Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          EkMHIdbwJ7Hq9Q1ephoJq3f6+gkTIB1/O+tkY8iks5o=
Subject key identifier:   83:F8:6A:4B:7D:4B:E5:79:91:51:C9:9F:DB:7E:02:AD:AF:FB:50:C6
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       019CABA1F7AE45636E885C676042CDFEE03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          134F
Signing time:             Sun 01 Mar 2026 23:00:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:44 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:44 +0000
Files and hashes:         1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: ESd4IEpWPZm3iJTo+XaEsVzygXrtIJbG7dO2eTkd2ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:f7:ae:45:63:6e:88:5c:67:60:42:cd:fe:e0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Mar  1 23:00:44 2026 GMT
            Not After : Mar  2 23:00:44 2026 GMT
        Subject: CN=83f86a4b7d4be5799151c99fdb7e02adaffb50c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:1e:03:38:b9:f4:4c:8c:9e:f5:3e:16:71:
                    d4:99:9d:4c:a4:9b:68:a6:9b:8b:35:c6:3a:23:27:
                    93:02:2e:17:58:70:c7:3d:fd:f0:d1:d8:43:63:ac:
                    b0:b3:24:b0:79:63:9f:b6:d3:a8:81:da:73:3d:27:
                    bf:6b:97:bb:a9:7c:5b:2e:3d:28:61:20:94:3c:27:
                    a2:ea:a7:e5:59:ae:e8:7d:ab:b5:d0:64:bd:23:5b:
                    23:d2:5c:a5:98:a1:ac:5a:59:21:7f:ae:ab:38:d2:
                    97:a0:2c:7e:52:2d:f5:dd:8c:fc:e3:e8:ae:26:cf:
                    90:ca:2f:af:ee:ca:1c:9d:32:8d:1c:da:b9:98:25:
                    79:3b:d5:9f:33:96:f8:1c:f3:20:67:f0:53:ab:2f:
                    b3:1f:25:fd:3b:d7:0c:18:0b:c7:f6:1a:2a:6d:b5:
                    e9:1e:eb:ce:eb:db:29:b3:50:8e:a0:01:b0:cd:8e:
                    ff:3f:ca:17:d6:7b:a0:25:9c:8f:a0:36:4d:47:bb:
                    55:45:d3:4a:f5:f1:d7:5c:7d:a5:5e:99:bd:23:c3:
                    78:1f:56:93:b2:e2:35:95:8c:c8:53:0f:f6:42:aa:
                    42:3c:99:d0:ef:1e:35:b5:41:b2:3e:a1:c7:e4:72:
                    5c:40:83:b6:a3:cc:3a:b6:38:45:2e:18:a2:1b:86:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:6A:4B:7D:4B:E5:79:91:51:C9:9F:DB:7E:02:AD:AF:FB:50:C6
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:38:3b:1d:88:97:75:f1:fe:39:ad:5f:b0:ad:27:17:3f:e9:
         f2:b1:32:c9:99:69:05:4d:a2:d8:3a:4d:14:eb:a5:87:e4:9b:
         85:08:b7:11:8a:18:9f:45:fb:b6:96:14:a1:50:27:bb:ed:c4:
         fc:c7:ed:6d:4c:d1:c3:af:a8:1a:9d:3f:d1:cb:f9:e5:cb:b3:
         82:09:9b:ac:ed:14:f9:1d:03:b0:bf:08:33:c7:a9:f5:51:7f:
         e1:8e:27:69:5b:f0:0f:c7:4c:ce:3c:aa:79:50:30:bf:d6:aa:
         54:8c:54:8a:cc:c8:57:22:0f:f0:89:56:29:b7:33:be:41:a7:
         3f:4f:8a:3e:fe:97:b0:a9:f8:2b:8b:f7:7e:10:7a:ce:8b:80:
         c8:ce:c8:95:71:39:92:3f:40:82:4a:aa:55:26:55:60:fc:2f:
         6f:fd:23:ab:05:b5:2d:cd:be:70:07:4f:34:d4:1f:5b:eb:34:
         9d:5b:75:da:10:40:43:fb:2b:68:9f:e0:13:20:dc:b0:d9:e1:
         e2:a1:80:d8:43:61:db:5e:32:bd:7d:2c:b1:1b:bd:10:40:15:
         72:ec:d0:cb:11:03:8b:37:3a:00:ef:11:37:b2:c1:bd:2c:89:
         07:55:3b:73:2c:68:f0:51:75:9a:8a:dd:bc:1f:ce:e6:8e:0f:
         b2:22:94:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofeuRWNuiFxnYELN/uA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx
YmEyZWYwHhcNMjYwMzAxMjMwMDQ0WhcNMjYwMzAyMjMwMDQ0WjAzMTEwLwYDVQQD
Eyg4M2Y4NmE0YjdkNGJlNTc5OTE1MWM5OWZkYjdlMDJhZGFmZmI1MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZIeAzi59EyMnvU+FnHUmZ1MpJto
ppuLNcY6IyeTAi4XWHDHPf3w0dhDY6ywsySweWOfttOogdpzPSe/a5e7qXxbLj0o
YSCUPCei6qflWa7ofau10GS9I1sj0lylmKGsWlkhf66rONKXoCx+Ui313Yz84+iu
Js+Qyi+v7socnTKNHNq5mCV5O9WfM5b4HPMgZ/BTqy+zHyX9O9cMGAvH9hoqbbXp
HuvO69sps1COoAGwzY7/P8oX1nugJZyPoDZNR7tVRdNK9fHXXH2lXpm9I8N4H1aT
suI1lYzIUw/2QqpCPJnQ7x41tUGyPqHH5HJcQIO2o8w6tjhFLhiiG4azTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP4akt9S+V5kVHJn9t+Aq2v+1DGMB8GA1UdIwQY
MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt
ZjQwNmM4M2IzZmJhLzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh
LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTg7HYiX
dfH+Oa1fsK0nFz/p8rEyyZlpBU2i2DpNFOulh+SbhQi3EYoYn0X7tpYUoVAnu+3E
/MftbUzRw6+oGp0/0cv55cuzggmbrO0U+R0DsL8IM8ep9VF/4Y4naVvwD8dMzjyq
eVAwv9aqVIxUiszIVyIP8IlWKbczvkGnP0+KPv6XsKn4K4v3fhB6zouAyM7IlXE5
kj9AgkqqVSZVYPwvb/0jqwW1Lc2+cAdPNNQfW+s0nVt12hBAQ/sraJ/gEyDcsNnh
4qGA2ENh214yvX0ssRu9EEAVcuzQyxEDizc6AO8RN7LBvSyJB1U7cyxo8FF1mord
vB/O5o4PsiKUjg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:05 2026 by rpki-client