Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          PGA5FhluSmZ+VXBF+WOb0MKfU0dJ5JNEwXuskAZItlI=
Subject key identifier:   65:EC:F8:B6:E8:D8:74:8A:DA:38:87:31:32:81:CB:CC:AC:DB:50:0D
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       019D3A1CFAA7C3D927894FB4184246987FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 15:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 15:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 15:01:10 +0000
Files and hashes:         1: D9L3F0MjFuI1mkGvBm8mGmwB0aE.roa (hash: d55W5CU5JP2xCsUj9oSlJV+ga7nmSkprH9KBPjXNOz0=)
                          2: Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa (hash: Y3ktqWHPY4jaIf3oBnxCM/z1QkmvklY1/99J5dEJKUQ=)
                          3: JbYTcmeKPo3mOunx0Z-jMKOxz48.roa (hash: /zbvgZqj9ImK5wHvF50pz1/cbzu2MAYXngG5GwrR+io=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: T+9FILxHcUcf+S+gtsu4lVqdTTB2XjRsKECVrdLIhC4=)
                          5: kKbHC__LJH-j0ex4EgJJmX98slE.roa (hash: FA7KYfTvFd4DkO8o/xkyqOnnhY/RKFo8GgvBljJcnfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:fa:a7:c3:d9:27:89:4f:b4:18:42:46:98:7f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Mar 29 15:01:10 2026 GMT
            Not After : Mar 30 15:01:10 2026 GMT
        Subject: CN=65ecf8b6e8d8748ada3887313281cbccacdb500d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:4e:1a:5f:59:1d:22:1a:5b:fe:60:06:60:
                    24:ff:d2:72:a8:53:34:6a:6f:1b:e5:65:19:5d:3e:
                    a4:28:29:cb:62:36:a3:4b:87:86:c7:45:d9:e0:aa:
                    e3:39:6e:ed:e6:5d:25:1c:1c:7f:3f:ad:24:28:96:
                    52:bd:a5:f0:b7:cc:4e:8c:15:04:ea:2c:68:c3:4b:
                    37:dc:d3:c3:10:35:69:ef:f6:eb:95:69:1a:37:22:
                    b7:45:69:f2:ee:13:e6:4a:20:f0:fd:bf:3a:17:eb:
                    37:af:f1:66:8a:29:b6:53:a3:b5:f6:84:b6:b1:9f:
                    b6:65:78:eb:fc:db:a1:a4:cb:c1:d1:c3:70:32:32:
                    92:30:0b:44:15:54:59:d3:f7:3f:f2:ce:71:b0:56:
                    d2:38:2a:d9:91:e5:b1:44:2c:c8:d3:ff:f1:e6:89:
                    c3:c7:36:be:8b:02:c8:c5:38:4f:63:e7:05:6a:a7:
                    e3:6c:0a:56:07:a0:41:ab:c6:f3:7a:37:17:27:f1:
                    de:0a:67:b7:f4:78:61:c3:ef:dd:2a:16:c2:04:2c:
                    ba:17:fb:df:cb:0e:6b:40:e0:bf:49:66:7c:82:82:
                    85:d3:93:31:64:1d:e4:0a:0a:07:c0:c2:34:c1:cf:
                    d8:10:89:04:10:e2:cd:15:05:a4:5b:f1:b1:54:5e:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:F8:B6:E8:D8:74:8A:DA:38:87:31:32:81:CB:CC:AC:DB:50:0D
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:11:35:62:29:5f:3e:78:b4:51:e9:54:2e:7a:e0:fd:8b:
         b9:c1:16:bf:ee:e6:d7:dc:90:3d:a3:9f:d3:2a:40:2d:b5:b7:
         d3:64:9d:e6:b9:21:a5:5f:40:26:45:92:87:a2:74:e3:85:37:
         bf:d7:3c:a0:f7:ea:61:0d:b5:f9:7f:c8:0e:44:30:bb:db:3b:
         e7:2c:de:d0:ca:56:8c:61:4f:b8:44:5d:e2:b1:d1:a2:2c:a8:
         42:60:f9:f4:7f:a4:2e:8e:1d:0b:c0:6f:4d:18:fd:14:7c:3d:
         4e:b5:c3:75:05:cf:d9:da:bd:fc:41:02:ae:cd:5f:74:97:39:
         ec:f2:fa:aa:11:1b:db:96:2b:37:a7:0f:59:53:8b:1f:3a:41:
         61:4e:74:46:c6:a0:65:67:18:22:bd:c3:60:72:18:54:3c:55:
         61:99:ee:3c:25:e9:53:3f:13:a8:59:2b:8f:e3:41:27:16:e0:
         6a:20:d1:10:9a:4f:75:ea:45:17:7a:7c:d7:9a:de:b4:f7:2f:
         3d:25:8b:03:4a:a8:91:26:9a:4b:21:20:02:cd:7b:ad:8e:25:
         73:4b:0d:e7:fd:15:26:36:ec:43:d0:d4:fa:97:5f:7e:cc:c4:
         71:c5:fc:83:c2:20:65:9e:1e:af:54:6a:59:41:67:6b:f9:7e:
         d8:2c:cf:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HPqnw9kniU+0GEJGmH/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4
NmQzY2EwHhcNMjYwMzI5MTUwMTEwWhcNMjYwMzMwMTUwMTEwWjAzMTEwLwYDVQQD
Eyg2NWVjZjhiNmU4ZDg3NDhhZGEzODg3MzEzMjgxY2JjY2FjZGI1MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC1OGl9ZHSIaW/5gBmAk/9JyqFM0
am8b5WUZXT6kKCnLYjajS4eGx0XZ4KrjOW7t5l0lHBx/P60kKJZSvaXwt8xOjBUE
6ixow0s33NPDEDVp7/brlWkaNyK3RWny7hPmSiDw/b86F+s3r/Fmiim2U6O19oS2
sZ+2ZXjr/NuhpMvB0cNwMjKSMAtEFVRZ0/c/8s5xsFbSOCrZkeWxRCzI0//x5onD
xza+iwLIxThPY+cFaqfjbApWB6BBq8bzejcXJ/HeCme39Hhhw+/dKhbCBCy6F/vf
yw5rQOC/SWZ8goKF05MxZB3kCgoHwMI0wc/YEIkEEOLNFQWkW/GxVF74ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXs+Lbo2HSK2jiHMTKBy8ys21ANMB8GA1UdIwQY
MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt
MDU4NWRlNGQ0ZWU3LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3
LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCARNWIp
Xz54tFHpVC564P2LucEWv+7m19yQPaOf0ypALbW302Sd5rkhpV9AJkWSh6J044U3
v9c8oPfqYQ21+X/IDkQwu9s75yze0MpWjGFPuERd4rHRoiyoQmD59H+kLo4dC8Bv
TRj9FHw9TrXDdQXP2dq9/EECrs1fdJc57PL6qhEb25YrN6cPWVOLHzpBYU50Rsag
ZWcYIr3DYHIYVDxVYZnuPCXpUz8TqFkrj+NBJxbgaiDREJpPdepFF3p815retPcv
PSWLA0qokSaaSyEgAs17rY4lc0sN5/0VJjbsQ9DU+pdffszEccX8g8IgZZ4er1Rq
WUFna/l+2CzPsg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:15 2026 by rpki-client