Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File:                     sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier:          XVjo/q7YLwWLi1TQ5sRsiBI64TN7+6rjFZ9TqMthXpE=
Subject key identifier:   9F:54:D6:DB:A2:0C:33:D4:8B:14:F3:25:8A:6B:AF:FC:96:A7:DD:E2
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer:       /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial:       019CA945985B51D0B267A7217177A8BDE0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number:          64
Signing time:             Sun 01 Mar 2026 12:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:36 +0000
Files and hashes:         1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
                          2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: j/gqEEOQDPcJBQ+e6OnVXQt6hX5oPSYLVDel+zcLiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:98:5b:51:d0:b2:67:a7:21:71:77:a8:bd:e0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
        Validity
            Not Before: Mar  1 12:00:36 2026 GMT
            Not After : Mar  2 12:00:36 2026 GMT
        Subject: CN=9f54d6dba20c33d48b14f3258a6baffc96a7dde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:4c:bf:9c:0b:82:9a:79:12:73:ad:91:c5:
                    c2:db:10:11:f6:5b:81:0e:72:c8:db:22:51:96:16:
                    09:36:cf:13:f7:a1:e3:73:0e:66:ff:b9:9e:16:14:
                    f1:3c:06:23:84:c9:3c:29:63:20:f9:b4:ef:a9:b0:
                    5c:42:24:66:fc:fd:6c:ac:ec:79:4b:4f:c2:bf:ee:
                    43:47:e3:16:13:21:5c:2a:1f:3f:c5:89:06:49:c7:
                    4e:6a:51:7d:d9:82:30:69:99:01:4c:60:81:07:9a:
                    06:24:90:3e:a1:d8:0e:11:94:15:bc:cc:82:2e:d2:
                    33:a3:2a:5c:ed:3f:6e:dd:61:ca:3a:a3:58:2a:30:
                    a1:ed:1a:75:bf:6b:23:ab:53:d6:3c:85:9a:26:47:
                    6b:62:d8:cd:6e:76:6c:4c:74:3b:3c:fd:20:ae:f0:
                    be:d1:c1:c2:cc:c0:d8:0f:9d:17:1a:01:c9:25:45:
                    f8:07:71:47:b1:d5:85:77:c8:8d:69:86:2a:41:e5:
                    c4:2f:e2:bf:47:cc:66:50:ed:c5:54:50:12:37:33:
                    e7:3a:1c:4e:e7:bc:aa:49:ef:7e:e1:ea:7a:63:fb:
                    68:0a:9e:24:f1:f7:2d:1c:cd:f8:f2:d8:04:a2:20:
                    96:af:0f:8b:fa:d7:43:5e:7b:b5:38:5e:fe:8d:9c:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:54:D6:DB:A2:0C:33:D4:8B:14:F3:25:8A:6B:AF:FC:96:A7:DD:E2
            X509v3 Authority Key Identifier:
                keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:9c:7d:27:ee:50:57:09:79:1a:85:7f:4e:67:58:a8:b5:
         db:60:6b:c3:34:4e:60:92:c0:6d:95:13:78:00:dc:51:7e:c7:
         57:47:b8:07:78:ad:ef:a8:e1:af:17:46:6e:e7:24:e0:8d:ae:
         1f:53:a7:30:fc:cf:f9:f1:74:9c:7a:97:28:38:dc:70:16:6b:
         9a:7b:22:e0:96:96:b9:98:8e:73:3d:78:69:d4:96:95:13:c9:
         99:01:b9:dc:be:c9:82:33:21:ba:20:6d:05:e2:08:19:f7:2d:
         85:09:ae:b1:8d:22:b7:d5:21:3b:2e:44:62:f9:87:a8:cd:ff:
         16:78:2f:44:c2:b6:36:9b:34:b0:9d:3e:00:70:57:4b:30:04:
         ac:72:09:81:34:5a:d1:55:c9:b9:c4:44:92:51:af:cd:7a:cf:
         e2:97:e1:c1:1a:f7:cb:3d:9e:52:f4:9d:93:ba:f3:6a:91:3e:
         64:95:0e:f8:ba:14:5a:d2:45:1a:d3:39:4e:32:3e:69:ed:12:
         88:27:33:b2:52:b7:9e:b6:fe:3a:56:4e:d6:92:3f:d1:a8:c5:
         0f:a6:d2:d4:5e:28:15:97:82:9f:51:b0:a5:49:2a:f1:7b:68:
         2a:0f:48:88:c7:e5:cf:68:74:09:da:82:6b:23:b8:9b:75:86:
         58:bf:80:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRZhbUdCyZ6chcXeoveCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGZlNWExOTljNzU0MzljNTI2NDkwNDU0YjRhYmQ1NDAy
MTM3YTkwHhcNMjYwMzAxMTIwMDM2WhcNMjYwMzAyMTIwMDM2WjAzMTEwLwYDVQQD
Eyg5ZjU0ZDZkYmEyMGMzM2Q0OGIxNGYzMjU4YTZiYWZmYzk2YTdkZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXNMv5wLgpp5EnOtkcXC2xAR9luB
DnLI2yJRlhYJNs8T96Hjcw5m/7meFhTxPAYjhMk8KWMg+bTvqbBcQiRm/P1srOx5
S0/Cv+5DR+MWEyFcKh8/xYkGScdOalF92YIwaZkBTGCBB5oGJJA+odgOEZQVvMyC
LtIzoypc7T9u3WHKOqNYKjCh7Rp1v2sjq1PWPIWaJkdrYtjNbnZsTHQ7PP0grvC+
0cHCzMDYD50XGgHJJUX4B3FHsdWFd8iNaYYqQeXEL+K/R8xmUO3FVFASNzPnOhxO
57yqSe9+4ep6Y/toCp4k8fctHM348tgEoiCWrw+L+tdDXnu1OF7+jZyxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9U1tuiDDPUixTzJYprr/yWp93iMB8GA1UdIwQY
MBaAFLJP5aGZx1Q5xSZJBFS0q9VAITepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUt
YzE5OWRjYWY1YTEzLzEvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUtYzE5OWRjYWY1YTEz
LzEvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5+cfSfu
UFcJeRqFf05nWKi122BrwzROYJLAbZUTeADcUX7HV0e4B3it76jhrxdGbuck4I2u
H1OnMPzP+fF0nHqXKDjccBZrmnsi4JaWuZiOcz14adSWlRPJmQG53L7JgjMhuiBt
BeIIGfcthQmusY0it9UhOy5EYvmHqM3/FngvRMK2Nps0sJ0+AHBXSzAErHIJgTRa
0VXJucREklGvzXrP4pfhwRr3yz2eUvSdk7rzapE+ZJUO+LoUWtJFGtM5TjI+ae0S
iCczslK3nrb+OlZO1pI/0ajFD6bS1F4oFZeCn1GwpUkq8XtoKg9IiMflz2h0CdqC
ayO4m3WGWL+ASA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:11 2026 by rpki-client