
                    17:b4:96:38:56:19:11:00:0c:19:25:0a:8a:4d:f3:
                    2f:99:56:8d:11:b5:20:11:ae:c5:e0:f5:e1:44:0c:
                    80:81:6d:07:87:b5:de:be:0b:97:cd:16:e2:c0:ab:
                    eb:89:9f:0f:ea:0a:7c:d7:b8:75:34:04:df:1e:bb:
                    9b:18:81:3c:e1:45:04:df:47:43:bd:03:c3:56:84:
                    c9:d8:ee:e5:0b:46:c9:ca:41:2e:90:ba:6e:2b:58:
                    a8:03:37:99:57:b4:85:c2:df:5b:f4:ff:03:71:27:
                    92:c3:b0:70:46:fe:f6:15:06:c0:83:f5:e5:f6:aa:
                    10:31:fe:19:c4:d9:61:6b:d3:7b:90:d7:0b:ba:29:
                    a4:5a:65:d0:19:1a:30:95:ca:99:40:94:fe:61:a7:
                    7a:c3:71:da:7c:81:14:3b:82:d2:4c:32:cc:2f:44:
                    53:2f:4c:8a:3f:33:3c:8f:7e:a3:2d:5f:f7:f8:f0:
                    9e:8d:b8:74:6f:52:78:58:36:bc:12:cd:0f:4d:d9:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:02:0F:51:F5:C0:3D:20:99:2A:80:FD:3C:AE:71:28:5A:79:B3
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:54:26:f9:d1:e9:ee:68:a5:92:37:2d:ca:78:b6:31:2c:48:
         62:11:33:75:72:b2:28:07:b9:d7:dd:a9:49:af:f0:65:36:bd:
         ae:df:a9:95:6e:66:03:4c:d0:ad:fa:ca:3e:89:32:1a:61:17:
         c6:5b:f5:95:ff:85:5b:80:5a:37:16:21:ee:85:b0:c6:8c:50:
         0b:da:9a:38:32:bd:51:fd:06:e2:24:93:2f:a3:2d:9c:3f:b6:
         10:25:9b:9c:25:e8:2c:31:62:e4:47:79:4d:1a:34:15:33:53:
         80:a2:97:07:24:45:af:c8:f1:eb:d4:a2:39:bf:4c:68:74:0b:
         c6:21:59:70:81:7c:56:3c:07:d5:75:e6:bd:3a:65:ef:25:55:
         27:43:3a:59:a3:d8:ad:7f:81:56:a1:06:b3:b8:8c:fe:4b:a1:
         05:8a:cd:90:71:da:a4:e2:6b:ea:7f:51:c2:77:92:d1:88:4c:
         84:0e:bd:31:6a:e0:0c:79:a8:0b:81:08:66:8f:99:67:4b:45:
         e8:f7:8f:a5:fd:a8:d2:d0:e8:0b:da:41:5c:80:db:31:44:38:
         86:fb:d4:22:89:39:6b:db:a8:2c:cc:24:06:56:83:7f:e9:aa:
         5f:06:2e:38:6d:78:4d:e7:52:b4:bd:b8:66:28:0d:44:5c:e5:
         5b:36:30:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2GFGbjvHQaNBCNsYSfp9qbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy
YzI2YmEwHhcNMjYwNDEzMDkwMjU3WhcNMjYwNDE0MDkwMjU3WjAzMTEwLwYDVQQD
EygyYmQzMDIwZjUxZjVjMDNkMjA5OTJhODBmZDNjYWU3MTI4NWE3OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSrNJh2zm1UacstHsV7Nf9GSBpzw
3yiqvLYVhiz9t3GN8QL5tXHeeXKtodReIQhekjEI85PZeVfmQUIXtJY4VhkRAAwZ
JQqKTfMvmVaNEbUgEa7F4PXhRAyAgW0Hh7XevguXzRbiwKvriZ8P6gp817h1NATf
HrubGIE84UUE30dDvQPDVoTJ2O7lC0bJykEukLpuK1ioAzeZV7SFwt9b9P8DcSeS
w7BwRv72FQbAg/Xl9qoQMf4ZxNlha9N7kNcLuimkWmXQGRowlcqZQJT+Yad6w3Ha
fIEUO4LSTDLML0RTL0yKPzM8j36jLV/3+PCejbh0b1J4WDa8Es0PTdlPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvTAg9R9cA9IJkqgP08rnEoWnmzMB8GA1UdIwQY
MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt
MjIwMGIzY2M1N2U2LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2
LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFQm+dHp
7milkjctyni2MSxIYhEzdXKyKAe5192pSa/wZTa9rt+plW5mA0zQrfrKPokyGmEX
xlv1lf+FW4BaNxYh7oWwxoxQC9qaODK9Uf0G4iSTL6MtnD+2ECWbnCXoLDFi5Ed5
TRo0FTNTgKKXByRFr8jx69SiOb9MaHQLxiFZcIF8VjwH1XXmvTpl7yVVJ0M6WaPY
rX+BVqEGs7iM/kuhBYrNkHHapOJr6n9RwneS0YhMhA69MWrgDHmoC4EIZo+ZZ0tF
6PePpf2o0tDoC9pBXIDbMUQ4hvvUIok5a9uoLMwkBlaDf+mqXwYuOG14TedStL24
ZigNRFzlWzYwEw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:57:27 2026 by rpki-client