Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File:                     TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier:          7voXqRGJMh+0LaVnqlRouLhXCSQH8BLb/U66FWqJ/WM=
Subject key identifier:   66:16:37:7A:94:85:D0:53:89:C3:99:F8:3E:6A:34:4B:52:77:EC:C9
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer:       /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial:       019CF618009CC04DA92485BEECABAA8F4317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number:          186D
Signing time:             Mon 16 Mar 2026 10:01:33 +0000
Manifest this update:     Mon 16 Mar 2026 10:01:33 +0000
Manifest next update:     Tue 17 Mar 2026 10:01:33 +0000
Files and hashes:         1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: RYyZxnvL/3BLZJdZuHu9cjrMyXMrJzvtQKZljCI/D/4=)
                          2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:18:00:9c:c0:4d:a9:24:85:be:ec:ab:aa:8f:43:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
        Validity
            Not Before: Mar 16 10:01:33 2026 GMT
            Not After : Mar 17 10:01:33 2026 GMT
        Subject: CN=6616377a9485d05389c399f83e6a344b5277ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:91:15:82:e0:d6:12:92:17:46:f1:28:3f:
                    e5:e1:c0:f0:9b:4c:bc:a7:cc:df:21:c6:ba:91:0c:
                    86:ef:77:75:9f:70:35:cf:3c:48:e6:29:5e:68:9c:
                    8b:c6:42:4d:f2:9e:c7:3b:fb:bd:15:e1:e3:49:94:
                    da:09:ac:d6:4f:6e:0a:e7:26:13:f0:c7:43:43:cd:
                    39:16:bd:7b:91:f3:96:12:d8:e4:74:77:65:23:84:
                    14:36:29:cd:0a:37:6a:9a:71:46:bc:c2:2b:0f:08:
                    3a:99:e4:44:48:a6:51:55:51:92:df:9c:68:d8:a1:
                    62:f9:b3:bd:77:20:d8:e6:f1:ba:8e:47:db:9f:0b:
                    01:a9:cd:e5:2d:c5:84:e3:d8:ec:ec:b8:b8:13:56:
                    66:7e:01:2d:9f:7a:ef:b1:56:35:ae:f0:91:ad:1a:
                    b4:1c:c2:4f:be:81:96:0f:42:f4:fa:c9:55:3b:98:
                    4b:e3:68:c9:58:d2:da:d3:be:0d:4f:2b:95:a4:47:
                    d7:f5:29:a4:4e:55:56:26:f6:08:42:0b:93:f6:9e:
                    02:b5:ae:17:69:85:a2:7f:79:a3:51:17:59:73:24:
                    c1:2e:81:00:4b:56:29:a5:f2:95:8f:13:b0:8d:0e:
                    71:3e:ea:b3:4a:d9:8f:9a:ef:cc:ac:4b:ee:27:80:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:37:7A:94:85:D0:53:89:C3:99:F8:3E:6A:34:4B:52:77:EC:C9
            X509v3 Authority Key Identifier:
                keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:60:7d:ab:1f:a0:d2:64:59:57:d4:af:8b:bd:f9:0a:56:
         e6:2d:0d:06:5c:9e:d6:f4:eb:31:11:07:d5:bf:52:3c:8a:24:
         fe:2a:99:e7:ba:ee:81:5c:b7:e3:5d:99:2c:e3:5f:c5:f7:f8:
         c0:41:a3:0d:a3:a0:e3:84:14:91:05:81:ec:78:ef:7a:85:64:
         e9:f2:e6:11:19:aa:a6:16:bc:fb:4f:27:3e:db:86:4d:b8:ae:
         55:82:be:e9:e7:21:0d:7b:bb:da:47:e8:fb:1c:8e:68:df:37:
         82:b5:13:e3:00:88:05:3d:a0:e2:b7:03:1a:c5:19:91:03:dd:
         1d:21:e5:b1:83:86:83:ad:04:17:14:00:6e:1e:d4:0e:f6:a1:
         dc:9a:dd:b5:59:e9:59:ea:87:87:a2:eb:8d:ef:5f:7c:a5:1d:
         a0:5a:2d:86:33:a4:c5:8e:af:3d:d5:05:b3:63:aa:96:09:a2:
         aa:2e:c5:b6:4b:16:f0:0b:f2:0a:95:5c:1e:db:23:86:9d:f2:
         50:3f:d1:09:85:2d:f6:97:b3:84:3e:8c:61:48:f4:63:f7:40:
         1d:32:37:ba:4a:72:c1:03:3f:39:18:23:4a:9a:63:de:da:e4:
         52:02:fc:d7:31:44:fe:28:07:7a:f6:d9:32:dd:c1:cb:70:37:
         99:2e:64:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz2GACcwE2pJIW+7Kuqj0MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm
YTE2NmIwHhcNMjYwMzE2MTAwMTMzWhcNMjYwMzE3MTAwMTMzWjAzMTEwLwYDVQQD
Eyg2NjE2Mzc3YTk0ODVkMDUzODljMzk5ZjgzZTZhMzQ0YjUyNzdlY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NuRFYLg1hKSF0bxKD/l4cDwm0y8
p8zfIca6kQyG73d1n3A1zzxI5ileaJyLxkJN8p7HO/u9FeHjSZTaCazWT24K5yYT
8MdDQ805Fr17kfOWEtjkdHdlI4QUNinNCjdqmnFGvMIrDwg6meRESKZRVVGS35xo
2KFi+bO9dyDY5vG6jkfbnwsBqc3lLcWE49js7Li4E1ZmfgEtn3rvsVY1rvCRrRq0
HMJPvoGWD0L0+slVO5hL42jJWNLa074NTyuVpEfX9SmkTlVWJvYIQguT9p4Cta4X
aYWif3mjURdZcyTBLoEAS1YppfKVjxOwjQ5xPuqzStmPmu/MrEvuJ4AUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYWN3qUhdBTicOZ+D5qNEtSd+zJMB8GA1UdIwQY
MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt
YTJmNzI4YmRjMjc1LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1
LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdxgfasf
oNJkWVfUr4u9+QpW5i0NBlye1vTrMREH1b9SPIok/iqZ57rugVy3412ZLONfxff4
wEGjDaOg44QUkQWB7HjveoVk6fLmERmqpha8+08nPtuGTbiuVYK+6echDXu72kfo
+xyOaN83grUT4wCIBT2g4rcDGsUZkQPdHSHlsYOGg60EFxQAbh7UDvah3JrdtVnp
WeqHh6Lrje9ffKUdoFothjOkxY6vPdUFs2Oqlgmiqi7FtksW8AvyCpVcHtsjhp3y
UD/RCYUt9pezhD6MYUj0Y/dAHTI3ukpywQM/ORgjSppj3trkUgL81zFE/igHevbZ
Mt3By3A3mS5kwg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 20:38:43 2026 by rpki-client