Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          bT1xum8N96OQHV8nEWteFne41/ygTl7WbmoHw0TPtCI=
Subject key identifier:   63:F3:0D:17:78:F7:1B:7E:F3:67:C5:98:C1:C0:38:FD:3E:3D:91:EC
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       019CAA589AA516DBF0AE7EC68CF53B36C874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          0F3E
Signing time:             Sun 01 Mar 2026 17:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:59 +0000
Files and hashes:         1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
                          2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: w0xJOOjiIroSvPvNZArgQVoAgDdPd7syCxmdNziC1ew=)
                          3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:9a:a5:16:db:f0:ae:7e:c6:8c:f5:3b:36:c8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Mar  1 17:00:59 2026 GMT
            Not After : Mar  2 17:00:59 2026 GMT
        Subject: CN=63f30d1778f71b7ef367c598c1c038fd3e3d91ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a4:8a:ec:03:aa:4e:0c:50:b9:66:91:89:6d:
                    ca:67:ec:43:d7:33:28:06:87:93:f7:bc:ad:d6:b2:
                    f0:0c:4c:8e:e0:da:0d:4f:1f:44:85:a2:d6:7a:cb:
                    47:b8:8b:6f:60:2d:cf:44:00:cd:bf:d7:81:53:9c:
                    67:af:a8:1f:1b:60:d9:f4:0a:b2:2f:43:12:9c:a0:
                    09:73:b8:9b:a0:28:7d:bd:5d:03:df:74:89:62:09:
                    0e:2f:fe:a4:1d:db:73:13:bb:4f:aa:db:0f:5f:73:
                    01:c3:98:46:15:8d:14:d8:53:17:c5:17:b1:a8:f6:
                    8d:b7:8f:87:3b:cd:0f:7f:03:4b:a3:62:3c:50:cf:
                    e1:19:37:6e:6d:3c:d6:a9:8b:de:10:25:75:69:73:
                    15:ce:de:51:2f:bd:90:0d:1d:9f:9f:0c:06:b3:f9:
                    e7:57:99:97:62:c7:7c:14:15:f9:f6:f4:71:74:00:
                    08:96:b6:72:22:e0:43:4e:07:22:7d:48:3a:9e:49:
                    78:5f:ff:38:bf:57:15:b2:43:23:57:45:d1:cf:19:
                    b9:a9:da:a9:8e:46:36:3e:7e:ab:39:7c:f6:cc:33:
                    c4:b7:b0:d0:26:c3:f4:a9:a7:78:0e:8f:cb:2f:cb:
                    01:8a:e1:0c:d4:bb:56:7a:10:8a:f6:4b:02:f6:9a:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:0D:17:78:F7:1B:7E:F3:67:C5:98:C1:C0:38:FD:3E:3D:91:EC
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:43:2e:b0:c8:f1:15:83:17:79:9e:e0:68:99:5b:e1:01:05:
         31:90:c5:b1:90:50:5c:ee:6f:10:78:7b:3c:67:fb:a3:4b:7f:
         a2:83:50:05:66:aa:d3:0c:bf:d9:c8:12:56:b6:f1:1a:14:eb:
         ae:8c:19:0e:44:f1:da:a9:28:ca:cf:66:87:a1:26:51:b6:5e:
         b2:2f:3c:e2:ba:31:7a:e3:67:e0:38:e4:49:c1:b3:2e:43:a6:
         8b:ce:b9:58:ca:68:16:38:88:88:37:f3:44:39:6a:53:3d:74:
         b3:fc:88:84:b1:17:e3:d6:f1:93:a7:18:06:a4:9b:9c:e8:ef:
         81:bd:38:d1:a6:42:5e:31:17:ee:7d:83:61:eb:82:f4:61:b9:
         2b:80:c9:e7:53:2c:26:be:07:86:77:54:71:45:a0:6f:21:e2:
         8d:1f:af:e8:fe:c3:6f:4d:82:77:c5:b4:d0:ef:57:32:98:6c:
         eb:9a:b4:52:c8:04:b5:13:df:6f:20:27:d3:6d:8b:2e:a5:6f:
         f8:94:78:df:86:18:54:8e:36:d6:90:77:fd:c7:82:b5:0a:03:
         53:4b:62:cb:68:81:2c:ed:9d:ed:a6:be:a7:d8:d8:b9:b6:9a:
         56:e5:86:59:fa:b4:b0:5e:a9:07:8a:22:81:28:3a:ca:c0:16:
         00:87:56:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJqlFtvwrn7GjPU7Nsh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjYwMzAxMTcwMDU5WhcNMjYwMzAyMTcwMDU5WjAzMTEwLwYDVQQD
Eyg2M2YzMGQxNzc4ZjcxYjdlZjM2N2M1OThjMWMwMzhmZDNlM2Q5MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aSK7AOqTgxQuWaRiW3KZ+xD1zMo
BoeT97yt1rLwDEyO4NoNTx9EhaLWestHuItvYC3PRADNv9eBU5xnr6gfG2DZ9Aqy
L0MSnKAJc7iboCh9vV0D33SJYgkOL/6kHdtzE7tPqtsPX3MBw5hGFY0U2FMXxRex
qPaNt4+HO80PfwNLo2I8UM/hGTdubTzWqYveECV1aXMVzt5RL72QDR2fnwwGs/nn
V5mXYsd8FBX59vRxdAAIlrZyIuBDTgcifUg6nkl4X/84v1cVskMjV0XRzxm5qdqp
jkY2Pn6rOXz2zDPEt7DQJsP0qad4Do/LL8sBiuEM1LtWehCK9ksC9pon9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPzDRd49xt+82fFmMHAOP0+PZHsMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkMusMjx
FYMXeZ7gaJlb4QEFMZDFsZBQXO5vEHh7PGf7o0t/ooNQBWaq0wy/2cgSVrbxGhTr
rowZDkTx2qkoys9mh6EmUbZesi884roxeuNn4DjkScGzLkOmi865WMpoFjiIiDfz
RDlqUz10s/yIhLEX49bxk6cYBqSbnOjvgb040aZCXjEX7n2DYeuC9GG5K4DJ51Ms
Jr4HhndUcUWgbyHijR+v6P7Db02Cd8W00O9XMphs65q0UsgEtRPfbyAn022LLqVv
+JR434YYVI421pB3/ceCtQoDU0tiy2iBLO2d7aa+p9jYubaaVuWGWfq0sF6pB4oi
gSg6ysAWAIdWUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:01 2026 by rpki-client