Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          wkA3yO6bsXsz5PIo2F7kzX1uf+/xWakbjvFXuUGQb1A=
Subject key identifier:   6D:9A:8D:44:BA:21:99:24:52:FA:A7:D9:68:FE:97:B4:FC:C2:99:79
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       019D37F74D4A53AE4B30FF7B1D1B70DFCC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          18D1
Signing time:             Sun 29 Mar 2026 05:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:47 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: IY+UY/McAi05MuLy7YtN45uVtpwe+StdCktwrxyC4jQ=)
                          3: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
                          4: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          5: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
                          6: q0a8yaRXZHqDgW6t40wuVuwZGqY.roa (hash: yQdCTPHRdYGgRQtv3qZWl01v8W1TNo2W0QOatwpBfUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:4d:4a:53:ae:4b:30:ff:7b:1d:1b:70:df:cc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Mar 29 05:00:47 2026 GMT
            Not After : Mar 30 05:00:47 2026 GMT
        Subject: CN=6d9a8d44ba21992452faa7d968fe97b4fcc29979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:04:69:4b:b3:d3:c9:39:67:1b:41:cd:01:
                    22:cd:fe:1e:02:b5:b7:bb:db:c1:1b:d4:ce:0d:81:
                    7e:3c:b1:c8:7d:44:85:49:bb:28:04:e7:e7:2d:53:
                    e5:21:15:b0:29:84:25:3d:52:85:f5:b7:ca:65:35:
                    f2:cc:46:2b:e7:87:ad:47:d7:85:71:14:c8:20:95:
                    ca:60:ff:0f:d6:10:88:b0:27:c8:86:cb:39:14:db:
                    e4:8d:6e:9b:74:60:f2:48:71:b3:b9:94:4a:39:1a:
                    cf:2d:69:cc:53:70:b5:78:e3:53:83:6c:d9:75:d2:
                    2e:e2:3c:c5:26:e2:3f:20:78:8a:f5:29:e9:82:7e:
                    40:88:cc:12:08:ad:65:21:6d:48:d3:e5:5f:e8:04:
                    b7:33:8d:be:f7:b8:bd:fe:c1:34:d4:17:9e:0b:04:
                    7f:3f:60:93:66:7e:a6:4f:70:73:4f:59:e8:37:f2:
                    a6:fe:b2:b4:17:29:be:75:ad:08:7e:1a:d5:10:a5:
                    22:87:66:c1:c2:d7:d5:19:e5:fc:83:03:f5:68:e9:
                    d6:50:52:80:07:2b:b5:ac:f2:6a:3a:0d:86:ee:68:
                    91:d9:d0:8d:c5:9e:e8:75:85:38:6c:36:85:8e:4b:
                    ed:60:79:50:d4:fc:40:2a:30:39:4e:a5:b8:82:46:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:8D:44:BA:21:99:24:52:FA:A7:D9:68:FE:97:B4:FC:C2:99:79
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:14:ce:a8:02:4d:7d:97:e2:74:8f:05:3b:2d:ea:17:a7:
         f3:3a:54:b0:1f:26:bb:2d:ea:01:1c:44:88:36:2a:c1:77:de:
         60:da:09:14:04:f6:24:52:94:64:df:07:dc:b5:eb:0f:cd:14:
         5f:d4:bb:3f:0b:3e:b2:5c:4c:ef:b1:29:6c:71:cf:be:13:4e:
         57:41:8a:bc:83:5e:63:e2:42:f4:aa:52:22:be:39:72:b8:65:
         e4:3e:74:e1:44:8c:6b:1f:e1:f6:64:e7:e1:6e:4e:52:ce:72:
         fb:87:05:03:16:10:f9:f5:b2:53:53:b2:31:e9:31:9b:89:8a:
         37:98:d4:29:de:a1:4e:65:52:ce:e0:33:a3:29:77:91:08:c0:
         31:2d:65:45:91:76:e5:29:f5:c9:46:01:1d:1c:cf:19:14:74:
         60:34:91:a8:17:7f:ec:00:45:40:5e:cc:62:46:10:73:67:22:
         f6:14:69:51:d1:e2:ed:58:8a:eb:8a:82:b8:5d:b7:ab:d3:bf:
         0f:67:5b:8b:05:6e:61:2a:9e:16:87:d3:59:ec:6f:fc:90:45:
         c8:26:0f:17:79:2f:07:61:d8:6a:7a:e5:9c:b9:0a:99:bf:08:
         fa:27:24:31:0c:93:42:3b:48:e6:3a:5c:9b:20:b0:e3:bf:1e:
         28:fd:21:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03901KU65LMP97HRtw38yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjYwMzI5MDUwMDQ3WhcNMjYwMzMwMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZDlhOGQ0NGJhMjE5OTI0NTJmYWE3ZDk2OGZlOTdiNGZjYzI5OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtewEaUuz08k5ZxtBzQEizf4eArW3
u9vBG9TODYF+PLHIfUSFSbsoBOfnLVPlIRWwKYQlPVKF9bfKZTXyzEYr54etR9eF
cRTIIJXKYP8P1hCIsCfIhss5FNvkjW6bdGDySHGzuZRKORrPLWnMU3C1eONTg2zZ
ddIu4jzFJuI/IHiK9Snpgn5AiMwSCK1lIW1I0+Vf6AS3M42+97i9/sE01BeeCwR/
P2CTZn6mT3BzT1noN/Km/rK0Fym+da0IfhrVEKUih2bBwtfVGeX8gwP1aOnWUFKA
Byu1rPJqOg2G7miR2dCNxZ7odYU4bDaFjkvtYHlQ1PxAKjA5TqW4gkaKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2ajUS6IZkkUvqn2Wj+l7T8wpl5MB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNkUzqgC
TX2X4nSPBTst6hen8zpUsB8muy3qARxEiDYqwXfeYNoJFAT2JFKUZN8H3LXrD80U
X9S7Pws+slxM77EpbHHPvhNOV0GKvINeY+JC9KpSIr45crhl5D504USMax/h9mTn
4W5OUs5y+4cFAxYQ+fWyU1OyMekxm4mKN5jUKd6hTmVSzuAzoyl3kQjAMS1lRZF2
5Sn1yUYBHRzPGRR0YDSRqBd/7ABFQF7MYkYQc2ci9hRpUdHi7ViK64qCuF23q9O/
D2dbiwVuYSqeFofTWexv/JBFyCYPF3kvB2HYanrlnLkKmb8I+ickMQyTQjtI5jpc
myCw478eKP0hxw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:29 2026 by rpki-client