Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          iq+ZCcCi3Y8WmhC36Eq+2nykQu7xlhD2YjDD/RQvJ98=
Subject key identifier:   C8:DD:ED:E0:7E:17:91:53:94:39:0B:5A:33:81:37:62:35:5B:89:40
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019CE2C7CD4B3FAE1CE7793941FF4FC16484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0D8B
Signing time:             Thu 12 Mar 2026 16:01:10 +0000
Manifest this update:     Thu 12 Mar 2026 16:01:10 +0000
Manifest next update:     Fri 13 Mar 2026 16:01:10 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: 02vVbwIWJGmBQ2O8hEbR4vEzAKFMGW6G3h+OdrLOrTs=)
                          2: DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa (hash: 99fcTIhNFwctA5y5YOLO0bKZ5UWAKG6gqXfeOW7ZWyc=)
                          3: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
                          4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c7:cd:4b:3f:ae:1c:e7:79:39:41:ff:4f:c1:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Mar 12 16:01:10 2026 GMT
            Not After : Mar 13 16:01:10 2026 GMT
        Subject: CN=c8ddede07e17915394390b5a33813762355b8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:50:4a:80:38:27:f1:ba:71:4b:ba:be:52:
                    6f:5d:e1:4e:af:38:7a:ea:de:e9:66:a6:ea:45:e3:
                    90:21:e8:be:73:ed:5b:bc:b7:6e:3d:8b:14:cc:07:
                    1d:e3:56:15:b4:e6:e7:b9:1c:df:16:07:48:b2:77:
                    95:85:fb:9d:a2:da:9a:69:f6:00:5a:9e:e9:54:e4:
                    2d:71:fd:11:22:4c:60:9c:f8:3f:41:89:9a:bd:a1:
                    25:12:e1:dc:22:2b:e3:0c:89:29:ae:46:c1:7c:2d:
                    e8:6a:02:f1:96:bd:c8:e1:15:89:a8:5b:e2:fa:3f:
                    63:d5:81:57:fa:d0:9e:2f:17:5a:21:f7:ba:54:9b:
                    96:18:2c:e0:f0:61:63:53:cb:41:3a:ec:2a:7b:85:
                    65:7e:0f:5c:45:7c:79:c5:56:30:1d:81:6b:be:1e:
                    b6:b1:4d:28:67:af:82:7c:2b:66:76:73:a3:b9:80:
                    37:ad:e9:f3:37:ea:d2:a6:32:ee:20:80:01:d6:50:
                    bc:5a:0f:1e:44:cb:09:0a:0d:9d:df:4e:cf:e8:a9:
                    d9:8e:a7:bb:d0:50:5c:fb:f8:f0:60:51:0d:26:56:
                    11:02:db:09:8e:73:99:3b:8e:6a:50:1e:ec:1c:07:
                    6a:9f:3d:4b:ee:19:88:71:04:9c:fd:50:2c:1f:ef:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:ED:E0:7E:17:91:53:94:39:0B:5A:33:81:37:62:35:5B:89:40
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:98:e2:a7:41:81:e8:7a:94:a8:3e:07:17:f7:f9:89:16:f6:
         61:79:f2:f0:0b:c6:28:e6:3c:52:25:31:ac:f3:9c:13:c8:f0:
         63:7e:7f:aa:8c:fb:21:5b:98:04:f1:23:0d:8d:f3:7f:73:ef:
         e7:05:55:03:ed:a9:a4:c2:71:74:9a:c8:57:0a:d6:2a:3c:c7:
         b3:b9:78:c1:9e:91:8d:2e:47:19:7d:53:9b:67:7d:b0:80:ac:
         3c:13:8d:2e:90:b2:12:d4:b5:23:ec:2d:e2:30:d6:6c:4d:d7:
         73:c6:26:81:b5:91:8c:02:f0:6f:07:ba:ac:49:0b:4b:dd:a7:
         d3:96:a8:a1:ae:fd:9d:36:46:a5:7b:25:e2:32:36:92:14:31:
         90:5f:4b:bc:8c:32:a6:98:37:b3:90:9e:49:43:af:d3:8d:d7:
         8e:f3:13:c8:bb:0c:a3:d5:7f:50:72:57:27:f4:35:2a:55:21:
         a6:06:13:31:3f:89:22:3e:38:d4:17:df:d3:c0:a9:12:c1:e4:
         5e:98:15:73:71:b9:8d:8f:46:cc:3e:d6:5b:25:69:56:17:a4:
         37:a6:39:58:73:51:85:25:96:1d:2f:15:1b:08:78:b2:72:80:
         e1:6e:f9:d0:91:fc:42:62:7d:a9:58:69:43:ed:7c:a6:d5:a9:
         c4:6c:6c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzix81LP64c53k5Qf9PwWSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy
ZDhlNjMwHhcNMjYwMzEyMTYwMTEwWhcNMjYwMzEzMTYwMTEwWjAzMTEwLwYDVQQD
EyhjOGRkZWRlMDdlMTc5MTUzOTQzOTBiNWEzMzgxMzc2MjM1NWI4OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh9QSoA4J/G6cUu6vlJvXeFOrzh6
6t7pZqbqReOQIei+c+1bvLduPYsUzAcd41YVtObnuRzfFgdIsneVhfudotqaafYA
Wp7pVOQtcf0RIkxgnPg/QYmavaElEuHcIivjDIkprkbBfC3oagLxlr3I4RWJqFvi
+j9j1YFX+tCeLxdaIfe6VJuWGCzg8GFjU8tBOuwqe4Vlfg9cRXx5xVYwHYFrvh62
sU0oZ6+CfCtmdnOjuYA3renzN+rSpjLuIIAB1lC8Wg8eRMsJCg2d307P6KnZjqe7
0FBc+/jwYFENJlYRAtsJjnOZO45qUB7sHAdqnz1L7hmIcQSc/VAsH+/jsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjd7eB+F5FTlDkLWjOBN2I1W4lAMB8GA1UdIwQY
MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt
MDc3MTFlZDAyYjc1LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1
LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5jip0GB
6HqUqD4HF/f5iRb2YXny8AvGKOY8UiUxrPOcE8jwY35/qoz7IVuYBPEjDY3zf3Pv
5wVVA+2ppMJxdJrIVwrWKjzHs7l4wZ6RjS5HGX1Tm2d9sICsPBONLpCyEtS1I+wt
4jDWbE3Xc8YmgbWRjALwbwe6rEkLS92n05aooa79nTZGpXsl4jI2khQxkF9LvIwy
ppg3s5CeSUOv043XjvMTyLsMo9V/UHJXJ/Q1KlUhpgYTMT+JIj441Bff08CpEsHk
XpgVc3G5jY9GzD7WWyVpVhekN6Y5WHNRhSWWHS8VGwh4snKA4W750JH8QmJ9qVhp
Q+18ptWpxGxsMg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:23 2026 by rpki-client