Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File:                     kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier:          gXJk6VDpDj4Ow/6VKc0grsmWwS/N6v/v7+4VPIyOpts=
Subject key identifier:   B3:D6:4C:E4:4F:F7:78:E0:33:F6:FE:82:56:4E:EB:E0:C8:A7:58:4B
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer:       /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial:       019CE5C9214FAD2852E61E629A3E13682774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number:          08B1
Signing time:             Fri 13 Mar 2026 06:01:29 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:29 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:29 +0000
Files and hashes:         1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
                          2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: bWNcaAc1KrXxuETVVDHpmlQE7Ay5nOoP6ZPB0zgbY58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:21:4f:ad:28:52:e6:1e:62:9a:3e:13:68:27:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
        Validity
            Not Before: Mar 13 06:01:29 2026 GMT
            Not After : Mar 14 06:01:29 2026 GMT
        Subject: CN=b3d64ce44ff778e033f6fe82564eebe0c8a7584b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:da:4a:2c:c3:f7:2d:38:61:50:4a:10:11:
                    58:1f:cb:2e:c2:5c:c2:74:fe:55:7d:14:e4:e9:ce:
                    59:e7:d3:5b:e8:ea:8a:57:a9:a5:67:e9:e2:18:44:
                    cf:dc:2f:b5:4c:09:f9:01:2e:bf:f4:65:98:a9:ab:
                    23:a7:6b:59:08:22:9d:56:7d:5c:5f:c3:52:04:26:
                    c6:a1:dc:10:b9:be:eb:cb:99:73:f6:3b:c5:22:d7:
                    85:92:41:ee:33:da:d8:68:85:37:3e:50:5f:83:a5:
                    e5:3e:a9:92:e7:2e:a3:91:b7:33:fd:45:f8:ea:15:
                    93:9d:3d:d2:3f:16:99:eb:9d:43:6d:83:9b:47:76:
                    84:5d:99:e6:c1:3e:05:d3:95:b3:99:99:5c:39:ed:
                    e9:06:c9:3a:44:b4:ab:a4:85:1c:b7:19:35:4c:82:
                    50:7a:78:fc:66:d1:3a:11:d8:89:a0:b2:90:8f:43:
                    45:e6:b4:4e:f1:09:dd:6e:b9:cc:4f:09:30:4e:2b:
                    91:a2:09:a6:e7:26:4e:da:eb:32:db:38:61:1c:7b:
                    c1:b4:83:80:68:ce:a5:15:03:86:86:a5:20:a5:51:
                    65:da:4c:be:98:cb:2b:9a:5c:88:29:60:f9:e3:8f:
                    f6:4a:af:bc:ee:f9:9d:19:1a:2a:f9:9c:e3:cf:68:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:4C:E4:4F:F7:78:E0:33:F6:FE:82:56:4E:EB:E0:C8:A7:58:4B
            X509v3 Authority Key Identifier:
                keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:6b:5c:2a:7a:01:19:72:3f:4a:44:62:2e:f3:7c:0b:10:
         9e:29:20:5c:7a:15:07:ee:54:57:79:65:a7:e7:3b:ab:79:d9:
         3b:b1:44:ad:fb:7c:0f:e3:93:71:0f:cd:f7:53:8b:a3:84:8f:
         f7:4f:aa:b9:14:9d:86:49:93:a0:1c:09:e3:c6:a0:e7:8e:1c:
         d5:de:77:c2:1a:44:4f:99:4d:fe:6e:2f:f4:56:00:ec:e7:af:
         aa:ce:81:14:a0:6b:72:5f:03:d2:c4:1a:2f:66:3e:0b:fb:ad:
         11:7f:16:81:09:64:ce:7a:38:04:50:99:d9:80:6e:48:b3:4b:
         71:6d:80:f6:de:11:4b:a3:79:33:0f:c7:ff:67:a2:cb:f5:a2:
         e7:ec:e1:b3:6e:f5:7a:37:3f:ee:9f:88:b5:be:68:c3:10:27:
         46:f8:71:1a:16:1e:90:fb:ea:b4:f1:9f:38:3d:fb:b4:66:67:
         47:73:ed:9e:58:f7:5c:bc:fd:f1:6f:a2:81:f1:50:ae:82:41:
         c7:29:44:13:43:95:13:3d:6b:df:74:41:69:6c:ed:23:c0:66:
         1c:7f:10:9f:ef:95:d4:c2:44:9c:7f:4c:9f:45:86:43:aa:d4:
         c0:7e:18:f7:47:ee:1a:28:73:c7:5d:bf:f9:de:05:4a:bc:99:
         09:29:57:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlySFPrShS5h5imj4TaCd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNmM5OGI1MTA2MWYzNDBjY2U0ZTBiNGNlMzYxY2UzNGFi
YzJmY2UwHhcNMjYwMzEzMDYwMTI5WhcNMjYwMzE0MDYwMTI5WjAzMTEwLwYDVQQD
EyhiM2Q2NGNlNDRmZjc3OGUwMzNmNmZlODI1NjRlZWJlMGM4YTc1ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gjaSizD9y04YVBKEBFYH8suwlzC
dP5VfRTk6c5Z59Nb6OqKV6mlZ+niGETP3C+1TAn5AS6/9GWYqasjp2tZCCKdVn1c
X8NSBCbGodwQub7ry5lz9jvFIteFkkHuM9rYaIU3PlBfg6XlPqmS5y6jkbcz/UX4
6hWTnT3SPxaZ651DbYObR3aEXZnmwT4F05WzmZlcOe3pBsk6RLSrpIUctxk1TIJQ
enj8ZtE6EdiJoLKQj0NF5rRO8QndbrnMTwkwTiuRogmm5yZO2usy2zhhHHvBtIOA
aM6lFQOGhqUgpVFl2ky+mMsrmlyIKWD544/2Sq+87vmdGRoq+Zzjz2j6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPWTORP93jgM/b+glZO6+DIp1hLMB8GA1UdIwQY
MBaAFJJsmLUQYfNAzOTgtM42HONKvC/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTkt
ZGM3NmZlY2E5NGJmLzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTktZGM3NmZlY2E5NGJm
LzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK5rXCp6
ARlyP0pEYi7zfAsQnikgXHoVB+5UV3llp+c7q3nZO7FErft8D+OTcQ/N91OLo4SP
90+quRSdhkmToBwJ48ag544c1d53whpET5lN/m4v9FYA7Oevqs6BFKBrcl8D0sQa
L2Y+C/utEX8WgQlkzno4BFCZ2YBuSLNLcW2A9t4RS6N5Mw/H/2eiy/Wi5+zhs271
ejc/7p+Itb5owxAnRvhxGhYekPvqtPGfOD37tGZnR3Ptnlj3XLz98W+igfFQroJB
xylEE0OVEz1r33RBaWztI8BmHH8Qn++V1MJEnH9Mn0WGQ6rUwH4Y90fuGihzx12/
+d4FSryZCSlXZw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:16 2026 by rpki-client