Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File:                     1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier:          vML/LeNZsE4dwnh1fXRRCbK2Jwv/Igos8Yn6H5AAuQE=
Subject key identifier:   10:32:32:28:9B:4D:0C:B3:13:B1:AC:4D:23:B0:AE:A2:03:E8:55:D6
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       019CAD9067ED81F0305BEF60A5733079D469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number:          0B88
Signing time:             Mon 02 Mar 2026 08:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:47 +0000
Files and hashes:         1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: f1cfKTIYaHxL0TGRyjdshbOj/87Jbd7YZVVM3y6zqRg=)
                          2: _bF1xY0tz7JbEXvFbfl2J9z_aGE.roa (hash: RJ6E1ubvdFwW8RqYbgq5Su4V9SdqGf0qZCB+qrw7Uhg=)
                          3: d55MmSSrMOAa7YboXbvWTauB-vE.roa (hash: u/wjI69y9HM6cDlahIXVWn271sSNYCBmkSyoOi+8hS4=)
                          4: tSXjnZHfIFRPkfR23KuWOEzYmso.roa (hash: bT+yAY7ld62QoBr+Sm2VFzdlFNBEOfbRTYnS7F4jOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:67:ed:81:f0:30:5b:ef:60:a5:73:30:79:d4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Mar  2 08:00:47 2026 GMT
            Not After : Mar  3 08:00:47 2026 GMT
        Subject: CN=103232289b4d0cb313b1ac4d23b0aea203e855d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:53:48:96:30:c9:10:26:0e:bb:45:84:7a:
                    e7:59:63:41:17:42:21:e3:69:ff:fe:17:d2:1d:ce:
                    52:0c:bd:ea:36:82:da:fd:82:00:f2:92:f4:50:2c:
                    6e:4f:b4:5b:25:1c:c3:05:41:15:97:2a:54:5c:bf:
                    91:b9:d3:57:9d:ff:0b:a5:13:a4:2d:2e:42:4b:43:
                    28:93:7f:c1:76:e3:a2:78:73:c4:1a:6e:30:01:0c:
                    5e:4f:bc:ac:66:fd:b2:ca:45:5c:52:be:8a:7d:53:
                    f0:03:d6:a4:41:c3:9d:2d:18:cc:07:03:31:f2:97:
                    fb:17:7c:b9:88:e4:e4:82:96:14:36:c0:10:8f:25:
                    2a:a6:26:cf:6c:30:b1:ca:82:19:df:84:48:62:7f:
                    86:8e:d0:0c:23:98:4d:fc:01:78:c6:86:dd:9c:79:
                    f0:8a:8b:c0:6f:c7:3d:dd:e7:cf:85:ec:a6:19:b3:
                    6f:e9:b9:07:65:70:7e:b7:61:7b:8d:0e:ff:12:9f:
                    5e:a1:91:b8:9c:90:60:ba:69:1e:76:c1:14:da:7f:
                    bf:df:ac:e1:ce:20:e2:49:ff:ae:d0:3e:81:d7:78:
                    61:66:c5:6e:8c:a5:66:5c:ac:a0:f3:ba:5b:af:5e:
                    9e:fc:ac:14:ef:59:e1:8e:4e:59:da:fd:fb:ef:c6:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:32:28:9B:4D:0C:B3:13:B1:AC:4D:23:B0:AE:A2:03:E8:55:D6
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:cb:7c:6c:a8:f8:77:3b:f6:03:d0:00:cb:a3:80:f0:ee:
         b8:67:7a:cf:02:99:4c:50:7b:85:19:85:60:d9:dd:17:ab:4c:
         3a:83:f5:1f:e2:b6:f7:3c:4a:1a:26:bb:db:aa:21:ba:e2:22:
         13:17:5b:d1:e8:d9:1c:ca:3d:7f:0a:e0:a0:44:ce:8f:d2:91:
         12:03:34:ff:96:eb:6b:d6:55:04:e3:19:8b:e4:0a:91:a2:67:
         2c:d3:f2:22:0d:aa:7a:9e:72:ef:99:24:c5:d1:00:8d:aa:bf:
         3e:63:ba:8a:f5:68:bd:95:f6:53:c7:20:a7:ee:b6:1a:5d:50:
         fb:00:0b:14:ba:63:0e:8b:9e:0a:d3:85:ef:5b:2c:6e:88:ac:
         1f:1d:02:9d:16:2c:f3:51:7d:ab:47:f3:2a:63:f4:78:17:3b:
         e5:2f:36:02:ac:f6:4f:23:a4:18:95:76:14:f8:4e:45:67:ae:
         2f:ff:3d:74:f2:33:99:f3:29:7b:e4:77:04:10:93:0a:c3:a8:
         81:13:e7:e8:ad:4d:fc:be:d4:46:d4:f4:bf:ab:f1:4a:9e:0d:
         e3:da:7c:37:a8:9b:f2:cc:5d:7a:b6:fb:05:eb:ea:4c:16:a4:
         5f:ac:77:66:35:aa:93:19:6c:4b:47:49:cf:c1:a5:3e:6b:14:
         30:39:60:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZytkGftgfAwW+9gpXMwedRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj
OTIwMmIwHhcNMjYwMzAyMDgwMDQ3WhcNMjYwMzAzMDgwMDQ3WjAzMTEwLwYDVQQD
EygxMDMyMzIyODliNGQwY2IzMTNiMWFjNGQyM2IwYWVhMjAzZTg1NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXdTSJYwyRAmDrtFhHrnWWNBF0Ih
42n//hfSHc5SDL3qNoLa/YIA8pL0UCxuT7RbJRzDBUEVlypUXL+RudNXnf8LpROk
LS5CS0Mok3/BduOieHPEGm4wAQxeT7ysZv2yykVcUr6KfVPwA9akQcOdLRjMBwMx
8pf7F3y5iOTkgpYUNsAQjyUqpibPbDCxyoIZ34RIYn+GjtAMI5hN/AF4xobdnHnw
iovAb8c93efPheymGbNv6bkHZXB+t2F7jQ7/Ep9eoZG4nJBgumkedsEU2n+/36zh
ziDiSf+u0D6B13hhZsVujKVmXKyg87pbr16e/KwU71nhjk5Z2v3778Y1qwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBAyMiibTQyzE7GsTSOwrqID6FXWMB8GA1UdIwQY
MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl
LTkyMjM4NDZmZjMwYi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAwLzEwMTEyNi0xZDMyLTQyYTYtODdmZS05MjIzODQ2ZmYz
MGIvMS8xLUFOZXlkNGxjTUhucDl0QTRuTGtWVWpKSUNzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT7L
fGyo+Hc79gPQAMujgPDuuGd6zwKZTFB7hRmFYNndF6tMOoP1H+K29zxKGia726oh
uuIiExdb0ejZHMo9fwrgoETOj9KREgM0/5bra9ZVBOMZi+QKkaJnLNPyIg2qep5y
75kkxdEAjaq/PmO6ivVovZX2U8cgp+62Gl1Q+wALFLpjDoueCtOF71ssboisHx0C
nRYs81F9q0fzKmP0eBc75S82Aqz2TyOkGJV2FPhORWeuL/89dPIzmfMpe+R3BBCT
CsOogRPn6K1N/L7URtT0v6vxSp4N49p8N6ib8sxderb7BevqTBakX6x3ZjWqkxls
S0dJz8GlPmsUMDlg8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:06 2026 by rpki-client