Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File:                     pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier:          638NYJ97Q0Y5RnwFqnO29Bztdypp2L8QNm6+zawZCIo=
Subject key identifier:   81:8C:58:CC:F2:98:E3:7F:60:2D:CC:DE:A9:54:8E:E8:F5:C3:27:3E
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer:       /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial:       019CAE35F4AC973FD9B4B13DAD969E8D31C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number:          1076
Signing time:             Mon 02 Mar 2026 11:01:37 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:37 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:37 +0000
Files and hashes:         1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
                          2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
                          3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: vKqdo/n57k2EpMdsUo525/tj1EK8vJ2SRXgSrgn98+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:f4:ac:97:3f:d9:b4:b1:3d:ad:96:9e:8d:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
        Validity
            Not Before: Mar  2 11:01:37 2026 GMT
            Not After : Mar  3 11:01:37 2026 GMT
        Subject: CN=818c58ccf298e37f602dccdea9548ee8f5c3273e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:65:2b:03:42:75:4c:f0:da:74:79:34:1c:
                    dc:96:bd:a6:92:c1:c5:f1:a5:a7:0c:c1:ad:ab:34:
                    f0:18:bc:c6:3f:04:a3:21:e3:9f:67:1d:a3:98:5b:
                    4b:34:db:6e:65:d1:c3:d0:6e:21:36:56:36:95:2a:
                    37:ce:a5:23:b8:b5:34:31:35:87:b3:ef:61:2a:c6:
                    36:3b:e8:21:97:8c:aa:12:89:ce:c0:c6:22:08:0f:
                    b8:2c:21:45:8e:c5:1f:ee:ec:58:8b:79:18:4c:cd:
                    ba:87:c1:70:2f:69:7d:df:78:d7:a4:a7:f0:cd:d8:
                    e1:6e:02:b0:a7:c5:f6:ba:d3:f9:b1:3a:ab:52:e5:
                    07:8b:bb:e9:a2:1d:9a:3d:fd:43:86:80:20:aa:45:
                    9f:eb:82:28:8e:72:71:52:6e:a9:27:d5:8d:e5:37:
                    b8:91:6d:ba:b5:db:b7:81:76:20:70:40:13:87:2a:
                    37:d7:75:05:41:75:24:d4:98:60:af:7f:88:ad:78:
                    6e:00:ac:57:16:fc:75:40:63:44:87:f9:c3:1f:ab:
                    64:1a:73:02:85:5c:6b:46:61:bf:01:dd:45:80:dc:
                    f5:7f:5f:6f:d3:60:50:8e:e4:30:01:11:13:52:80:
                    01:67:d5:ce:81:51:b2:f3:a3:2a:d0:92:00:96:53:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:58:CC:F2:98:E3:7F:60:2D:CC:DE:A9:54:8E:E8:F5:C3:27:3E
            X509v3 Authority Key Identifier:
                keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0b:bb:5a:e5:2f:7d:98:b7:32:42:2c:b2:b2:ec:f3:cc:23:
         35:19:16:84:8b:5c:10:c6:bf:ac:3e:06:8c:33:4a:c6:91:4c:
         c5:2e:68:c1:69:f4:e3:06:6c:55:a5:ae:b6:a9:ca:cf:11:b1:
         d7:a5:90:88:5a:d6:a9:7d:76:55:7a:60:e8:91:80:10:78:58:
         cc:e2:4e:ec:81:da:b8:3a:10:3e:81:0d:af:dc:66:68:7b:e7:
         4c:a5:45:00:9e:f2:3d:f6:d7:59:97:9d:ac:ba:ca:ca:81:e1:
         40:ff:57:d0:34:96:fa:95:2c:14:ad:b4:eb:62:08:8e:62:59:
         fc:2a:69:9b:df:50:d2:8a:3f:c4:27:2f:fe:48:f4:96:7c:5b:
         4e:1a:2e:0b:37:0b:32:ac:a9:f7:9b:8e:b5:9b:51:2d:d7:e5:
         e3:b9:7b:6c:24:b6:df:0e:a5:c3:4e:f9:8e:51:3d:70:51:e8:
         64:26:9e:85:37:92:00:14:66:6a:4b:2f:8c:76:62:7f:b1:ec:
         7b:89:c9:e9:1d:41:63:fa:2e:a3:14:02:4e:4a:e6:2f:8e:5c:
         77:30:eb:89:6f:06:05:1a:cb:a5:68:67:67:4a:3a:d2:02:fa:
         d1:7f:13:f7:bf:a7:ff:90:ed:f3:4f:ac:f6:54:d1:3d:cf:2b:
         e9:9d:69:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNfSslz/ZtLE9rZaejTHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYwMzAyMTEwMTM3WhcNMjYwMzAzMTEwMTM3WjAzMTEwLwYDVQQD
Eyg4MThjNThjY2YyOThlMzdmNjAyZGNjZGVhOTU0OGVlOGY1YzMyNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfplKwNCdUzw2nR5NBzclr2mksHF
8aWnDMGtqzTwGLzGPwSjIeOfZx2jmFtLNNtuZdHD0G4hNlY2lSo3zqUjuLU0MTWH
s+9hKsY2O+ghl4yqEonOwMYiCA+4LCFFjsUf7uxYi3kYTM26h8FwL2l933jXpKfw
zdjhbgKwp8X2utP5sTqrUuUHi7vpoh2aPf1DhoAgqkWf64IojnJxUm6pJ9WN5Te4
kW26tdu3gXYgcEAThyo313UFQXUk1Jhgr3+IrXhuAKxXFvx1QGNEh/nDH6tkGnMC
hVxrRmG/Ad1FgNz1f19v02BQjuQwARETUoABZ9XOgVGy86Mq0JIAllPlfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGMWMzymON/YC3M3qlUjuj1wyc+MB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQu7WuUv
fZi3MkIssrLs88wjNRkWhItcEMa/rD4GjDNKxpFMxS5owWn04wZsVaWutqnKzxGx
16WQiFrWqX12VXpg6JGAEHhYzOJO7IHauDoQPoENr9xmaHvnTKVFAJ7yPfbXWZed
rLrKyoHhQP9X0DSW+pUsFK2062IIjmJZ/Cppm99Q0oo/xCcv/kj0lnxbThouCzcL
Mqyp95uOtZtRLdfl47l7bCS23w6lw075jlE9cFHoZCaehTeSABRmaksvjHZif7Hs
e4nJ6R1BY/ouoxQCTkrmL45cdzDriW8GBRrLpWhnZ0o60gL60X8T97+n/5Dt80+s
9lTRPc8r6Z1p4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:42 2026 by rpki-client