Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File:                     aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier:          mBZuhEdDurBG445s4jZebvSE93i/KebYaBDYQbVH9Co=
Subject key identifier:   6A:D3:E2:0E:A5:16:37:00:E3:78:DC:ED:8E:2A:B5:C1:D2:70:B1:C4
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer:       /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial:       019CAD9069E4FBB8A798F7B2211B1C4C18EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 08:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:48 +0000
Files and hashes:         1: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: Dd/NC5c7paJWy8JTbyp4DzydGNkOxViUa9m/nrFb+xg=)
                          2: h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa (hash: qSSIAnAv4EJAYyJT2DsdReTrWjgda1IMNFZ6WGYfBOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:69:e4:fb:b8:a7:98:f7:b2:21:1b:1c:4c:18:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
        Validity
            Not Before: Mar  2 08:00:48 2026 GMT
            Not After : Mar  3 08:00:48 2026 GMT
        Subject: CN=6ad3e20ea5163700e378dced8e2ab5c1d270b1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:bf:fe:b3:2e:68:9c:5b:6e:48:dc:94:6f:
                    7f:81:d2:cd:5f:c4:3b:93:9a:5d:bb:12:dd:d5:c4:
                    a9:fd:ce:63:af:30:c3:a3:aa:45:91:b3:fd:aa:af:
                    a7:1e:6d:e2:9a:e5:8a:58:23:6b:3c:31:fc:3c:bc:
                    cf:41:c0:a8:58:41:93:71:e3:4a:c8:aa:e7:d7:e4:
                    4d:1c:13:33:db:36:08:69:c8:f2:d7:1b:24:2d:67:
                    75:c0:14:dd:b3:77:61:95:b8:38:32:c5:a5:ea:72:
                    74:3f:36:28:bd:ce:e7:76:8d:99:af:9b:04:51:69:
                    1b:fa:28:00:42:79:44:e3:ac:12:e3:56:41:dd:33:
                    d1:ac:36:51:56:83:ee:08:d9:61:eb:29:00:f9:05:
                    76:54:24:8f:13:5b:f6:86:5a:b1:33:34:5c:fd:59:
                    c6:f5:9a:52:3a:98:df:ec:de:9e:40:a5:96:1a:2e:
                    0b:65:27:83:88:80:17:5b:05:05:b8:61:ac:b7:e2:
                    1b:da:3d:f0:8f:13:4e:64:4c:bb:3b:31:fb:61:68:
                    02:24:0a:c9:7c:a7:f7:73:db:45:be:6d:39:1a:62:
                    54:b6:0b:99:59:c5:45:47:66:9e:3f:ec:53:f3:20:
                    a9:f9:ee:2f:86:9d:78:06:af:6f:b0:1d:12:8d:3a:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:E2:0E:A5:16:37:00:E3:78:DC:ED:8E:2A:B5:C1:D2:70:B1:C4
            X509v3 Authority Key Identifier:
                keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:ee:ba:51:71:e0:ad:ca:62:6f:78:bb:82:99:91:34:54:
         41:0a:f9:0f:ef:72:35:05:95:70:1c:cb:83:8e:6c:2f:ed:ad:
         71:db:81:a0:a4:d2:77:67:ea:80:c4:3f:05:95:c0:73:33:07:
         0e:9b:5b:9c:81:ab:7b:db:41:36:af:31:1f:5d:d8:24:c9:34:
         fb:c0:27:d1:17:dd:ce:7f:3d:b5:22:82:5c:25:99:f0:b7:31:
         62:3c:c9:60:d3:a9:97:f5:41:60:a7:bf:2e:89:90:0a:6c:e3:
         75:5e:e2:1e:39:be:58:de:62:7e:a6:99:b5:9d:e5:f5:93:07:
         02:a9:b6:45:da:5f:04:54:a3:d6:23:f0:ec:4d:54:3b:ac:0e:
         1c:5b:ca:f3:4c:4e:50:83:c6:03:ac:5e:22:06:a2:7b:73:75:
         32:88:19:93:af:5f:dc:3c:b7:e4:a3:c1:56:21:e6:42:44:0f:
         da:f2:37:e6:27:97:50:1a:3a:54:6d:a0:c6:5a:91:69:8c:4f:
         31:b1:1a:fe:50:16:b3:c9:57:d8:91:08:37:87:cc:79:01:c3:
         b8:d4:fb:f1:1b:d0:07:22:f3:9d:f2:a2:b2:21:76:2d:a7:9e:
         c5:39:fd:29:b5:c0:c7:31:e2:d1:1e:cf:ef:4a:cd:3a:97:51:
         96:7b:6f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkGnk+7inmPeyIRscTBjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGFmZDYzNjA2MzZhNjMyNzc0N2EwNzA4MGY3ZjJlNWUz
MmNlODUwHhcNMjYwMzAyMDgwMDQ4WhcNMjYwMzAzMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg2YWQzZTIwZWE1MTYzNzAwZTM3OGRjZWQ4ZTJhYjVjMWQyNzBiMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/u//rMuaJxbbkjclG9/gdLNX8Q7
k5pduxLd1cSp/c5jrzDDo6pFkbP9qq+nHm3imuWKWCNrPDH8PLzPQcCoWEGTceNK
yKrn1+RNHBMz2zYIacjy1xskLWd1wBTds3dhlbg4MsWl6nJ0PzYovc7ndo2Zr5sE
UWkb+igAQnlE46wS41ZB3TPRrDZRVoPuCNlh6ykA+QV2VCSPE1v2hlqxMzRc/VnG
9ZpSOpjf7N6eQKWWGi4LZSeDiIAXWwUFuGGst+Ib2j3wjxNOZEy7OzH7YWgCJArJ
fKf3c9tFvm05GmJUtguZWcVFR2aeP+xT8yCp+e4vhp14Bq9vsB0SjTqI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrT4g6lFjcA43jc7Y4qtcHScLHEMB8GA1UdIwQY
MBaAFGja/WNgY2pjJ3R6BwgPfy5eMs6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDkt
MmJiMjM3N2U1YTFjLzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDktMmJiMjM3N2U1YTFj
LzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPojuulFx
4K3KYm94u4KZkTRUQQr5D+9yNQWVcBzLg45sL+2tcduBoKTSd2fqgMQ/BZXAczMH
DptbnIGre9tBNq8xH13YJMk0+8An0Rfdzn89tSKCXCWZ8LcxYjzJYNOpl/VBYKe/
LomQCmzjdV7iHjm+WN5ifqaZtZ3l9ZMHAqm2RdpfBFSj1iPw7E1UO6wOHFvK80xO
UIPGA6xeIgaie3N1MogZk69f3Dy35KPBViHmQkQP2vI35ieXUBo6VG2gxlqRaYxP
MbEa/lAWs8lX2JEIN4fMeQHDuNT78RvQByLznfKisiF2LaeexTn9KbXAxzHi0R7P
70rNOpdRlntv1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:28 2026 by rpki-client