Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File:                     znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier:          I7Oyrx1p6hiXLggzPJhBP6NdE8eMXgvBhAZhTIYwbu4=
Subject key identifier:   6D:72:7D:85:3F:1E:F0:99:98:47:12:7D:98:45:D8:D1:3B:15:E5:32
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer:       /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial:       019CE66D729DECC69D8677E8B6AB1FF286CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number:          0E59
Signing time:             Fri 13 Mar 2026 09:00:58 +0000
Manifest this update:     Fri 13 Mar 2026 09:00:58 +0000
Manifest next update:     Sat 14 Mar 2026 09:00:58 +0000
Files and hashes:         1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
                          2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: FV9eCrpE1pkEALUVFhwZZaINEIjZcSnuwkbbgdFJ3v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:6d:72:9d:ec:c6:9d:86:77:e8:b6:ab:1f:f2:86:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
        Validity
            Not Before: Mar 13 09:00:58 2026 GMT
            Not After : Mar 14 09:00:58 2026 GMT
        Subject: CN=6d727d853f1ef0999847127d9845d8d13b15e532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:a0:93:a8:bf:c0:78:f9:8b:e9:e5:4f:85:
                    66:0c:92:4e:1c:df:9c:5b:1f:a1:08:b7:b2:8a:9f:
                    3a:49:b0:2d:bd:93:d3:72:2a:de:1b:fa:1b:eb:ed:
                    80:86:b1:de:75:91:26:3b:a2:09:7d:37:78:cf:03:
                    a1:42:70:cc:71:dd:f2:7e:62:fb:2e:3f:89:e6:a0:
                    73:af:2b:93:56:7f:10:fe:8e:b1:1b:a3:68:40:65:
                    36:74:5c:2a:18:f1:77:04:31:a8:2d:01:c0:d6:79:
                    e7:05:bd:1a:8b:51:96:1c:82:81:b0:3e:e3:1b:8f:
                    45:5f:ea:32:d8:67:78:a1:14:b3:de:b0:35:df:94:
                    d6:40:7c:83:9c:0e:97:06:41:fe:b0:9b:83:fa:67:
                    d9:54:b1:2c:e8:a0:f9:bc:f7:83:8f:fe:3c:05:c1:
                    b7:ab:53:f9:52:4f:87:7f:50:92:7e:dc:de:76:77:
                    99:ef:1e:fe:de:31:38:c7:76:a1:16:2f:83:21:91:
                    47:dc:0c:40:19:06:e3:0a:e9:c1:08:fe:bc:88:c7:
                    b0:28:6a:05:2e:3b:24:8f:da:aa:34:20:db:e9:40:
                    e4:cc:84:ef:3d:5a:03:72:a8:e1:0a:fd:2a:20:af:
                    db:bb:f8:5e:41:95:aa:76:78:74:77:78:d1:40:42:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:72:7D:85:3F:1E:F0:99:98:47:12:7D:98:45:D8:D1:3B:15:E5:32
            X509v3 Authority Key Identifier:
                keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:cd:3e:5c:87:77:5b:54:2f:e9:56:25:36:b9:14:14:fd:4f:
         dd:48:bb:be:28:a8:c4:a6:01:2b:d7:4b:c1:f5:6a:5f:a6:45:
         ba:e4:f1:2d:cb:fc:7b:fd:7e:0f:d6:09:9b:d4:4a:ff:33:6d:
         f7:c3:42:db:b8:6a:61:fc:69:a3:4d:a2:a6:d4:b4:44:dc:6d:
         b0:de:3a:c8:f7:15:b6:2f:a3:7a:cf:33:2d:af:8e:67:3e:95:
         5f:3f:25:bc:fe:86:3d:83:5c:f0:6c:d8:01:26:55:b5:37:bd:
         0c:54:11:6b:a9:bf:d5:7a:56:0b:7a:f0:4a:1d:50:2d:77:c7:
         ad:ea:7b:5f:a9:48:50:fd:94:42:ac:c6:33:3f:6a:16:4d:54:
         d3:e6:a4:64:19:f5:34:4d:62:1d:b9:84:20:6d:55:ae:00:fa:
         1d:39:10:27:d2:a2:9a:84:bc:5a:ae:d5:48:eb:ac:f4:15:9c:
         fe:c5:8a:04:1c:90:52:b1:2f:88:3e:b3:9a:b1:49:5d:6d:d4:
         68:9c:94:06:92:22:67:6d:15:66:36:f3:01:df:84:a8:b0:33:
         75:f9:f5:31:9a:19:4b:2f:b3:10:aa:8e:37:84:cd:e2:05:89:
         d6:6f:a3:6a:27:b2:6d:2c:1c:86:60:2e:d0:00:23:a7:86:68:
         b5:d4:a6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbXKd7Madhnfotqsf8obMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw
YjI1MWUwHhcNMjYwMzEzMDkwMDU4WhcNMjYwMzE0MDkwMDU4WjAzMTEwLwYDVQQD
Eyg2ZDcyN2Q4NTNmMWVmMDk5OTg0NzEyN2Q5ODQ1ZDhkMTNiMTVlNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8agk6i/wHj5i+nlT4VmDJJOHN+c
Wx+hCLeyip86SbAtvZPTcireG/ob6+2AhrHedZEmO6IJfTd4zwOhQnDMcd3yfmL7
Lj+J5qBzryuTVn8Q/o6xG6NoQGU2dFwqGPF3BDGoLQHA1nnnBb0ai1GWHIKBsD7j
G49FX+oy2Gd4oRSz3rA135TWQHyDnA6XBkH+sJuD+mfZVLEs6KD5vPeDj/48BcG3
q1P5Uk+Hf1CSftzedneZ7x7+3jE4x3ahFi+DIZFH3AxAGQbjCunBCP68iMewKGoF
Ljskj9qqNCDb6UDkzITvPVoDcqjhCv0qIK/bu/heQZWqdnh0d3jRQEKBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1yfYU/HvCZmEcSfZhF2NE7FeUyMB8GA1UdIwQY
MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt
ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz
LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus0+XId3
W1Qv6VYlNrkUFP1P3Ui7viioxKYBK9dLwfVqX6ZFuuTxLcv8e/1+D9YJm9RK/zNt
98NC27hqYfxpo02iptS0RNxtsN46yPcVti+jes8zLa+OZz6VXz8lvP6GPYNc8GzY
ASZVtTe9DFQRa6m/1XpWC3rwSh1QLXfHrep7X6lIUP2UQqzGMz9qFk1U0+akZBn1
NE1iHbmEIG1VrgD6HTkQJ9KimoS8Wq7VSOus9BWc/sWKBByQUrEviD6zmrFJXW3U
aJyUBpIiZ20VZjbzAd+EqLAzdfn1MZoZSy+zEKqON4TN4gWJ1m+jaieybSwchmAu
0AAjp4ZotdSmrg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:26 2026 by rpki-client