Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
File:                     7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json)
Hash identifier:          llBIMJGCKO9PqdZ5B1XNeR8IeptH7U6uYBi4sE9C3sI=
Subject key identifier:   ED:39:FC:38:DE:2D:91:9A:F9:31:09:99:75:7A:72:CA:10:B3:53:60
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Certificate issuer:       /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial:       019CA869F5255A7F43F83D40CE36799B7E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
Manifest number:          0155
Signing time:             Sun 01 Mar 2026 08:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 08:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 08:00:42 +0000
Files and hashes:         1: 1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa (hash: 51tw/udP13YguOvYrb1xizkGBlXzZHexEK8HlcpRMGs=)
                          2: 2VIoG8QN-zjnAemqLtXlhO_Jltw.roa (hash: cZjTIR9f7TdWlH+cvp6k0DHUwZH3r7HLXpRNG9UZVIM=)
                          3: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: 0MsvdYZsU/pcZ1vYUflcqLnmWfM8reS8XAopUHwBIi0=)
                          4: EJwMuFYK1wsM5hee91ic9tZZCHs.roa (hash: AQoucDoJ40lM0+JsqQe1B2wvG+y+JOvu/h9zeWafMiQ=)
                          5: aMiNXiZTn0auDW0z6jWzMcVy5es.roa (hash: mTYhpZfI6W//js6v7bdR+EJfQ3pBaYPmRe515ss9poI=)
                          6: w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (hash: J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:69:f5:25:5a:7f:43:f8:3d:40:ce:36:79:9b:7e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
        Validity
            Not Before: Mar  1 08:00:42 2026 GMT
            Not After : Mar  2 08:00:42 2026 GMT
        Subject: CN=ed39fc38de2d919af9310999757a72ca10b35360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:a2:7e:34:f7:23:6b:87:0b:43:58:fe:57:
                    8f:0a:4d:c7:e9:53:91:d1:c7:0b:2e:76:1f:d1:28:
                    a8:f6:16:f2:d6:ec:af:9e:13:2e:8d:d0:3e:a4:25:
                    1b:de:da:64:d0:9f:3b:04:e1:38:83:73:4b:cf:e4:
                    a1:ee:84:c6:d9:69:2b:f4:57:cd:6f:df:38:81:85:
                    4d:5b:98:92:bb:79:39:1c:f6:8c:7e:e6:23:eb:53:
                    d9:cd:8a:6a:26:0c:ef:17:1b:ac:a3:ec:d8:6d:82:
                    6f:f7:89:ce:a1:4e:b6:d6:5a:54:37:ad:a6:a5:d0:
                    a6:13:ba:a9:59:3e:e6:bf:4d:f4:af:ed:3a:b9:f7:
                    02:7c:68:ed:11:35:81:f0:87:a0:25:20:6a:4e:54:
                    bf:cb:a5:f7:d4:37:ed:06:62:e1:76:6f:de:b8:66:
                    ca:37:26:7d:51:0f:98:ca:ca:f1:5c:13:b0:82:b4:
                    a9:2b:a4:43:3c:9d:a5:9a:20:85:f8:1c:02:d0:99:
                    79:78:c8:f3:44:b3:44:47:d5:1c:8d:83:c4:58:7c:
                    7f:db:ad:2c:49:30:f2:41:b9:94:7a:ba:9e:06:bc:
                    54:e0:ef:32:85:cb:14:7e:fc:0b:00:38:0b:9a:16:
                    41:54:b3:0f:c2:a1:a0:7f:46:1a:f5:2e:2a:64:47:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:FC:38:DE:2D:91:9A:F9:31:09:99:75:7A:72:CA:10:B3:53:60
            X509v3 Authority Key Identifier:
                keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:db:e3:4a:a4:6e:e9:a4:a3:8f:1e:30:a7:73:45:05:ef:
         1d:c5:cd:c9:f7:e0:00:e2:de:f3:c4:89:87:e4:8f:f5:a5:b0:
         22:23:86:9b:91:fa:ba:2a:cd:0a:a0:b1:36:ed:fa:cd:c2:bb:
         54:af:bd:06:54:e7:57:2e:56:c1:c2:72:d6:84:47:d0:ca:cb:
         22:73:22:f8:64:91:9b:8c:28:e7:40:4d:2f:76:58:13:75:68:
         35:a9:d7:a4:36:35:2f:66:6d:08:e8:cb:37:a0:72:61:ef:2b:
         6f:32:fd:89:99:02:40:0f:2b:30:d3:0d:94:4d:11:c4:a9:95:
         60:1c:ed:5f:10:62:3d:da:f7:9b:aa:a4:ec:80:95:8c:4f:46:
         43:2c:4a:94:1f:43:76:55:d1:34:dd:2d:1d:af:1d:53:ff:3b:
         7e:74:7b:76:95:60:a8:8b:1e:36:ad:49:61:49:a1:2c:4e:85:
         47:db:08:b8:bb:cc:1e:9e:42:d5:61:94:c4:9f:5c:74:16:4a:
         8d:35:41:56:4d:98:48:aa:f6:5b:fa:ac:a2:ce:af:d7:d3:70:
         67:f5:96:3c:23:a3:ee:91:c8:bc:57:c5:e2:cc:6b:88:5a:48:
         30:4c:f6:71:7e:d6:99:b3:71:c1:f8:51:88:4f:3d:2b:52:0b:
         99:d8:83:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoafUlWn9D+D1AzjZ5m34oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw
OTgyYTkwHhcNMjYwMzAxMDgwMDQyWhcNMjYwMzAyMDgwMDQyWjAzMTEwLwYDVQQD
EyhlZDM5ZmMzOGRlMmQ5MTlhZjkzMTA5OTk3NTdhNzJjYTEwYjM1MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxqifjT3I2uHC0NY/lePCk3H6VOR
0ccLLnYf0Sio9hby1uyvnhMujdA+pCUb3tpk0J87BOE4g3NLz+Sh7oTG2Wkr9FfN
b984gYVNW5iSu3k5HPaMfuYj61PZzYpqJgzvFxuso+zYbYJv94nOoU621lpUN62m
pdCmE7qpWT7mv030r+06ufcCfGjtETWB8IegJSBqTlS/y6X31DftBmLhdm/euGbK
NyZ9UQ+YysrxXBOwgrSpK6RDPJ2lmiCF+BwC0Jl5eMjzRLNER9UcjYPEWHx/260s
STDyQbmUerqeBrxU4O8yhcsUfvwLADgLmhZBVLMPwqGgf0Ya9S4qZEcwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO05/DjeLZGa+TEJmXV6csoQs1NgMB8GA1UdIwQY
MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt
MTVjNjVmZjI1OGU4LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4
LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNXb40qk
bumko48eMKdzRQXvHcXNyffgAOLe88SJh+SP9aWwIiOGm5H6uirNCqCxNu36zcK7
VK+9BlTnVy5WwcJy1oRH0MrLInMi+GSRm4wo50BNL3ZYE3VoNanXpDY1L2ZtCOjL
N6ByYe8rbzL9iZkCQA8rMNMNlE0RxKmVYBztXxBiPdr3m6qk7ICVjE9GQyxKlB9D
dlXRNN0tHa8dU/87fnR7dpVgqIseNq1JYUmhLE6FR9sIuLvMHp5C1WGUxJ9cdBZK
jTVBVk2YSKr2W/qsos6v19NwZ/WWPCOj7pHIvFfF4sxriFpIMEz2cX7WmbNxwfhR
iE89K1ILmdiD9g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:33:25 2026 by rpki-client