Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          PJwNMnCvjjMkyuHBKVDn5nljToqzAmO8Or8ma1rrA1Q=
Subject key identifier:   FA:F1:AD:5F:DA:12:89:FD:72:AC:A9:E7:AA:1D:6A:A4:B9:FC:35:7B
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019D0E1FCB55E3D1661C0B9FAC4A4A834FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0E52
Signing time:             Sat 21 Mar 2026 02:00:57 +0000
Manifest this update:     Sat 21 Mar 2026 02:00:57 +0000
Manifest next update:     Sun 22 Mar 2026 02:00:57 +0000
Files and hashes:         1: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
                          2: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
                          3: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (hash: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k=)
                          4: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
                          5: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
                          6: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: y8QM6ESf4Oj6J8fhT0PvvBBjYYKX/x1ZUSKeJXgucpQ=)
                          7: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:1f:cb:55:e3:d1:66:1c:0b:9f:ac:4a:4a:83:4f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Mar 21 02:00:57 2026 GMT
            Not After : Mar 22 02:00:57 2026 GMT
        Subject: CN=faf1ad5fda1289fd72aca9e7aa1d6aa4b9fc357b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:ed:61:28:85:ad:da:3c:f3:8b:50:c8:73:
                    cd:d7:e2:c5:2f:d1:e8:71:d7:80:05:fd:1c:68:01:
                    c5:3d:dd:fe:28:3e:5e:91:bf:31:2d:9b:15:45:90:
                    4a:96:a3:8d:57:d8:82:c2:2c:c8:a5:a3:98:8d:12:
                    65:9a:b9:33:81:de:17:2c:ef:73:45:c9:87:e9:c8:
                    1f:b2:ef:5c:5b:1a:f5:16:42:72:39:c2:6a:56:52:
                    ff:91:33:0b:82:a2:08:49:bf:05:ed:c7:52:78:0c:
                    47:bd:84:71:c2:85:76:9f:fc:b7:aa:aa:ca:45:06:
                    d9:85:3b:6d:f6:bf:99:c2:17:a7:d2:62:5d:d5:69:
                    c7:0c:3e:ca:ac:8f:c9:00:54:4f:ef:29:b3:5a:f9:
                    3a:ea:9d:1e:b6:af:b8:dc:9a:fb:8c:ec:76:bc:cb:
                    e3:31:25:89:eb:8d:24:a8:53:8a:e1:73:8f:67:0e:
                    fc:41:5e:ef:19:7e:19:bc:9e:c0:b6:b9:14:5b:92:
                    83:6f:b0:ee:1b:2f:be:cf:03:6b:ab:c1:df:52:d5:
                    ba:b0:88:30:a7:56:5e:1e:d8:22:0f:22:9a:90:34:
                    90:f2:0e:4e:89:e4:be:40:b0:7f:7e:f3:c5:78:b4:
                    57:3f:c9:5c:9b:cb:e9:82:24:88:dd:a1:64:4f:cf:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:AD:5F:DA:12:89:FD:72:AC:A9:E7:AA:1D:6A:A4:B9:FC:35:7B
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:00:07:9d:30:37:48:58:34:0b:3f:6f:3c:f5:d0:c7:92:
         36:64:32:8f:98:19:06:ec:d4:d7:f3:1e:78:72:86:38:dd:58:
         f0:08:14:59:ed:1c:74:d9:9c:c1:a7:10:0f:9c:e8:83:21:9b:
         76:8b:dc:92:2d:67:22:74:a6:15:b8:50:2c:eb:8f:11:83:c7:
         06:66:7e:47:12:74:d8:8b:0a:f9:10:85:f0:16:de:93:d3:23:
         fe:7f:ee:33:0d:b6:1c:56:2c:2b:66:b6:c9:87:b8:af:b9:05:
         51:d1:58:c3:12:12:4a:2e:5f:ec:a6:c8:d9:c5:3b:7d:1e:16:
         de:58:04:cb:aa:a2:8f:ad:ad:5a:9e:4d:12:ad:d8:f3:91:19:
         3f:74:c3:6f:10:e1:ba:71:00:5a:e9:da:d5:31:ca:31:bb:90:
         48:c2:54:28:c9:31:62:80:30:fe:a6:c6:dc:0b:31:5e:da:29:
         11:66:a5:36:81:65:4c:f9:ff:f2:1a:f2:2d:c0:2f:d5:04:b4:
         1a:f9:b6:df:da:79:3c:18:96:a2:b7:3d:4a:e5:16:bb:09:57:
         c3:66:66:1b:6a:f7:4c:2e:0e:63:c5:6b:9a:79:e2:f5:6b:20:
         20:ff:15:46:73:d6:b5:8d:fd:af:83:52:8b:a7:2f:50:48:d3:
         38:4a:92:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0OH8tV49FmHAufrEpKg0/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3
YzczYTQwHhcNMjYwMzIxMDIwMDU3WhcNMjYwMzIyMDIwMDU3WjAzMTEwLwYDVQQD
EyhmYWYxYWQ1ZmRhMTI4OWZkNzJhY2E5ZTdhYTFkNmFhNGI5ZmMzNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7/tYSiFrdo884tQyHPN1+LFL9Ho
cdeABf0caAHFPd3+KD5ekb8xLZsVRZBKlqONV9iCwizIpaOYjRJlmrkzgd4XLO9z
RcmH6cgfsu9cWxr1FkJyOcJqVlL/kTMLgqIISb8F7cdSeAxHvYRxwoV2n/y3qqrK
RQbZhTtt9r+Zwhen0mJd1WnHDD7KrI/JAFRP7ymzWvk66p0etq+43Jr7jOx2vMvj
MSWJ640kqFOK4XOPZw78QV7vGX4ZvJ7AtrkUW5KDb7DuGy++zwNrq8HfUtW6sIgw
p1ZeHtgiDyKakDSQ8g5OieS+QLB/fvPFeLRXP8lcm8vpgiSI3aFkT89Z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrxrV/aEon9cqyp56odaqS5/DV7MB8GA1UdIwQY
MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt
ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1
LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6QAB50w
N0hYNAs/bzz10MeSNmQyj5gZBuzU1/MeeHKGON1Y8AgUWe0cdNmcwacQD5zogyGb
dovcki1nInSmFbhQLOuPEYPHBmZ+RxJ02IsK+RCF8Bbek9Mj/n/uMw22HFYsK2a2
yYe4r7kFUdFYwxISSi5f7KbI2cU7fR4W3lgEy6qij62tWp5NEq3Y85EZP3TDbxDh
unEAWuna1THKMbuQSMJUKMkxYoAw/qbG3AsxXtopEWalNoFlTPn/8hryLcAv1QS0
Gvm239p5PBiWorc9SuUWuwlXw2ZmG2r3TC4OY8Vrmnni9WsgIP8VRnPWtY39r4NS
i6cvUEjTOEqSkA==
-----END CERTIFICATE-----
Generated at Sat Mar 21 08:14:32 2026 by rpki-client