Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          bBSfK4FEcxfs2biQoK0YQvVBILvbSqnqN/oyl+Rbo1U=
Subject key identifier:   63:35:43:22:3C:94:2B:98:5B:8D:D3:2E:13:98:21:5F:28:90:F3:E7
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019CE6A3EAF368B20CA0D682C8AEBF6DBE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          12C3
Signing time:             Fri 13 Mar 2026 10:00:27 +0000
Manifest this update:     Fri 13 Mar 2026 10:00:27 +0000
Manifest next update:     Sat 14 Mar 2026 10:00:27 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: GTRBtx5wlyKvARQyIJmMd5OwG03Fsw0+dg7i3wMBM1A=)
                          2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
                          3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
                          4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
                          5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:a3:ea:f3:68:b2:0c:a0:d6:82:c8:ae:bf:6d:be:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Mar 13 10:00:27 2026 GMT
            Not After : Mar 14 10:00:27 2026 GMT
        Subject: CN=633543223c942b985b8dd32e1398215f2890f3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:f1:50:72:33:67:bf:75:31:46:69:b8:93:
                    b3:bc:14:19:ee:7c:ab:de:6c:fc:10:05:23:40:ec:
                    f5:ff:a1:1b:29:39:08:92:13:c3:ee:f6:7d:3c:cf:
                    7a:70:55:e5:b4:22:97:2a:74:e4:e9:7a:0d:2d:7e:
                    57:b0:97:89:ab:f8:7e:59:20:a3:4d:5b:19:1a:f6:
                    a2:f0:48:8b:dc:80:05:41:f0:b8:07:51:cb:ca:15:
                    db:80:58:1b:5e:b5:b5:d3:2c:8c:50:1b:45:3c:40:
                    c7:e9:40:83:f6:67:b8:8c:d8:0e:f9:b0:44:54:af:
                    65:d3:24:8e:10:cc:53:e5:fd:71:bc:b2:37:cd:4e:
                    b4:51:46:56:01:d0:29:b4:34:bf:8a:76:0f:12:ed:
                    d6:82:ea:10:aa:bb:3e:1a:90:a0:84:34:34:13:ca:
                    0c:15:de:0b:1c:10:38:05:65:b9:93:c5:fb:ce:31:
                    7f:b7:a9:6f:e3:74:8e:3e:7a:34:4a:aa:a7:d4:ca:
                    33:7b:6d:74:a5:58:1b:24:df:a5:cf:98:74:7b:b2:
                    d7:8f:48:a9:f6:20:f8:bb:70:60:37:18:20:d3:da:
                    07:09:80:99:97:71:8e:ac:7b:e3:a4:46:e8:94:33:
                    c6:06:14:f1:51:4c:0c:e4:b7:fc:48:2d:cc:c7:23:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:43:22:3C:94:2B:98:5B:8D:D3:2E:13:98:21:5F:28:90:F3:E7
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:ba:db:3e:26:81:bb:27:50:45:a6:cb:4c:88:5d:cb:ee:
         dd:b0:af:8f:a0:cf:c8:ed:92:45:21:76:f7:10:da:e2:13:e8:
         76:45:56:07:d1:f9:77:b5:36:ec:d2:ac:93:90:4b:48:85:7e:
         8c:f2:8d:7b:55:4a:bf:f6:4e:f7:b6:8f:f7:3c:c4:ea:28:3f:
         87:2f:07:1a:03:a6:9e:44:17:51:a1:1b:c1:fe:50:06:fb:bf:
         27:7f:05:ff:ed:fb:be:11:39:57:c4:66:df:88:d6:22:7c:18:
         e0:39:9b:3e:a2:6e:e9:66:bd:4e:6d:c4:3f:9c:34:48:21:fa:
         ad:19:41:9b:de:3a:97:72:a0:80:db:03:40:09:c1:e0:7d:92:
         c4:5b:ef:e0:3e:8b:12:83:af:d9:7b:92:41:47:58:6b:af:de:
         8d:20:68:f6:bf:c4:0e:b7:76:ac:e7:aa:d1:a4:7b:7b:13:f9:
         a3:e4:6f:18:c3:2a:c1:eb:32:46:df:5f:f8:df:f4:cb:15:ce:
         6a:d3:5a:d7:7f:ae:83:2a:d0:f4:7a:bf:49:81:e5:6e:ef:fa:
         d5:41:7b:07:d8:6f:c8:b1:ab:1e:45:f6:5f:1f:b2:b4:f8:c8:
         96:f0:14:fc:08:0f:49:10:d0:18:42:61:f6:68:f7:38:dc:76:
         16:db:68:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmo+rzaLIMoNaCyK6/bb45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2E2MzNlZjJjMDgyNTFhNTg2MDM1NjJlNTZhYTZlZmE5
M2VjMjUwHhcNMjYwMzEzMTAwMDI3WhcNMjYwMzE0MTAwMDI3WjAzMTEwLwYDVQQD
Eyg2MzM1NDMyMjNjOTQyYjk4NWI4ZGQzMmUxMzk4MjE1ZjI4OTBmM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlbxUHIzZ791MUZpuJOzvBQZ7nyr
3mz8EAUjQOz1/6EbKTkIkhPD7vZ9PM96cFXltCKXKnTk6XoNLX5XsJeJq/h+WSCj
TVsZGvai8EiL3IAFQfC4B1HLyhXbgFgbXrW10yyMUBtFPEDH6UCD9me4jNgO+bBE
VK9l0ySOEMxT5f1xvLI3zU60UUZWAdAptDS/inYPEu3WguoQqrs+GpCghDQ0E8oM
Fd4LHBA4BWW5k8X7zjF/t6lv43SOPno0Sqqn1Moze210pVgbJN+lz5h0e7LXj0ip
9iD4u3BgNxgg09oHCYCZl3GOrHvjpEbolDPGBhTxUUwM5Lf8SC3MxyOj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM1QyI8lCuYW43TLhOYIV8okPPnMB8GA1UdIwQY
MBaAFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUt
ZjdjMmMyYTkxYmMyLzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUtZjdjMmMyYTkxYmMy
LzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqC62z4m
gbsnUEWmy0yIXcvu3bCvj6DPyO2SRSF29xDa4hPodkVWB9H5d7U27NKsk5BLSIV+
jPKNe1VKv/ZO97aP9zzE6ig/hy8HGgOmnkQXUaEbwf5QBvu/J38F/+37vhE5V8Rm
34jWInwY4DmbPqJu6Wa9Tm3EP5w0SCH6rRlBm946l3KggNsDQAnB4H2SxFvv4D6L
EoOv2XuSQUdYa6/ejSBo9r/EDrd2rOeq0aR7exP5o+RvGMMqwesyRt9f+N/0yxXO
atNa13+ugyrQ9Hq/SYHlbu/61UF7B9hvyLGrHkX2Xx+ytPjIlvAU/AgPSRDQGEJh
9mj3ONx2Ftto9g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:13 2026 by rpki-client