Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          PXktPYa3EXc0W3OOTjV8FQv0OmIBRZUlcNlgY5wDwbc=
Subject key identifier:   09:E4:9C:86:25:18:48:52:18:96:66:6B:77:14:76:EA:37:D9:77:EA
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019D3909B95E88EF153A5874DCFA80C0B7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          165E
Signing time:             Sun 29 Mar 2026 10:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:31 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: xCvLZ9Npp7SVrsuPc60PeeL/6LUNeolEml/psfWjhdE=)
                          2: A9X4cShQaD_mK0qE56RcWv1n6WM.roa (hash: 9IXqUIjUTj9O7jC2WLB7h7sR0zwiNThCiC66By6Zpvg=)
                          3: E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa (hash: H+Jw3qwj6HENxblKk3mtHeFWeilk4ouDaO2sDtbof3Y=)
                          4: RROskC01oY8ik1jv9pODlvMWoI0.roa (hash: lRVESEDIz33P/s8fDuslCEVyyzFPd8mRR/XC1xoem+M=)
                          5: jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa (hash: YC9Zk7AeEy/U3DouNdWT44SnwPIkBw05lQ2yggZvMZA=)
                          6: kbTz7ppbQ7oPVGXlVGsMEuIRKgQ.roa (hash: RN50qd/QjamGrCWyNEXJiSMZd1C/NPpkaF05FYlWOGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:b9:5e:88:ef:15:3a:58:74:dc:fa:80:c0:b7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Mar 29 10:00:31 2026 GMT
            Not After : Mar 30 10:00:31 2026 GMT
        Subject: CN=09e49c86251848521896666b771476ea37d977ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:61:f5:19:42:1f:03:4d:c3:7b:78:a8:d8:
                    56:50:44:82:e3:d4:7e:b6:cb:2a:b8:39:c1:78:25:
                    a0:00:8d:0a:a3:1a:a8:57:08:b2:f9:0d:23:ca:8c:
                    64:77:6f:db:3e:dc:57:1d:63:9e:8a:18:2b:15:21:
                    3a:ee:73:f1:79:3c:0a:d6:6e:ff:05:aa:a7:98:a0:
                    7c:ec:b6:e1:27:99:cc:5a:75:5b:30:31:d2:54:d2:
                    7c:08:b9:53:93:73:59:aa:92:4d:19:1b:5d:22:b3:
                    7b:42:25:87:47:62:c4:f1:f5:29:99:d9:ff:47:72:
                    69:dc:68:a5:a9:09:f5:19:e2:4a:2f:1a:f3:3b:e6:
                    9b:cf:e9:64:48:53:1e:45:f6:b0:9b:3c:12:6f:53:
                    a6:ca:15:be:37:70:40:36:91:ff:12:a2:42:f1:06:
                    f4:9a:be:e1:da:9f:b5:f2:97:a1:80:d2:90:6e:c9:
                    fd:86:cf:38:9e:c0:83:01:80:bc:be:f0:57:5c:88:
                    ac:b3:41:31:55:f3:4c:26:17:c9:49:14:cd:cc:03:
                    53:5e:83:31:9d:c3:02:58:1d:f0:1a:c1:02:f8:91:
                    63:bf:25:c8:d6:a6:4c:37:43:39:b1:a2:98:30:f0:
                    2b:a2:b7:94:7c:1d:4d:ac:ca:65:b1:8f:0f:55:59:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E4:9C:86:25:18:48:52:18:96:66:6B:77:14:76:EA:37:D9:77:EA
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:5a:b0:3c:b2:17:8a:b3:eb:ad:22:6f:ce:53:20:7b:f2:
         75:78:f2:39:9a:a7:c5:e6:b1:83:9b:a7:fb:e9:d0:99:f5:bf:
         d2:15:ca:ad:2a:db:de:c3:c7:2c:0a:8a:42:24:9b:c8:32:09:
         d5:59:52:b2:af:c4:54:6e:ce:45:b6:9c:67:e4:59:28:d0:1b:
         ac:ad:c8:a0:76:7d:79:cf:e8:2a:8a:74:32:10:27:ae:c2:23:
         55:8b:5e:1e:21:a2:d6:54:ad:a6:49:08:99:eb:ea:ab:24:6a:
         88:8c:e9:5a:55:a8:67:35:13:30:fa:ef:7c:14:db:1d:c1:58:
         4f:62:96:5d:b5:e3:07:55:d0:b5:15:2c:91:c8:f3:34:ac:8f:
         a4:6c:1a:c8:e7:88:a3:c9:70:ed:d0:b0:b5:ca:a6:fd:c9:d0:
         19:79:14:3b:2d:0a:65:fd:99:66:f0:80:40:88:8e:b4:1a:ee:
         9a:04:c0:15:a8:05:75:7f:c4:46:70:21:e8:96:7f:b7:57:9c:
         87:85:a2:0c:c1:d9:af:25:ef:d9:22:aa:f3:16:ca:0c:8a:04:
         29:3a:b7:b7:5f:da:58:f6:4c:6e:b2:5e:f0:58:dc:10:a3:ef:
         12:52:39:ab:5e:34:f5:6b:84:98:5e:40:32:55:8a:1f:f9:8f:
         c6:fc:5a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbleiO8VOlh03PqAwLe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjYwMzI5MTAwMDMxWhcNMjYwMzMwMTAwMDMxWjAzMTEwLwYDVQQD
EygwOWU0OWM4NjI1MTg0ODUyMTg5NjY2NmI3NzE0NzZlYTM3ZDk3N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2klh9RlCHwNNw3t4qNhWUESC49R+
tssquDnBeCWgAI0KoxqoVwiy+Q0jyoxkd2/bPtxXHWOeihgrFSE67nPxeTwK1m7/
BaqnmKB87LbhJ5nMWnVbMDHSVNJ8CLlTk3NZqpJNGRtdIrN7QiWHR2LE8fUpmdn/
R3Jp3GilqQn1GeJKLxrzO+abz+lkSFMeRfawmzwSb1OmyhW+N3BANpH/EqJC8Qb0
mr7h2p+18pehgNKQbsn9hs84nsCDAYC8vvBXXIiss0ExVfNMJhfJSRTNzANTXoMx
ncMCWB3wGsEC+JFjvyXI1qZMN0M5saKYMPAroreUfB1NrMplsY8PVVkgMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnknIYlGEhSGJZma3cUduo32XfqMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv1asDyy
F4qz660ib85TIHvydXjyOZqnxeaxg5un++nQmfW/0hXKrSrb3sPHLAqKQiSbyDIJ
1VlSsq/EVG7ORbacZ+RZKNAbrK3IoHZ9ec/oKop0MhAnrsIjVYteHiGi1lStpkkI
mevqqyRqiIzpWlWoZzUTMPrvfBTbHcFYT2KWXbXjB1XQtRUskcjzNKyPpGwayOeI
o8lw7dCwtcqm/cnQGXkUOy0KZf2ZZvCAQIiOtBrumgTAFagFdX/ERnAh6JZ/t1ec
h4WiDMHZryXv2SKq8xbKDIoEKTq3t1/aWPZMbrJe8FjcEKPvElI5q1409WuEmF5A
MlWKH/mPxvxafg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:59 2026 by rpki-client