Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          S+IuCkyYlDnEZGwQZxkiHiaeKoteF2Tnhsu9yb3MAR8=
Subject key identifier:   7D:4B:17:05:0F:64:69:B1:E4:84:72:D7:18:7A:E6:9A:6A:85:F8:3E
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       019CE7ED9E661F2EAD75CFD2A346405EF1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          118F
Signing time:             Fri 13 Mar 2026 16:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 16:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 16:00:35 +0000
Files and hashes:         1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: YXAYaJFSGcRLMDPMx8NfIBy87fu31EWYoCY0QbYvWK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:ed:9e:66:1f:2e:ad:75:cf:d2:a3:46:40:5e:f1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Mar 13 16:00:35 2026 GMT
            Not After : Mar 14 16:00:35 2026 GMT
        Subject: CN=7d4b17050f6469b1e48472d7187ae69a6a85f83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:e8:6a:da:56:2a:af:2d:78:1a:99:5a:21:
                    89:43:d9:8b:71:17:a4:80:30:af:2a:0e:25:d1:98:
                    ed:39:dc:bf:06:a3:d4:c6:7d:00:71:90:dc:51:44:
                    c4:b8:02:a3:4e:bf:d0:25:16:2d:6c:c8:9e:2f:f4:
                    97:7f:37:b3:58:97:9d:37:68:fb:16:78:93:e4:36:
                    ab:9f:63:ed:70:ec:46:87:ff:72:ce:a6:b0:e0:a3:
                    85:09:47:8b:ff:dc:60:38:77:d8:97:35:bf:b4:56:
                    7e:51:3e:6d:e4:ca:29:ae:3b:3c:45:7c:ab:e7:91:
                    c1:a9:3e:34:7b:ac:b1:38:4c:77:51:49:fb:df:40:
                    40:63:e2:1b:de:ad:a3:d2:46:6c:04:25:23:ee:88:
                    6c:73:13:38:5b:95:ad:cb:7d:cd:b9:d7:bb:4f:be:
                    05:90:59:e1:31:30:82:ba:d2:8b:d5:e1:9c:ca:a8:
                    0e:35:74:84:60:ce:f6:69:d5:54:91:a6:11:48:12:
                    91:dd:86:ac:54:2c:d2:17:18:c8:9c:3f:c7:cb:0b:
                    f2:01:cb:31:9e:d6:c3:ec:8c:c2:71:19:99:f3:fd:
                    25:a5:20:fa:33:cd:1a:89:41:2f:b8:99:39:98:c4:
                    be:e6:88:4b:93:dd:8f:df:3e:0e:e5:74:1b:e3:18:
                    20:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4B:17:05:0F:64:69:B1:E4:84:72:D7:18:7A:E6:9A:6A:85:F8:3E
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:c3:8e:e9:4f:a3:e2:f3:a3:4f:4f:9e:d0:a2:9a:ff:ef:
         67:dd:98:c0:29:80:db:89:80:3a:b5:d1:3c:7a:d7:8d:bc:7f:
         bf:ea:d8:21:ab:fd:ce:5f:04:38:d7:db:89:8f:91:3a:7f:7f:
         ac:ff:0d:87:65:d1:37:ac:7c:c6:77:a1:77:b3:0b:1e:33:07:
         26:98:bc:fe:64:a6:a7:78:03:41:81:87:98:84:c6:49:d8:96:
         81:a0:34:11:00:26:f5:c3:be:eb:05:a6:ba:03:ea:9e:b9:9e:
         cd:9a:87:55:0a:ed:ba:32:ab:9b:13:d9:55:97:7e:e7:f0:0b:
         86:ab:88:92:b1:0f:0a:9c:a0:e6:61:2d:12:b6:73:9b:73:0a:
         57:70:16:fa:c5:26:41:35:b4:07:6e:d5:49:46:05:3a:9c:b4:
         09:62:dd:03:52:81:7d:05:a6:38:b1:6c:0c:ed:e0:56:76:45:
         6b:8f:36:46:2b:c6:8e:c8:65:fd:b8:0a:aa:a5:3f:04:45:f6:
         10:6c:30:c4:5c:d0:48:67:a7:11:28:d8:b3:8a:e6:15:8d:c7:
         86:d5:a9:40:c1:2f:c6:dc:2e:93:b4:aa:13:96:e4:00:24:18:
         8c:4e:f3:eb:17:8e:e4:a1:66:85:8f:0e:45:19:cf:40:99:be:
         65:94:81:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzn7Z5mHy6tdc/So0ZAXvHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYwMzEzMTYwMDM1WhcNMjYwMzE0MTYwMDM1WjAzMTEwLwYDVQQD
Eyg3ZDRiMTcwNTBmNjQ2OWIxZTQ4NDcyZDcxODdhZTY5YTZhODVmODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33foatpWKq8teBqZWiGJQ9mLcRek
gDCvKg4l0ZjtOdy/BqPUxn0AcZDcUUTEuAKjTr/QJRYtbMieL/SXfzezWJedN2j7
FniT5Darn2PtcOxGh/9yzqaw4KOFCUeL/9xgOHfYlzW/tFZ+UT5t5Moprjs8RXyr
55HBqT40e6yxOEx3UUn730BAY+Ib3q2j0kZsBCUj7ohscxM4W5Wty33Nude7T74F
kFnhMTCCutKL1eGcyqgONXSEYM72adVUkaYRSBKR3YasVCzSFxjInD/HywvyAcsx
ntbD7IzCcRmZ8/0lpSD6M80aiUEvuJk5mMS+5ohLk92P3z4O5XQb4xggxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1LFwUPZGmx5IRy1xh65ppqhfg+MB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW/DjulP
o+Lzo09PntCimv/vZ92YwCmA24mAOrXRPHrXjbx/v+rYIav9zl8EONfbiY+ROn9/
rP8Nh2XRN6x8xnehd7MLHjMHJpi8/mSmp3gDQYGHmITGSdiWgaA0EQAm9cO+6wWm
ugPqnrmezZqHVQrtujKrmxPZVZd+5/ALhquIkrEPCpyg5mEtErZzm3MKV3AW+sUm
QTW0B27VSUYFOpy0CWLdA1KBfQWmOLFsDO3gVnZFa482RivGjshl/bgKqqU/BEX2
EGwwxFzQSGenESjYs4rmFY3HhtWpQMEvxtwuk7SqE5bkACQYjE7z6xeO5KFmhY8O
RRnPQJm+ZZSBIw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:53:00 2026 by rpki-client