Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File:                     0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier:          hD16RkS0dQIwaHicN/TbgJ7Us4RJiZAwCsQFWzftLVo=
Subject key identifier:   B2:8F:3E:2F:82:B8:C9:92:E6:1A:9D:35:64:97:57:7B:DC:A0:EF:26
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer:       /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial:       019CAC1023FD68332B1EA7BF26EFCFB52202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number:          0F08
Signing time:             Mon 02 Mar 2026 01:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:04 +0000
Files and hashes:         1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: lF6mmsW1bxW+1uQ0PYD4XDC0rtIUFagCBwQYMZ4YMDM=)
                          2: MipuBL2VGxmcxz7-wPC6PIvzlC0.roa (hash: pbdG1q6RrelOu8y48wOuYlZBSQEt24vc2iBxdFAT4TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:23:fd:68:33:2b:1e:a7:bf:26:ef:cf:b5:22:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
        Validity
            Not Before: Mar  2 01:01:04 2026 GMT
            Not After : Mar  3 01:01:04 2026 GMT
        Subject: CN=b28f3e2f82b8c992e61a9d356497577bdca0ef26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:21:2f:57:ff:71:19:3d:67:3f:80:69:47:
                    e2:3d:36:dd:4c:19:16:cf:00:41:09:eb:3d:90:ea:
                    46:09:a7:e4:f3:8d:94:f0:1b:ae:eb:68:84:20:61:
                    60:14:2b:89:a7:69:80:bb:61:49:e0:b7:f1:0c:ac:
                    c9:f9:e0:5e:e7:2a:e7:cc:18:7c:64:21:d0:3a:81:
                    ec:ed:1c:5a:fe:83:63:49:c3:37:f1:c3:ea:f2:a2:
                    57:27:91:d7:15:43:c8:89:08:79:bd:5d:9a:d7:8a:
                    37:29:a1:c0:fa:6a:5f:c8:0e:17:c3:7e:84:a8:74:
                    a2:f6:4e:ef:24:ef:84:f0:34:ac:f9:e3:30:d0:d6:
                    b3:ba:43:68:25:a1:8c:22:0e:d6:8a:c0:36:51:f2:
                    3a:6d:c9:f2:5c:ce:9c:4d:fc:3b:2e:b7:f2:11:64:
                    4a:64:ba:06:d0:37:de:72:dd:b8:0f:e9:0f:ef:52:
                    10:e2:a9:8a:e6:03:e9:7a:c7:4c:f4:ea:4b:2a:aa:
                    68:4a:59:74:88:a8:98:1b:4a:0d:f7:ef:6d:6f:6b:
                    dc:eb:31:e5:7d:7a:a5:65:95:0b:f6:89:fc:ea:8a:
                    9c:aa:e9:00:00:41:eb:ba:88:c2:48:e1:7d:89:fa:
                    45:97:48:af:e8:7b:91:d3:ba:3c:ad:9a:3b:b9:76:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8F:3E:2F:82:B8:C9:92:E6:1A:9D:35:64:97:57:7B:DC:A0:EF:26
            X509v3 Authority Key Identifier:
                keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:9a:6c:ed:9f:16:5f:f2:ee:8e:72:cd:fd:91:d0:a6:8e:
         7f:06:da:fb:a6:e4:61:a9:40:ed:ef:29:8b:5f:2a:46:b1:a8:
         22:f4:76:1c:f2:0a:fa:82:53:fb:c7:8f:62:bc:45:8c:ec:c8:
         bc:46:86:04:79:52:ff:03:f5:b3:91:90:60:42:5f:0e:60:c9:
         d9:4f:f6:44:6c:cd:97:d5:bd:ae:b0:36:e8:eb:08:64:b3:ed:
         23:42:a1:55:a4:c3:49:eb:82:00:d2:47:53:a6:eb:81:87:49:
         7f:ec:aa:d8:f4:26:57:a8:be:af:4a:a5:4b:ab:66:2a:93:b6:
         a9:0d:a0:cf:54:b2:f2:1b:ee:b9:ef:3b:95:75:cc:d1:09:ce:
         02:0a:37:79:46:0d:e9:8e:78:c1:78:d3:a9:92:55:13:8d:f2:
         28:a6:1d:a2:fb:34:65:0b:e1:7c:98:fe:c7:cc:0a:f2:10:94:
         a2:22:8b:17:cc:9f:c4:32:3e:c2:ef:77:f0:2d:ea:1c:38:26:
         17:39:ec:92:be:5d:bb:2e:a4:54:33:e4:61:2f:ba:27:e1:66:
         4f:90:35:3f:cf:01:41:5d:18:61:be:e7:0c:4a:b4:f7:64:df:
         e6:cf:06:56:3c:82:e0:e4:7f:03:71:7f:ef:93:19:2d:65:20:
         83:88:30:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECP9aDMrHqe/Ju/PtSICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5
ZjBjNjgwHhcNMjYwMzAyMDEwMTA0WhcNMjYwMzAzMDEwMTA0WjAzMTEwLwYDVQQD
EyhiMjhmM2UyZjgyYjhjOTkyZTYxYTlkMzU2NDk3NTc3YmRjYTBlZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXEhL1f/cRk9Zz+AaUfiPTbdTBkW
zwBBCes9kOpGCafk842U8Buu62iEIGFgFCuJp2mAu2FJ4LfxDKzJ+eBe5yrnzBh8
ZCHQOoHs7Rxa/oNjScM38cPq8qJXJ5HXFUPIiQh5vV2a14o3KaHA+mpfyA4Xw36E
qHSi9k7vJO+E8DSs+eMw0NazukNoJaGMIg7WisA2UfI6bcnyXM6cTfw7LrfyEWRK
ZLoG0Dfect24D+kP71IQ4qmK5gPpesdM9OpLKqpoSll0iKiYG0oN9+9tb2vc6zHl
fXqlZZUL9on86oqcqukAAEHruojCSOF9ifpFl0iv6HuR07o8rZo7uXbYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKPPi+CuMmS5hqdNWSXV3vcoO8mMB8GA1UdIwQY
MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct
Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy
LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKiabO2f
Fl/y7o5yzf2R0KaOfwba+6bkYalA7e8pi18qRrGoIvR2HPIK+oJT+8ePYrxFjOzI
vEaGBHlS/wP1s5GQYEJfDmDJ2U/2RGzNl9W9rrA26OsIZLPtI0KhVaTDSeuCANJH
U6brgYdJf+yq2PQmV6i+r0qlS6tmKpO2qQ2gz1Sy8hvuue87lXXM0QnOAgo3eUYN
6Y54wXjTqZJVE43yKKYdovs0ZQvhfJj+x8wK8hCUoiKLF8yfxDI+wu938C3qHDgm
Fznskr5duy6kVDPkYS+6J+FmT5A1P88BQV0YYb7nDEq092Tf5s8GVjyC4OR/A3F/
75MZLWUgg4gw9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:06 2026 by rpki-client