Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          TkZkqxxJ3LSJyiVTuvdznjF09vw/354vkKTTxD/5fRA=
Subject key identifier:   0A:E2:A3:B9:D6:33:00:9A:E6:B4:A6:E6:A8:28:B8:4F:D3:29:9F:C7
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019CACB47D45895BC5C1E41F34347332809A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1830
Signing time:             Mon 02 Mar 2026 04:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:35 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=)
                          3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=)
                          4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 1lSULs+wzByHavYO/roeG0P3agmaAN1VnSkY5eYp3yk=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:7d:45:89:5b:c5:c1:e4:1f:34:34:73:32:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Mar  2 04:00:35 2026 GMT
            Not After : Mar  3 04:00:35 2026 GMT
        Subject: CN=0ae2a3b9d633009ae6b4a6e6a828b84fd3299fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:e4:58:53:b8:5b:2e:83:8f:ed:45:46:36:
                    5c:a7:3d:96:42:0a:22:4b:02:d9:d8:be:be:db:dc:
                    6e:f6:ff:c7:ac:a2:4c:7b:55:05:d1:5e:41:1c:0d:
                    fe:41:e6:0e:48:cc:33:3f:c3:8a:c2:73:7b:3e:b9:
                    d7:be:dc:5f:1e:8e:44:8b:f2:b4:5a:22:66:af:ad:
                    44:3d:d1:eb:69:01:00:b5:79:9b:c1:da:b2:2d:17:
                    be:cb:6b:9c:60:7a:3f:b0:e8:e6:fd:c9:5e:4d:cb:
                    d2:c7:8c:15:fb:51:47:06:f7:49:1d:78:5b:77:6f:
                    bf:a0:8f:a9:35:8d:aa:e6:4d:31:3d:b1:2f:5b:e2:
                    a8:b9:2e:94:87:2a:48:81:0a:0b:32:5f:32:fc:64:
                    c8:f3:f1:8e:28:22:e0:29:8a:67:ac:68:41:54:3e:
                    e4:56:7e:64:7c:a5:b0:b3:98:c0:98:f8:93:14:b8:
                    5c:ef:7f:dd:9c:08:32:cb:52:5f:32:17:f2:cb:c0:
                    4a:d6:94:06:f6:1f:2c:94:88:23:b6:64:4e:f7:c4:
                    0a:ee:b5:f9:20:47:a4:65:33:ba:f1:af:69:78:16:
                    6e:c1:b8:e6:9f:ca:6e:40:1d:a2:69:96:ae:40:33:
                    44:a2:9c:0c:e3:33:0c:df:64:1a:6c:2c:9a:04:69:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E2:A3:B9:D6:33:00:9A:E6:B4:A6:E6:A8:28:B8:4F:D3:29:9F:C7
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:bd:9a:55:3b:43:6c:1c:36:4c:78:ed:13:4e:8a:2c:ab:
         aa:e7:0f:23:ef:19:e6:07:0a:d8:7f:d0:9d:32:8e:6e:20:ef:
         89:cd:4d:36:4d:0b:85:03:46:4d:70:e8:c5:a5:b7:99:99:ff:
         2d:2b:10:ef:24:67:5a:20:81:2d:21:a1:3c:dd:07:4a:8b:ea:
         e6:ab:ce:62:53:f2:b5:0c:47:90:0d:ce:98:a7:26:e9:64:ae:
         af:62:61:eb:9f:f3:08:86:4f:40:76:3b:e8:31:15:33:22:86:
         82:10:bb:bc:6d:86:b4:52:a7:c9:82:af:56:9c:27:a4:78:57:
         cb:d7:21:1d:d7:e6:00:ad:4e:34:1f:7f:e6:7a:2b:69:1d:04:
         09:66:73:0f:e9:60:47:ad:50:92:90:e0:72:10:0b:55:4d:fe:
         aa:94:3c:9c:49:83:ab:26:06:87:d4:65:c9:2c:1d:71:b3:15:
         16:44:29:bb:5e:2c:ae:40:14:90:11:c8:e5:96:51:98:b4:2b:
         15:c3:53:56:46:c7:c9:79:09:f4:4a:55:98:b7:07:f2:ed:64:
         ae:24:12:56:b0:aa:69:b4:2b:e8:db:c1:f8:9b:15:a0:dc:1f:
         2a:28:9d:f5:14:08:26:01:12:be:7f:d4:6a:d3:54:05:97:5b:
         18:3a:22:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystH1FiVvFweQfNDRzMoCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjYwMzAyMDQwMDM1WhcNMjYwMzAzMDQwMDM1WjAzMTEwLwYDVQQD
EygwYWUyYTNiOWQ2MzMwMDlhZTZiNGE2ZTZhODI4Yjg0ZmQzMjk5ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zkWFO4Wy6Dj+1FRjZcpz2WQgoi
SwLZ2L6+29xu9v/HrKJMe1UF0V5BHA3+QeYOSMwzP8OKwnN7PrnXvtxfHo5Ei/K0
WiJmr61EPdHraQEAtXmbwdqyLRe+y2ucYHo/sOjm/cleTcvSx4wV+1FHBvdJHXhb
d2+/oI+pNY2q5k0xPbEvW+KouS6UhypIgQoLMl8y/GTI8/GOKCLgKYpnrGhBVD7k
Vn5kfKWws5jAmPiTFLhc73/dnAgyy1JfMhfyy8BK1pQG9h8slIgjtmRO98QK7rX5
IEekZTO68a9peBZuwbjmn8puQB2iaZauQDNEopwM4zMM32QabCyaBGlxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArio7nWMwCa5rSm5qgouE/TKZ/HMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkW9mlU7
Q2wcNkx47RNOiiyrqucPI+8Z5gcK2H/QnTKObiDvic1NNk0LhQNGTXDoxaW3mZn/
LSsQ7yRnWiCBLSGhPN0HSovq5qvOYlPytQxHkA3OmKcm6WSur2Jh65/zCIZPQHY7
6DEVMyKGghC7vG2GtFKnyYKvVpwnpHhXy9chHdfmAK1ONB9/5noraR0ECWZzD+lg
R61QkpDgchALVU3+qpQ8nEmDqyYGh9RlySwdcbMVFkQpu14srkAUkBHI5ZZRmLQr
FcNTVkbHyXkJ9EpVmLcH8u1kriQSVrCqabQr6NvB+JsVoNwfKiid9RQIJgESvn/U
atNUBZdbGDoiZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:47 2026 by rpki-client