Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File:                     rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier:          35yAlhsmjqDw2komlObESzsREKeWwfjThVN9RWPfKEI=
Subject key identifier:   01:6B:AC:8C:B3:CE:29:85:FE:96:2A:79:FF:D0:5A:7C:6B:BE:38:F4
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer:       /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial:       019CE3D9B2511A2E311065773B1152D7E9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number:          06
Signing time:             Thu 12 Mar 2026 21:00:20 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:20 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:20 +0000
Files and hashes:         1: 901QMZpj9kYGQic0ByuIClQsnbM.roa (hash: eHYj3OQYCMndtclY/uYQGqhf0cxoZxOoh8ZvXynsiaw=)
                          2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: C/VlFJ6Fy5qs2ua2T9hpjoPML7AmFC6YMhSqafPbWVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:b2:51:1a:2e:31:10:65:77:3b:11:52:d7:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
        Validity
            Not Before: Mar 12 21:00:20 2026 GMT
            Not After : Mar 13 21:00:20 2026 GMT
        Subject: CN=016bac8cb3ce2985fe962a79ffd05a7c6bbe38f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:e6:be:d4:ec:0b:35:68:13:5e:8a:fa:1b:
                    22:6c:2b:a7:59:c2:74:7b:ec:80:df:d3:56:63:44:
                    fa:6c:72:1d:40:47:e9:77:f5:2f:4a:64:3c:96:1e:
                    52:9f:65:df:e9:c1:4d:c7:4c:1c:3d:5d:d7:af:3f:
                    89:35:ac:53:b3:f6:86:cd:84:c4:e2:e8:c3:08:3f:
                    af:55:5e:78:af:ca:8e:5c:cc:b5:c3:ca:0f:58:62:
                    f2:e4:ad:a6:8c:3f:58:c7:a1:6f:c4:7e:a3:8b:23:
                    f9:74:d3:45:bb:ec:b1:cb:2a:bf:0d:d4:3f:58:e4:
                    95:f0:f1:ff:9b:79:c6:02:17:75:75:07:ca:de:b3:
                    5e:4a:a2:be:dd:c2:2e:c7:ae:44:9c:18:be:bf:74:
                    78:07:c2:a1:f6:4c:17:e8:1c:bd:98:14:85:d8:27:
                    28:4b:2c:79:db:cc:f8:9a:48:cc:b1:41:c7:52:2d:
                    2d:fb:9f:97:91:6c:2d:f7:4f:53:4f:6f:d8:2f:f0:
                    9b:cd:0e:49:e1:ba:e5:19:81:55:f4:4a:4c:6d:ef:
                    0e:8f:9f:f2:3d:1b:cb:7e:91:fe:ad:f1:c6:39:42:
                    08:0d:33:2c:89:2a:32:bd:2a:4b:4d:32:d6:9c:41:
                    5b:c1:25:ca:3d:96:9f:f2:4d:b0:3d:ab:44:ff:52:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:AC:8C:B3:CE:29:85:FE:96:2A:79:FF:D0:5A:7C:6B:BE:38:F4
            X509v3 Authority Key Identifier:
                keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:48:14:1f:48:9f:23:9a:bf:6d:35:11:49:0c:a1:0c:b8:
         e0:52:f9:e4:f8:b0:b5:f6:36:9e:4e:19:33:56:42:d4:26:de:
         d9:b7:62:55:85:30:e3:67:a9:b9:e4:15:4b:cd:9a:06:17:f8:
         82:9d:a5:8f:85:3b:ad:55:49:cb:4d:42:3f:b9:6e:9e:37:2e:
         58:fb:72:dd:4f:a1:4e:0f:2b:b1:75:f1:1e:bc:46:cd:35:cd:
         a9:a2:5a:2c:cc:bc:c4:5d:fe:f9:b5:90:42:3d:ad:6d:52:e0:
         1b:7a:11:75:c1:fa:2d:5c:19:82:3a:ba:be:4a:58:30:d6:92:
         41:23:76:95:4c:5e:8a:9a:35:70:8b:f1:95:e2:9a:65:58:28:
         99:19:5c:30:0e:ee:5b:95:d8:ee:4c:3d:e1:53:d7:87:9a:82:
         d6:80:8b:ba:59:bd:4f:0b:7a:71:af:6e:c2:17:ed:66:38:48:
         9d:3f:3a:b6:89:00:51:8e:01:54:a4:61:ed:00:db:0e:15:bf:
         bb:f7:f0:6a:ed:ce:5c:ea:7b:65:90:27:45:88:5c:17:f2:8e:
         d6:f1:83:9d:fa:fe:b7:46:b3:a0:1b:6c:32:2e:7f:d4:11:1c:
         f6:87:2d:34:81:3a:98:bb:3f:fc:2e:ce:72:75:5d:6c:c0:68:
         04:9d:6c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2bJRGi4xEGV3OxFS1+nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODJjOWRkOWQ2Y2NmYjM4Y2ExMTY0MGUxMDJmNzUxYWUy
NzQ5MjcwHhcNMjYwMzEyMjEwMDIwWhcNMjYwMzEzMjEwMDIwWjAzMTEwLwYDVQQD
EygwMTZiYWM4Y2IzY2UyOTg1ZmU5NjJhNzlmZmQwNWE3YzZiYmUzOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzPmvtTsCzVoE16K+hsibCunWcJ0
e+yA39NWY0T6bHIdQEfpd/UvSmQ8lh5Sn2Xf6cFNx0wcPV3Xrz+JNaxTs/aGzYTE
4ujDCD+vVV54r8qOXMy1w8oPWGLy5K2mjD9Yx6FvxH6jiyP5dNNFu+yxyyq/DdQ/
WOSV8PH/m3nGAhd1dQfK3rNeSqK+3cIux65EnBi+v3R4B8Kh9kwX6By9mBSF2Cco
Syx528z4mkjMsUHHUi0t+5+XkWwt909TT2/YL/CbzQ5J4brlGYFV9EpMbe8Oj5/y
PRvLfpH+rfHGOUIIDTMsiSoyvSpLTTLWnEFbwSXKPZaf8k2wPatE/1K4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFrrIyzzimF/pYqef/QWnxrvjj0MB8GA1UdIwQY
MBaAFKyCyd2dbM+zjKEWQOEC91GuJ0knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklMSjNaMXN6N09Nb1JaQTRRTDNVYTRuU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mNTYzNGYtYzQ5Zi00ZDlhLTk1MzQt
MTc1Njg4N2RkNGNiLzEvcklMSjNaMXN6N09Nb1JaQTRRTDNVYTRuU1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mNTYzNGYtYzQ5Zi00ZDlhLTk1MzQtMTc1Njg4N2RkNGNi
LzEvcklMSjNaMXN6N09Nb1JaQTRRTDNVYTRuU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQddIFB9I
nyOav201EUkMoQy44FL55PiwtfY2nk4ZM1ZC1Cbe2bdiVYUw42epueQVS82aBhf4
gp2lj4U7rVVJy01CP7lunjcuWPty3U+hTg8rsXXxHrxGzTXNqaJaLMy8xF3++bWQ
Qj2tbVLgG3oRdcH6LVwZgjq6vkpYMNaSQSN2lUxeipo1cIvxleKaZVgomRlcMA7u
W5XY7kw94VPXh5qC1oCLulm9Twt6ca9uwhftZjhInT86tokAUY4BVKRh7QDbDhW/
u/fwau3OXOp7ZZAnRYhcF/KO1vGDnfr+t0azoBtsMi5/1BEc9octNIE6mLs//C7O
cnVdbMBoBJ1stQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:20:02 2026 by rpki-client