Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File:                     CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier:          rxwQj2s7G9mxUpzemqiuHY6JErNlHC7dRmNb7oNwHqY=
Subject key identifier:   6E:56:DD:BA:1A:E2:66:AC:EF:C6:C8:8A:75:88:53:D8:D0:0B:06:EF
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer:       /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial:       019CEE94A0C6FF956F4F049EC8E38B797ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number:          1089
Signing time:             Sat 14 Mar 2026 23:00:43 +0000
Manifest this update:     Sat 14 Mar 2026 23:00:43 +0000
Manifest next update:     Sun 15 Mar 2026 23:00:43 +0000
Files and hashes:         1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
                          2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
                          3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: STYqdn2bm3i8NliT8ZkgIU50IeI3tKxs7/V40GBUPXM=)
                          4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ee:94:a0:c6:ff:95:6f:4f:04:9e:c8:e3:8b:79:7a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
        Validity
            Not Before: Mar 14 23:00:43 2026 GMT
            Not After : Mar 15 23:00:43 2026 GMT
        Subject: CN=6e56ddba1ae266acefc6c88a758853d8d00b06ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:3f:9d:ae:bb:c8:4d:34:37:36:b6:fe:fe:
                    e1:cf:7d:65:04:2d:55:02:a1:98:9b:1a:34:41:6c:
                    2a:64:6b:0a:25:14:62:a4:8d:40:f1:1b:74:83:cd:
                    f4:c1:ac:d7:69:d2:b5:be:10:8c:f5:e0:60:87:a1:
                    22:28:43:15:4d:7e:c3:3f:60:4c:8a:31:eb:64:4b:
                    d4:e4:41:9f:19:51:e2:df:00:a2:9e:06:72:af:fa:
                    cc:18:c6:a6:6b:f8:69:94:98:52:29:dd:9c:21:17:
                    6d:0c:c5:2d:b2:88:bd:3e:20:87:bc:78:f2:26:ad:
                    66:1b:8c:8f:9a:7b:f8:5e:c6:be:e1:54:2b:00:a7:
                    bc:54:8e:7b:f3:74:44:4c:2d:be:29:55:32:5b:80:
                    22:f3:05:6b:e5:30:36:5f:af:11:c1:cc:a0:af:f7:
                    70:b8:28:00:10:b9:47:3b:18:63:60:17:0b:87:ee:
                    f5:57:8c:1f:eb:8d:ab:e8:7a:15:98:bb:71:10:2a:
                    38:f7:da:f0:91:fb:9c:ad:59:ff:7f:7b:9f:10:a3:
                    27:57:4d:e9:82:e7:45:cb:d4:4e:a4:8f:8e:99:b0:
                    ab:9d:26:5b:e8:6a:59:b3:fd:bd:06:76:d6:ef:86:
                    df:05:d6:3b:74:72:68:97:56:80:be:f8:4d:3c:87:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:DD:BA:1A:E2:66:AC:EF:C6:C8:8A:75:88:53:D8:D0:0B:06:EF
            X509v3 Authority Key Identifier:
                keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:54:d8:99:59:3e:14:d0:d4:7e:79:3b:47:2f:ed:35:ab:
         72:7a:15:47:d3:07:0b:8f:cc:fa:da:4e:84:42:3b:83:cf:0a:
         b7:08:76:6b:e0:b7:fb:f1:5b:c2:0b:00:b7:b3:76:0c:a8:f7:
         93:80:55:ef:4e:ee:80:5a:b7:9d:44:c6:96:56:28:49:cf:bc:
         40:87:d5:c1:11:36:3d:65:ed:57:0b:12:6e:a7:a6:05:13:3f:
         1e:c8:c1:33:ce:6c:38:b0:38:5f:b4:66:1b:d3:db:e1:35:4a:
         8d:9f:2f:c7:52:06:86:46:02:e4:89:61:fb:f7:7f:2c:1e:f6:
         ce:37:fa:1e:be:99:0a:95:7b:93:3b:2b:fb:66:72:4d:ea:e5:
         24:76:eb:f8:b1:b3:2a:8a:7e:6b:5c:2a:db:ea:0e:8e:b4:bd:
         4f:fe:f7:f9:50:4c:8d:33:98:02:ae:87:97:b2:f7:88:b6:9c:
         8a:1a:3e:65:e0:25:1e:46:21:d6:e8:40:21:7f:b0:ed:ab:fb:
         e6:ec:b8:ae:6b:be:c3:22:3a:df:05:5e:1c:6b:93:59:9b:25:
         a9:a3:18:63:b1:bf:0f:1e:01:51:5a:78:c9:bc:79:9e:12:b6:
         52:30:55:d5:e3:ad:4e:08:74:05:9a:75:26:e8:c3:96:43:be:
         d6:de:85:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzulKDG/5VvTwSeyOOLeXrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwMzE0MjMwMDQzWhcNMjYwMzE1MjMwMDQzWjAzMTEwLwYDVQQD
Eyg2ZTU2ZGRiYTFhZTI2NmFjZWZjNmM4OGE3NTg4NTNkOGQwMGIwNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9g/na67yE00Nza2/v7hz31lBC1V
AqGYmxo0QWwqZGsKJRRipI1A8Rt0g830wazXadK1vhCM9eBgh6EiKEMVTX7DP2BM
ijHrZEvU5EGfGVHi3wCingZyr/rMGMama/hplJhSKd2cIRdtDMUtsoi9PiCHvHjy
Jq1mG4yPmnv4Xsa+4VQrAKe8VI5783RETC2+KVUyW4Ai8wVr5TA2X68Rwcygr/dw
uCgAELlHOxhjYBcLh+71V4wf642r6HoVmLtxECo499rwkfucrVn/f3ufEKMnV03p
gudFy9ROpI+OmbCrnSZb6GpZs/29BnbW74bfBdY7dHJol1aAvvhNPIfd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5W3boa4mas78bIinWIU9jQCwbvMB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOhU2JlZ
PhTQ1H55O0cv7TWrcnoVR9MHC4/M+tpOhEI7g88Ktwh2a+C3+/FbwgsAt7N2DKj3
k4BV707ugFq3nUTGllYoSc+8QIfVwRE2PWXtVwsSbqemBRM/HsjBM85sOLA4X7Rm
G9Pb4TVKjZ8vx1IGhkYC5Ilh+/d/LB72zjf6Hr6ZCpV7kzsr+2ZyTerlJHbr+LGz
Kop+a1wq2+oOjrS9T/73+VBMjTOYAq6Hl7L3iLaciho+ZeAlHkYh1uhAIX+w7av7
5uy4rmu+wyI63wVeHGuTWZslqaMYY7G/Dx4BUVp4ybx5nhK2UjBV1eOtTgh0BZp1
JujDlkO+1t6Frg==
-----END CERTIFICATE-----
Generated at Sun Mar 15 07:31:21 2026 by rpki-client