Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          shDINAT+B16IJj/8yXsiKH67obIuai0ebiseFoTLkoo=
Subject key identifier:   59:B2:87:02:4F:4B:44:C1:91:7F:06:40:B2:9F:57:92:B1:C3:F8:FC
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       019CAC46A42DFD5803597BC470AEB00B47EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          05D8
Signing time:             Mon 02 Mar 2026 02:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:36 +0000
Files and hashes:         1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: Eo6b1OCvlkiHa4JyP+PfHB25jhOq8QqdT037wtKjZAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:a4:2d:fd:58:03:59:7b:c4:70:ae:b0:0b:47:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Mar  2 02:00:36 2026 GMT
            Not After : Mar  3 02:00:36 2026 GMT
        Subject: CN=59b287024f4b44c1917f0640b29f5792b1c3f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:5e:d4:24:cb:88:c0:50:7a:19:21:e9:58:
                    97:d8:08:7d:fa:75:19:db:5f:71:b1:46:ca:25:ff:
                    17:1b:54:a9:85:99:5d:f6:69:1c:6e:a8:c8:93:ad:
                    98:d3:f4:a2:5f:10:02:22:5e:a0:27:07:7d:5f:51:
                    82:5f:a1:a1:91:9d:fd:9e:53:61:e0:e6:7e:96:1f:
                    3a:aa:16:d1:14:68:e9:52:2d:55:1e:55:a4:8c:31:
                    80:d7:75:31:b7:e6:b4:0b:c0:71:64:cd:15:fb:16:
                    e6:1a:e0:39:88:1b:8f:f2:82:0f:42:5f:14:9c:03:
                    f8:e7:38:ad:04:01:eb:e4:96:1b:90:8e:ad:f5:63:
                    1f:fe:b5:f6:12:6b:70:55:00:8e:35:b6:a3:32:b4:
                    84:78:20:38:52:53:cc:17:98:68:28:12:06:32:c8:
                    c5:6f:bf:c8:55:12:87:7b:42:07:e6:5b:db:af:ab:
                    88:a7:4e:ce:1b:d0:df:67:d4:01:b6:62:19:c2:7a:
                    42:f6:db:4e:3f:a8:f7:fa:3b:28:f6:f4:bf:37:fb:
                    cd:c4:25:ae:2c:b2:e0:74:53:c2:8e:b2:be:92:7b:
                    7a:27:57:3b:f8:d6:09:ef:eb:54:53:01:7d:90:eb:
                    82:c3:83:4a:95:86:ec:fe:5c:f9:0b:8b:e9:ce:f4:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:87:02:4F:4B:44:C1:91:7F:06:40:B2:9F:57:92:B1:C3:F8:FC
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:81:9b:0c:0b:c1:9b:b4:89:0b:31:73:91:0d:5d:16:17:
         ba:dc:39:a7:55:10:92:ab:3b:d5:0f:7e:21:05:a1:d5:be:4f:
         a0:c4:ab:85:31:1a:19:36:cc:df:43:01:a2:39:d8:fa:1b:e6:
         93:ca:19:14:c5:76:78:0b:a0:13:4b:e7:2d:8f:0f:d7:ab:f7:
         50:40:80:50:83:68:00:00:cc:3b:64:24:a0:88:d2:83:b2:ff:
         50:3e:e7:57:5f:db:63:65:40:34:35:b1:e1:34:b2:6b:85:18:
         0c:6d:fb:78:c3:ed:c2:05:fe:ef:80:d4:68:1d:af:b6:bc:99:
         7e:a8:cc:e8:a3:ef:94:3b:bf:5b:5e:12:62:d9:97:cf:0a:c5:
         e5:be:61:cf:e8:15:6c:20:f2:f9:08:6e:29:44:3c:c5:e6:10:
         59:9e:d9:66:53:ca:57:94:6e:8d:f1:d3:c3:d6:b0:de:7e:02:
         5b:2d:ef:7a:ce:9f:d4:5c:63:cf:4c:15:30:6e:f0:c7:ec:12:
         be:f9:df:6c:e8:a5:4c:a2:df:cf:b6:ab:ea:4c:fe:0d:ef:0f:
         12:7f:f3:e1:0f:dc:a3:92:19:eb:a6:83:21:d3:3d:a4:ad:74:
         d7:f9:88:8c:71:4a:60:6f:d8:04:79:04:58:d8:58:d7:b1:0c:
         38:46:e8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRqQt/VgDWXvEcK6wC0fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjYwMzAyMDIwMDM2WhcNMjYwMzAzMDIwMDM2WjAzMTEwLwYDVQQD
Eyg1OWIyODcwMjRmNGI0NGMxOTE3ZjA2NDBiMjlmNTc5MmIxYzNmOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzZe1CTLiMBQehkh6ViX2Ah9+nUZ
219xsUbKJf8XG1SphZld9mkcbqjIk62Y0/SiXxACIl6gJwd9X1GCX6GhkZ39nlNh
4OZ+lh86qhbRFGjpUi1VHlWkjDGA13Uxt+a0C8BxZM0V+xbmGuA5iBuP8oIPQl8U
nAP45zitBAHr5JYbkI6t9WMf/rX2EmtwVQCONbajMrSEeCA4UlPMF5hoKBIGMsjF
b7/IVRKHe0IH5lvbr6uIp07OG9DfZ9QBtmIZwnpC9ttOP6j3+jso9vS/N/vNxCWu
LLLgdFPCjrK+knt6J1c7+NYJ7+tUUwF9kOuCw4NKlYbs/lz5C4vpzvRXiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmyhwJPS0TBkX8GQLKfV5Kxw/j8MB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuiBmwwL
wZu0iQsxc5ENXRYXutw5p1UQkqs71Q9+IQWh1b5PoMSrhTEaGTbM30MBojnY+hvm
k8oZFMV2eAugE0vnLY8P16v3UECAUINoAADMO2QkoIjSg7L/UD7nV1/bY2VANDWx
4TSya4UYDG37eMPtwgX+74DUaB2vtryZfqjM6KPvlDu/W14SYtmXzwrF5b5hz+gV
bCDy+QhuKUQ8xeYQWZ7ZZlPKV5RujfHTw9aw3n4CWy3ves6f1Fxjz0wVMG7wx+wS
vvnfbOilTKLfz7ar6kz+De8PEn/z4Q/co5IZ66aDIdM9pK101/mIjHFKYG/YBHkE
WNhY17EMOEboew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:17 2026 by rpki-client