Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File:                     tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier:          7C9RdgHCXKSnCyZ/MOO8M/Dtd/SrRZwBM9Zq9C4WToE=
Subject key identifier:   23:BA:46:34:5B:6B:83:9A:AF:19:63:BD:F0:B4:AC:37:8B:91:AD:BF
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer:       /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial:       019D3A53B7CB550C116ECCA82F025E9557E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number:          083D
Signing time:             Sun 29 Mar 2026 16:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:58 +0000
Files and hashes:         1: 09I350KEMMvsvPe6M8I1cJsDKeU.roa (hash: BIa6ZOdxabUdYmm/UU6G7QFOkGcLnbK9+FcHW7ZlUbs=)
                          2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: GvkTQwhcWKnXSNHyc+BtXcXcpmorlLHLOCD3zBEyZU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:b7:cb:55:0c:11:6e:cc:a8:2f:02:5e:95:57:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
        Validity
            Not Before: Mar 29 16:00:58 2026 GMT
            Not After : Mar 30 16:00:58 2026 GMT
        Subject: CN=23ba46345b6b839aaf1963bdf0b4ac378b91adbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:ea:6f:7a:5c:8e:ca:9a:2d:1a:47:5c:2a:
                    89:36:1b:57:40:ad:5e:ec:0d:75:c3:66:eb:d0:25:
                    0c:10:53:72:3e:43:03:09:66:0b:fd:55:c5:88:08:
                    8f:03:82:98:45:7e:e9:01:a6:70:0f:63:4a:45:99:
                    27:f3:ef:fb:c0:0a:46:9a:d3:72:32:54:78:43:6d:
                    2b:10:9e:bc:44:a4:fb:d6:1c:ac:06:06:5d:3b:51:
                    73:5a:3b:f2:a3:ec:a1:8d:ee:f2:90:04:4b:c4:68:
                    ca:d1:e8:ec:a9:43:f5:a3:8c:14:55:69:fe:45:d7:
                    c3:91:a1:0d:a9:c6:67:99:c5:a9:13:6a:a9:57:65:
                    c5:03:30:da:31:52:a1:c4:cb:e5:8a:cb:05:2a:24:
                    f9:f7:63:61:a6:7e:d3:0a:7d:ff:a3:d9:92:ca:52:
                    83:3a:b6:c2:01:96:b6:7b:f3:dd:24:bc:8f:2a:31:
                    f4:ee:5f:b8:23:be:7a:eb:42:fd:7c:31:e7:53:7a:
                    b5:f8:b4:f7:7a:61:02:2f:ca:58:20:d8:55:da:bf:
                    18:55:e9:4a:24:59:e1:33:07:42:01:86:da:b7:27:
                    b1:16:29:d6:63:92:6e:40:2f:4d:0e:07:3a:46:01:
                    d3:e4:6b:ef:20:2e:07:b2:dd:fe:18:bf:27:e2:71:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:46:34:5B:6B:83:9A:AF:19:63:BD:F0:B4:AC:37:8B:91:AD:BF
            X509v3 Authority Key Identifier:
                keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:02:ad:79:dc:78:90:40:95:12:48:5a:92:24:06:66:6a:
         c1:c1:89:5c:a3:c9:01:e5:57:4d:ca:68:39:08:9f:66:63:1f:
         e2:bf:e8:17:e2:ce:03:34:36:6d:2e:14:7d:b9:a1:2d:9e:ef:
         ed:7b:3f:eb:e6:3f:bd:ba:11:fe:be:8d:be:8e:4e:31:99:bb:
         ea:96:3f:bf:b5:a4:5a:95:c3:15:79:87:39:97:3d:5c:2e:a2:
         cb:74:be:95:4e:1f:6c:20:40:37:69:77:14:04:1e:2e:da:12:
         ce:2d:da:5b:e6:35:e9:d1:53:f0:99:13:cc:c1:cd:54:8f:7b:
         6c:9e:d6:8e:97:25:c3:dd:35:43:f9:87:be:0f:b7:fd:29:76:
         ee:bf:f9:10:fa:51:25:12:78:d0:6b:ed:36:1d:54:d4:09:93:
         28:6a:58:e0:79:47:1e:dd:57:6b:03:99:51:2e:43:62:80:b9:
         a4:68:23:ce:c8:63:8a:7a:e1:05:7c:14:0d:a2:00:82:13:97:
         c4:9f:8e:84:39:0e:de:74:00:72:8e:fd:91:19:79:b7:72:1a:
         7c:d8:c0:f1:58:05:3d:e8:6d:25:be:49:14:a8:66:aa:4c:7d:
         cd:33:c6:19:f5:0c:4b:76:c3:38:70:c6:85:7b:ab:7e:e4:4e:
         5c:95:54:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U7fLVQwRbsyoLwJelVfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjYwMzI5MTYwMDU4WhcNMjYwMzMwMTYwMDU4WjAzMTEwLwYDVQQD
EygyM2JhNDYzNDViNmI4MzlhYWYxOTYzYmRmMGI0YWMzNzhiOTFhZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArznqb3pcjsqaLRpHXCqJNhtXQK1e
7A11w2br0CUMEFNyPkMDCWYL/VXFiAiPA4KYRX7pAaZwD2NKRZkn8+/7wApGmtNy
MlR4Q20rEJ68RKT71hysBgZdO1FzWjvyo+yhje7ykARLxGjK0ejsqUP1o4wUVWn+
RdfDkaENqcZnmcWpE2qpV2XFAzDaMVKhxMvlissFKiT592Nhpn7TCn3/o9mSylKD
OrbCAZa2e/PdJLyPKjH07l+4I75660L9fDHnU3q1+LT3emECL8pYINhV2r8YVelK
JFnhMwdCAYbatyexFinWY5JuQC9NDgc6RgHT5GvvIC4Hst3+GL8n4nHR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO6RjRba4OarxljvfC0rDeLka2/MB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijsCrXnc
eJBAlRJIWpIkBmZqwcGJXKPJAeVXTcpoOQifZmMf4r/oF+LOAzQ2bS4UfbmhLZ7v
7Xs/6+Y/vboR/r6Nvo5OMZm76pY/v7WkWpXDFXmHOZc9XC6iy3S+lU4fbCBAN2l3
FAQeLtoSzi3aW+Y16dFT8JkTzMHNVI97bJ7Wjpclw901Q/mHvg+3/Sl27r/5EPpR
JRJ40GvtNh1U1AmTKGpY4HlHHt1XawOZUS5DYoC5pGgjzshjinrhBXwUDaIAghOX
xJ+OhDkO3nQAco79kRl5t3IafNjA8VgFPehtJb5JFKhmqkx9zTPGGfUMS3bDOHDG
hXurfuROXJVUgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:16 2026 by rpki-client