Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          3DHNUcliZTk/Znf8lSjhc/r6JXjJJ9p3VBKTGwJJk6c=
Subject key identifier:   49:EC:56:99:BA:70:78:E7:CE:9A:4A:A8:66:D2:87:8C:B7:3B:4A:A7
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019CABD9F664A2DE451DBC5F62386DDBDE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0F6B
Signing time:             Mon 02 Mar 2026 00:01:54 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:54 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:54 +0000
Files and hashes:         1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
                          2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: bBcz4HMPx49wl9QigFOpoEQc+vXNC4IVntn01M5gjsE=)
                          4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:f6:64:a2:de:45:1d:bc:5f:62:38:6d:db:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Mar  2 00:01:54 2026 GMT
            Not After : Mar  3 00:01:54 2026 GMT
        Subject: CN=49ec5699ba7078e7ce9a4aa866d2878cb73b4aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:b5:84:e1:3a:da:b8:a7:8c:69:c1:d8:27:
                    84:b4:36:5c:a1:14:cb:c6:bb:d6:7d:1a:85:be:5b:
                    79:59:60:34:15:24:b5:f9:bc:43:75:86:a8:8e:ac:
                    95:2a:bf:88:31:1f:d2:d7:95:e8:05:66:57:42:d2:
                    96:32:13:4d:06:db:88:8b:93:52:07:17:10:28:40:
                    94:6e:b5:48:84:cb:75:6e:84:17:4a:60:70:5f:16:
                    7e:93:5e:25:1c:42:1e:93:de:41:6c:18:4a:4a:b7:
                    9e:f1:10:08:8b:b9:da:ce:48:3f:45:cb:f4:40:02:
                    ab:17:a9:6d:6c:94:60:aa:24:6b:98:31:ee:e9:01:
                    94:da:00:a2:32:94:37:89:81:ca:c7:95:d2:85:41:
                    89:78:5f:2b:a6:c0:40:26:ba:ed:e8:11:19:c5:88:
                    51:70:c5:04:dd:b6:ea:18:bc:c0:cf:c2:77:ec:87:
                    38:61:77:fa:fc:0d:9f:e1:a7:c4:df:ce:23:01:b1:
                    43:e0:6b:3a:3d:9c:f4:01:5a:45:3c:ae:16:ce:44:
                    9e:fa:7f:7f:f7:0d:c6:16:f3:d5:d8:33:80:72:6e:
                    de:1d:29:0d:d3:2e:16:4d:b7:15:bc:bb:09:17:e6:
                    6f:ac:b3:d0:ca:c6:b4:6d:02:7d:cc:fc:93:62:22:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EC:56:99:BA:70:78:E7:CE:9A:4A:A8:66:D2:87:8C:B7:3B:4A:A7
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:0b:78:04:ce:97:58:87:2f:13:c1:3c:81:0e:d7:11:c5:
         69:38:46:8b:58:1e:5a:68:bf:fb:a4:ee:44:49:af:59:8a:17:
         0d:b7:b8:62:c1:ce:49:83:7d:67:81:bb:ec:34:eb:1c:52:2b:
         de:ed:ef:09:4b:47:c6:f7:95:34:b9:bb:ed:2a:64:38:e5:a1:
         8d:56:63:8c:c0:01:da:ac:6c:60:43:39:fd:95:df:b4:ef:9d:
         1d:91:5d:aa:20:e6:97:fc:2d:23:d3:60:88:8b:dd:c9:b4:1b:
         f5:a1:66:b9:f4:c2:73:5b:1b:0f:f1:ac:27:58:94:53:6f:28:
         96:32:e0:71:b5:7b:bc:cf:3d:a6:0c:c1:f3:b8:29:ad:3e:ea:
         a6:1f:02:6a:22:c5:e4:74:80:07:25:c4:53:a7:84:b3:fa:af:
         21:06:2f:11:a9:f6:66:85:0c:96:05:67:58:6c:0d:21:b6:15:
         20:2d:d8:48:64:a7:56:78:39:14:1d:1d:f1:03:c7:c3:b7:b9:
         d3:fa:77:f1:68:ec:da:01:37:06:18:4b:00:92:82:39:f2:11:
         a7:ec:8a:4a:97:7f:a9:a0:b1:10:b5:4b:ad:fc:b1:c8:6f:f9:
         79:72:2e:98:f3:34:06:19:6e:87:09:84:11:fc:21:48:9e:57:
         fd:11:01:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fZkot5FHbxfYjht295AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjYwMzAyMDAwMTU0WhcNMjYwMzAzMDAwMTU0WjAzMTEwLwYDVQQD
Eyg0OWVjNTY5OWJhNzA3OGU3Y2U5YTRhYTg2NmQyODc4Y2I3M2I0YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ta1hOE62rinjGnB2CeEtDZcoRTL
xrvWfRqFvlt5WWA0FSS1+bxDdYaojqyVKr+IMR/S15XoBWZXQtKWMhNNBtuIi5NS
BxcQKECUbrVIhMt1boQXSmBwXxZ+k14lHEIek95BbBhKSree8RAIi7nazkg/Rcv0
QAKrF6ltbJRgqiRrmDHu6QGU2gCiMpQ3iYHKx5XShUGJeF8rpsBAJrrt6BEZxYhR
cMUE3bbqGLzAz8J37Ic4YXf6/A2f4afE384jAbFD4Gs6PZz0AVpFPK4WzkSe+n9/
9w3GFvPV2DOAcm7eHSkN0y4WTbcVvLsJF+ZvrLPQysa0bQJ9zPyTYiLnIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnsVpm6cHjnzppKqGbSh4y3O0qnMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUL4LeATO
l1iHLxPBPIEO1xHFaThGi1geWmi/+6TuREmvWYoXDbe4YsHOSYN9Z4G77DTrHFIr
3u3vCUtHxveVNLm77SpkOOWhjVZjjMAB2qxsYEM5/ZXftO+dHZFdqiDml/wtI9Ng
iIvdybQb9aFmufTCc1sbD/GsJ1iUU28oljLgcbV7vM89pgzB87gprT7qph8CaiLF
5HSAByXEU6eEs/qvIQYvEan2ZoUMlgVnWGwNIbYVIC3YSGSnVng5FB0d8QPHw7e5
0/p38Wjs2gE3BhhLAJKCOfIRp+yKSpd/qaCxELVLrfyxyG/5eXIumPM0BhluhwmE
EfwhSJ5X/REBmA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:39 2026 by rpki-client