Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          gGk16y+7rqRKAESo3fAe8QS4ecF7m+KLqk1vSepHCqw=
Subject key identifier:   25:D0:16:2A:0A:1A:F4:46:96:F6:DF:F2:6D:6B:7D:7D:71:E9:01:E3
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       019CBFCD666FFD84C91D36AAB19632429178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          1293
Signing time:             Thu 05 Mar 2026 21:00:35 +0000
Manifest this update:     Thu 05 Mar 2026 21:00:35 +0000
Manifest next update:     Fri 06 Mar 2026 21:00:35 +0000
Files and hashes:         1: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
                          2: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
                          3: X0C-jW-JvrYRehOUZc1q8qR_Alg.roa (hash: kkuwe92elfxQBb6MWA1wN1ame7fs+u6hfUmN0ZMLiZQ=)
                          4: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
                          5: bR0NHkHbblmEtwb2_nY_6Q1NAmE.roa (hash: KrJc5AmVNKuLrZUthurXLuq1KgVncKQfKVwT8ndsj4c=)
                          6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: j4FcLKAbSNgXVwMWQHg6X2kRr0I2comn9nLmSNRGzFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:cd:66:6f:fd:84:c9:1d:36:aa:b1:96:32:42:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: Mar  5 21:00:35 2026 GMT
            Not After : Mar  6 21:00:35 2026 GMT
        Subject: CN=25d0162a0a1af44696f6dff26d6b7d7d71e901e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:16:6e:f2:32:aa:05:9c:0e:f0:51:28:c5:
                    4e:07:d9:71:08:4a:dd:da:51:d7:72:56:e3:64:6c:
                    60:2a:c3:bd:03:93:2c:0b:99:11:73:f6:4d:00:9e:
                    86:44:43:7b:5d:5b:32:68:d7:87:11:b3:43:a8:1d:
                    79:5f:21:51:1d:57:3a:91:4d:31:72:5a:16:98:1f:
                    c1:28:14:04:bc:be:50:60:37:3e:ab:7d:e5:22:0f:
                    01:05:37:f5:84:8a:a2:db:a5:66:db:52:0a:04:0e:
                    df:17:9f:1d:df:f0:35:14:bd:38:a1:22:35:b9:0c:
                    30:ba:86:11:5e:ce:39:83:b1:62:c5:e7:82:33:73:
                    c6:3e:ad:d5:0d:c6:58:06:b2:92:b1:6c:4b:ff:3a:
                    d0:09:f6:18:04:22:44:88:29:36:44:c3:8b:a9:9c:
                    67:d8:02:22:06:45:af:e1:3b:6d:23:f7:61:d0:63:
                    93:5f:80:6d:98:00:c3:a6:f1:c3:80:a4:01:8e:3a:
                    3c:1e:51:3e:3b:da:b7:39:5d:50:7d:9c:ba:8b:5c:
                    fa:7a:bd:5d:22:5e:fc:09:b7:51:dd:ab:d4:86:14:
                    5b:26:80:93:27:19:bb:86:34:1a:2d:8d:37:0b:cc:
                    fb:24:c3:45:84:6f:42:5f:fd:f0:72:1d:fe:b1:0c:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:16:2A:0A:1A:F4:46:96:F6:DF:F2:6D:6B:7D:7D:71:E9:01:E3
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b6:24:83:e4:23:e6:e0:4f:57:34:b9:bb:09:37:1b:c7:f1:
         28:ab:d0:56:9c:d0:3c:80:93:36:b8:3c:98:42:c0:8d:a7:10:
         dc:79:89:27:a5:8a:47:ea:16:10:92:21:b0:74:45:f9:c8:d2:
         45:98:11:4d:04:2a:a8:45:36:91:7b:c9:7e:10:56:03:be:27:
         35:0e:a2:41:89:7e:16:15:eb:8a:d0:2a:4e:4b:b9:8e:b7:86:
         9b:ed:d5:56:45:75:01:8e:fb:de:15:bd:cb:c6:2f:33:8c:d8:
         d4:74:2e:b0:f9:44:57:41:a2:bb:0e:03:82:8d:bb:dd:29:39:
         c6:6f:ca:5f:0f:ca:04:7d:1c:ae:7a:93:02:2e:58:f1:f8:77:
         1d:ae:0b:2c:97:da:90:0d:3e:54:cf:1b:74:24:8e:17:49:20:
         13:a6:88:30:8b:97:49:e4:bd:7d:a7:de:1b:0d:ba:ab:60:21:
         de:1d:56:c4:b1:e9:3b:58:5c:35:72:54:cb:64:9d:34:bd:c4:
         61:02:85:7d:d8:73:4c:ee:fa:e4:8e:cf:17:cb:89:ec:93:69:
         4c:80:38:3b:96:14:b2:b4:62:95:cf:a9:73:0e:ee:3f:83:8a:
         71:1c:18:69:9d:0e:8c:ba:33:e4:05:35:8e:7e:71:40:17:0c:
         90:69:15:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/zWZv/YTJHTaqsZYyQpF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4
YzdiODUwHhcNMjYwMzA1MjEwMDM1WhcNMjYwMzA2MjEwMDM1WjAzMTEwLwYDVQQD
EygyNWQwMTYyYTBhMWFmNDQ2OTZmNmRmZjI2ZDZiN2Q3ZDcxZTkwMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr24WbvIyqgWcDvBRKMVOB9lxCErd
2lHXclbjZGxgKsO9A5MsC5kRc/ZNAJ6GREN7XVsyaNeHEbNDqB15XyFRHVc6kU0x
cloWmB/BKBQEvL5QYDc+q33lIg8BBTf1hIqi26Vm21IKBA7fF58d3/A1FL04oSI1
uQwwuoYRXs45g7FixeeCM3PGPq3VDcZYBrKSsWxL/zrQCfYYBCJEiCk2RMOLqZxn
2AIiBkWv4TttI/dh0GOTX4BtmADDpvHDgKQBjjo8HlE+O9q3OV1QfZy6i1z6er1d
Il78CbdR3avUhhRbJoCTJxm7hjQaLY03C8z7JMNFhG9CX/3wch3+sQwcjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXQFioKGvRGlvbf8m1rfX1x6QHjMB8GA1UdIwQY
MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt
ODZlYTE5ZDI5MTYzLzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz
LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbYkg+Qj
5uBPVzS5uwk3G8fxKKvQVpzQPICTNrg8mELAjacQ3HmJJ6WKR+oWEJIhsHRF+cjS
RZgRTQQqqEU2kXvJfhBWA74nNQ6iQYl+FhXritAqTku5jreGm+3VVkV1AY773hW9
y8YvM4zY1HQusPlEV0Giuw4Dgo273Sk5xm/KXw/KBH0crnqTAi5Y8fh3Ha4LLJfa
kA0+VM8bdCSOF0kgE6aIMIuXSeS9fafeGw26q2Ah3h1WxLHpO1hcNXJUy2SdNL3E
YQKFfdhzTO765I7PF8uJ7JNpTIA4O5YUsrRilc+pcw7uP4OKcRwYaZ0OjLoz5AU1
jn5xQBcMkGkVcQ==
-----END CERTIFICATE-----
Generated at Fri Mar 6 03:59:17 2026 by rpki-client