Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          UfBD0w1ckFLynCUnKFqPJ2VkzSYwzYioGWv2GbPNHVs=
Subject key identifier:   70:29:19:31:BE:DB:62:5C:7A:E0:16:C8:94:DA:26:D4:14:D2:3D:E8
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       019CAC0FE65F5F98169D3568446364DFBC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 01:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:48 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: DVXvOStD6LT+VnsOSrN5b3Uh2du5ha4BDGWBD/tkwxc=)
                          2: N5lhzOLzb9DWld9ai9yjW2kVDLc.roa (hash: otz3WZRX38iiM+hhQYkSTpyseb/af+HU5vUy0a+fTYk=)
                          3: TDVVAVJu7KfAhiGr1m5Du1HlA18.roa (hash: li+URB3yo8nZmvZyiiGhy9aGaIwk3rYi2nbOJFauLR0=)
                          4: mYQqzKv427W5-Gl4amiQFyFNlWI.roa (hash: xj5YFixKhBqBGjGQYQdSVRPVe8wusXZXxp3YqA0Gvx4=)
                          5: uUk1h5SII_Safw_pSYFNTK7-iXA.roa (hash: VTAbHmUg7zNhrsk+AD118pUR1Ps6/DM4GFSl39OP9BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e6:5f:5f:98:16:9d:35:68:44:63:64:df:bc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Mar  2 01:00:48 2026 GMT
            Not After : Mar  3 01:00:48 2026 GMT
        Subject: CN=70291931bedb625c7ae016c894da26d414d23de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:e3:70:66:45:1e:85:e6:f5:9d:5e:09:e4:
                    c5:6c:94:90:ec:72:0f:12:09:87:98:05:4f:4d:91:
                    ef:53:92:65:8d:be:ca:c8:94:8b:d7:8a:80:e2:7a:
                    26:04:bf:8f:43:e0:6e:1f:af:e3:d7:a3:94:b5:95:
                    dc:48:8e:f5:b1:af:d7:1b:4b:95:33:45:a7:8a:4a:
                    0c:af:dc:90:37:bd:fd:dd:7f:55:99:1f:04:26:0b:
                    2b:c0:dd:50:74:b7:68:dc:2c:ac:e1:75:65:30:57:
                    d3:50:c1:57:46:cf:59:59:80:36:8a:f7:9d:83:66:
                    ce:39:06:85:f1:44:94:fc:83:cd:90:72:f0:74:45:
                    ac:3c:92:45:7a:0b:9a:1e:cf:41:1e:31:ce:35:9f:
                    7f:b8:57:05:8a:d3:cb:d2:f7:eb:74:db:2b:b6:f6:
                    f6:29:b8:e2:ce:f1:57:f8:80:42:3c:7e:7e:0c:70:
                    e6:40:65:53:bf:3e:d9:49:62:88:f9:91:f8:e8:87:
                    bb:ce:54:db:04:5b:eb:12:33:8e:d1:a0:38:33:e3:
                    d8:b4:6c:42:cf:68:96:d5:df:74:9f:9c:d7:cc:c0:
                    74:34:cb:bb:5c:85:fb:99:5d:e7:6e:b9:c2:ae:87:
                    64:f6:93:c8:7f:37:c5:d6:38:52:49:72:c7:d5:db:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:29:19:31:BE:DB:62:5C:7A:E0:16:C8:94:DA:26:D4:14:D2:3D:E8
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:f6:36:c4:cc:9c:fe:75:54:73:3a:08:55:b9:8d:d3:4a:
         78:46:ae:9c:47:4a:28:7b:52:73:5a:db:f7:45:d9:04:ce:65:
         4c:97:57:ed:c9:82:a6:69:db:81:72:a8:80:9b:c2:70:54:79:
         2c:4c:5e:20:57:c0:09:f8:d6:be:b0:dc:d8:20:75:71:d8:ba:
         0e:f5:ff:23:d8:84:b9:db:a2:ea:fc:a4:54:b7:3e:56:65:0c:
         4b:fb:f4:1f:8c:f9:52:5c:e6:c7:b2:2e:5b:49:28:5b:1e:cb:
         a0:cc:3c:22:51:8d:70:ba:ac:7c:df:80:06:e0:d6:ef:0f:b8:
         66:c4:f5:c7:17:ad:8e:75:1c:bc:0a:13:7a:e7:c8:2e:9d:50:
         c7:86:05:59:b9:a9:88:63:0a:43:34:84:3c:55:08:fd:70:96:
         a9:e2:03:06:a5:b4:85:6e:81:14:23:19:e4:ac:75:5c:fc:d8:
         8a:77:09:31:f4:fd:77:4d:cf:6f:52:5a:b7:59:44:87:01:1c:
         f1:c7:1c:a2:3d:18:7b:f0:26:d2:e5:fa:cb:33:d1:77:87:68:
         be:5f:6e:f7:a9:00:aa:d5:91:7c:d4:fd:c9:9d:6b:c9:7e:6f:
         34:5d:bd:9a:4b:09:b1:f8:94:45:24:82:71:9f:51:47:95:82:
         10:68:9c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+ZfX5gWnTVoRGNk37xCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3
M2E4ZjgwHhcNMjYwMzAyMDEwMDQ4WhcNMjYwMzAzMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg3MDI5MTkzMWJlZGI2MjVjN2FlMDE2Yzg5NGRhMjZkNDE0ZDIzZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2DjcGZFHoXm9Z1eCeTFbJSQ7HIP
EgmHmAVPTZHvU5Jljb7KyJSL14qA4nomBL+PQ+BuH6/j16OUtZXcSI71sa/XG0uV
M0WnikoMr9yQN7393X9VmR8EJgsrwN1QdLdo3Cys4XVlMFfTUMFXRs9ZWYA2ived
g2bOOQaF8USU/IPNkHLwdEWsPJJFeguaHs9BHjHONZ9/uFcFitPL0vfrdNsrtvb2
KbjizvFX+IBCPH5+DHDmQGVTvz7ZSWKI+ZH46Ie7zlTbBFvrEjOO0aA4M+PYtGxC
z2iW1d90n5zXzMB0NMu7XIX7mV3nbrnCrodk9pPIfzfF1jhSSXLH1duIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHApGTG+22JceuAWyJTaJtQU0j3oMB8GA1UdIwQY
MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt
MmVhODdlNmVhMmEwLzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw
LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0z2NsTM
nP51VHM6CFW5jdNKeEaunEdKKHtSc1rb90XZBM5lTJdX7cmCpmnbgXKogJvCcFR5
LExeIFfACfjWvrDc2CB1cdi6DvX/I9iEudui6vykVLc+VmUMS/v0H4z5Ulzmx7Iu
W0koWx7LoMw8IlGNcLqsfN+ABuDW7w+4ZsT1xxetjnUcvAoTeufILp1Qx4YFWbmp
iGMKQzSEPFUI/XCWqeIDBqW0hW6BFCMZ5Kx1XPzYincJMfT9d03Pb1Jat1lEhwEc
8cccoj0Ye/Am0uX6yzPRd4dovl9u96kAqtWRfNT9yZ1ryX5vNF29mksJsfiURSSC
cZ9RR5WCEGicGA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:38 2026 by rpki-client