Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File:                     taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier:          10bzi/005/Y0QEi5YPaI+82zoBP+KjFRH5gxCOog9TU=
Subject key identifier:   76:D2:1F:19:27:85:2D:8C:F3:41:2D:84:A4:7C:A1:34:E8:B9:B7:4A
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer:       /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial:       019CADC815B5BB03AF7004653FA98AFEBBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number:          06E6
Signing time:             Mon 02 Mar 2026 09:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:36 +0000
Files and hashes:         1: UlU02LC4n2pDDDLWDfGKbBexvUQ.roa (hash: 1DEZfsrrVxXltp/RRFJK80hKK2fgGVXeXhVVxwfDsss=)
                          2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: DnweZ4ctnjt0Ikz646SU35j/nAvoWTOXjlqdvspY1Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:15:b5:bb:03:af:70:04:65:3f:a9:8a:fe:bb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
        Validity
            Not Before: Mar  2 09:01:36 2026 GMT
            Not After : Mar  3 09:01:36 2026 GMT
        Subject: CN=76d21f1927852d8cf3412d84a47ca134e8b9b74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:b5:0f:e8:b9:51:de:c8:ee:b4:36:51:c5:
                    b3:42:a1:8a:c6:88:18:00:80:10:15:02:13:4f:b7:
                    43:b0:3b:d1:76:72:1c:8a:a5:ef:b6:cf:a6:0d:f8:
                    46:15:59:5c:0f:91:96:59:0e:be:81:b2:a8:75:6f:
                    00:bf:97:df:9a:8a:d9:77:14:72:60:d3:2f:6d:7d:
                    32:28:c2:26:0a:28:18:2c:ee:a8:f8:0d:90:58:c9:
                    4b:3b:80:22:99:91:08:36:fa:e4:38:36:42:f6:69:
                    ec:2a:67:70:93:9a:11:5f:17:3f:e6:d3:9f:8d:e0:
                    3c:81:19:ad:59:c4:78:26:11:4e:63:41:c0:77:f0:
                    ea:8d:1a:a2:74:a2:5a:bd:d6:96:2c:24:fa:fb:cc:
                    7e:59:3b:99:98:7c:ca:e3:74:d2:84:59:bc:ed:2a:
                    9f:04:ba:03:da:69:6e:76:66:1b:58:9f:17:02:4d:
                    42:be:d3:31:11:89:fc:b9:c1:30:cb:ee:14:2f:1d:
                    9f:ea:b0:bc:bf:61:22:50:86:c7:ec:62:74:75:31:
                    30:4b:5e:c1:6b:48:4b:62:67:b0:7e:87:7e:00:7c:
                    57:36:26:6e:f6:4d:e1:54:7f:52:6e:cc:7b:21:33:
                    80:d7:3c:3e:69:07:02:de:d0:8b:67:86:0e:ea:68:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:1F:19:27:85:2D:8C:F3:41:2D:84:A4:7C:A1:34:E8:B9:B7:4A
            X509v3 Authority Key Identifier:
                keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:29:77:db:e0:a3:d1:3b:53:b7:fc:22:9f:95:42:94:57:e3:
         c7:64:b6:0f:47:63:c2:91:da:e4:0c:23:fb:19:30:9e:60:74:
         d4:b3:70:11:97:b6:96:78:0a:31:ea:3e:71:ed:96:92:89:41:
         dc:51:f5:7f:f2:da:d8:b6:fe:4c:d2:18:af:90:3e:65:a3:92:
         19:af:2f:ac:01:a5:22:d7:dc:9a:35:1c:7d:ed:ed:d2:2c:b0:
         52:dd:d6:25:1e:b9:99:4b:47:c6:24:91:41:23:66:0e:b0:f0:
         59:fc:93:6d:f1:14:39:43:1e:a8:5d:f6:bb:f7:24:79:1c:64:
         1e:46:1a:e3:90:45:39:ec:b2:02:f9:61:6c:91:83:8f:c7:ba:
         28:85:21:27:29:48:a6:78:23:f5:94:0e:fb:dd:1c:2a:93:0b:
         4b:20:73:82:b6:54:49:82:e9:bb:a3:9e:d2:f7:9c:8b:24:97:
         cb:e5:ca:f1:1e:7c:23:3a:6f:1c:9b:ae:bf:dd:8a:f5:f8:37:
         15:cc:0a:a5:04:41:76:72:de:12:78:f8:e0:9f:fd:27:6e:e6:
         3b:28:5e:04:e2:d0:f4:4a:5d:78:ae:22:59:90:7f:fc:7c:f6:
         84:35:4c:75:d5:c3:2e:c3:b6:ea:51:a6:30:0f:5d:e6:38:03:
         25:cf:dd:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyBW1uwOvcARlP6mK/rvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx
ZTMyMDMwHhcNMjYwMzAyMDkwMTM2WhcNMjYwMzAzMDkwMTM2WjAzMTEwLwYDVQQD
Eyg3NmQyMWYxOTI3ODUyZDhjZjM0MTJkODRhNDdjYTEzNGU4YjliNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvi1D+i5Ud7I7rQ2UcWzQqGKxogY
AIAQFQITT7dDsDvRdnIciqXvts+mDfhGFVlcD5GWWQ6+gbKodW8Av5ffmorZdxRy
YNMvbX0yKMImCigYLO6o+A2QWMlLO4AimZEINvrkODZC9mnsKmdwk5oRXxc/5tOf
jeA8gRmtWcR4JhFOY0HAd/DqjRqidKJavdaWLCT6+8x+WTuZmHzK43TShFm87Sqf
BLoD2mludmYbWJ8XAk1CvtMxEYn8ucEwy+4ULx2f6rC8v2EiUIbH7GJ0dTEwS17B
a0hLYmewfod+AHxXNiZu9k3hVH9Sbsx7ITOA1zw+aQcC3tCLZ4YO6miWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbSHxknhS2M80EthKR8oTToubdKMB8GA1UdIwQY
MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt
OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1
LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCl32+Cj
0TtTt/win5VClFfjx2S2D0djwpHa5Awj+xkwnmB01LNwEZe2lngKMeo+ce2WkolB
3FH1f/La2Lb+TNIYr5A+ZaOSGa8vrAGlItfcmjUcfe3t0iywUt3WJR65mUtHxiSR
QSNmDrDwWfyTbfEUOUMeqF32u/ckeRxkHkYa45BFOeyyAvlhbJGDj8e6KIUhJylI
pngj9ZQO+90cKpMLSyBzgrZUSYLpu6Oe0veciySXy+XK8R58IzpvHJuuv92K9fg3
FcwKpQRBdnLeEnj44J/9J27mOyheBOLQ9EpdeK4iWZB//Hz2hDVMddXDLsO26lGm
MA9d5jgDJc/dBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:20 2026 by rpki-client