Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          HlAtBiCIUSCYzFlnq/FF9EaUrAXKKS8sbiiHjEOEYaE=
Subject key identifier:   8A:F2:FF:67:26:52:6E:52:F1:73:A9:07:89:FF:E8:AC:7F:D7:59:35
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019CAEA3226B7D2179A83A6EAC70A832D5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          13AF
Signing time:             Mon 02 Mar 2026 13:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:52 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: 7d1ynsX0N+C7u6KdozcJlApkcKcX6KxbkJ4WqNK/9UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:22:6b:7d:21:79:a8:3a:6e:ac:70:a8:32:d5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Mar  2 13:00:52 2026 GMT
            Not After : Mar  3 13:00:52 2026 GMT
        Subject: CN=8af2ff6726526e52f173a90789ffe8ac7fd75935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:cf:2c:ec:a6:4e:9b:27:9d:e2:c9:4b:7c:
                    f5:d4:d1:20:3d:89:25:ea:69:8a:d0:87:81:90:fb:
                    5c:41:78:b2:48:0b:86:6d:19:75:69:91:db:eb:6b:
                    b9:db:77:a6:e5:c2:8a:9c:ba:46:89:bf:6a:4d:3e:
                    2f:26:79:12:7e:ec:e6:53:c0:9e:91:c1:f7:38:44:
                    4f:63:26:cb:52:0e:a3:4e:f6:19:48:de:9b:ab:e2:
                    04:4e:1e:6f:51:17:ca:48:ef:c6:18:e3:23:f7:c7:
                    74:6c:24:08:1e:85:69:4b:a7:4b:31:26:7a:6c:6c:
                    a5:75:1a:cd:b4:24:b5:20:f2:2e:4a:3b:cc:35:70:
                    ea:6a:9e:84:f0:27:87:8f:8d:2b:c4:c7:f7:0f:1c:
                    ed:78:b6:64:eb:2d:fc:d5:e8:0a:79:a5:22:22:5d:
                    3a:3d:9f:28:1e:92:13:be:4d:c9:7f:b0:b5:cc:96:
                    0a:2b:24:41:2e:55:04:27:60:79:f8:52:67:2f:ce:
                    a8:c8:63:75:f9:f7:89:db:07:b1:af:0f:c8:16:d6:
                    0c:0b:ed:49:19:9a:f2:7b:8e:84:73:11:50:47:7d:
                    75:8b:9c:99:05:48:c4:ca:ad:38:c0:de:37:fe:a3:
                    0d:6d:eb:dd:7c:b1:8d:02:1a:f0:f3:ce:63:c5:24:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F2:FF:67:26:52:6E:52:F1:73:A9:07:89:FF:E8:AC:7F:D7:59:35
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4e:20:30:38:f1:81:95:8c:70:bb:41:6d:50:b7:82:4a:98:
         59:d8:cd:7c:99:96:2d:90:42:3c:9d:55:ea:6d:67:59:68:73:
         95:7b:d2:76:86:12:3d:07:c7:0b:5f:c4:ef:1d:24:65:2e:20:
         a9:4e:08:46:80:15:71:ca:5b:50:8f:52:18:6b:86:5f:6d:75:
         c7:6e:e6:91:39:f7:b0:70:04:68:35:ea:8b:c9:17:3f:20:d8:
         a4:cc:6c:bf:4c:a9:f9:d6:ff:ce:2c:94:0f:62:e9:0a:0e:f5:
         89:ab:43:9e:97:9e:a9:77:c7:d3:5c:6d:21:66:a2:c5:b3:73:
         45:f6:f6:50:b9:33:9b:22:b7:80:3c:da:04:65:bb:c2:39:09:
         f7:c0:66:35:fb:e4:0e:75:cd:e9:ab:98:47:9a:d7:9d:1e:42:
         0c:ee:ac:73:eb:1c:10:68:3d:c5:2a:bc:2c:64:05:ea:1c:b9:
         1a:c4:b5:64:5b:b7:24:e9:ae:30:1d:2f:fb:e2:da:6a:4c:9a:
         71:44:f8:d1:f6:62:99:30:27:ce:35:06:70:8e:5d:83:48:4a:
         7a:82:75:77:ff:95:37:1a:5b:b0:3e:1d:cf:9c:5d:c8:0d:7e:
         e2:ae:da:d3:06:e6:ca:6e:4d:9d:8e:82:84:b8:fe:ee:ee:80:
         54:73:c8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuoyJrfSF5qDpurHCoMtXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZWQzZWJjZDIxNTVmOWExNzhhMTAzYWRhYjQ4ZmRhOGIy
Mjc1YTUwHhcNMjYwMzAyMTMwMDUyWhcNMjYwMzAzMTMwMDUyWjAzMTEwLwYDVQQD
Eyg4YWYyZmY2NzI2NTI2ZTUyZjE3M2E5MDc4OWZmZThhYzdmZDc1OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jPPLOymTpsnneLJS3z11NEgPYkl
6mmK0IeBkPtcQXiySAuGbRl1aZHb62u523em5cKKnLpGib9qTT4vJnkSfuzmU8Ce
kcH3OERPYybLUg6jTvYZSN6bq+IETh5vURfKSO/GGOMj98d0bCQIHoVpS6dLMSZ6
bGyldRrNtCS1IPIuSjvMNXDqap6E8CeHj40rxMf3DxzteLZk6y381egKeaUiIl06
PZ8oHpITvk3Jf7C1zJYKKyRBLlUEJ2B5+FJnL86oyGN1+feJ2wexrw/IFtYMC+1J
GZrye46EcxFQR311i5yZBUjEyq04wN43/qMNbevdfLGNAhrw885jxSR4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIry/2cmUm5S8XOpB4n/6Kx/11k1MB8GA1UdIwQY
MBaAFLjtPrzSFV+aF4oQOtq0j9qLInWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMt
ZGVhMTJkZDhjN2Y0LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMtZGVhMTJkZDhjN2Y0
LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk4gMDjx
gZWMcLtBbVC3gkqYWdjNfJmWLZBCPJ1V6m1nWWhzlXvSdoYSPQfHC1/E7x0kZS4g
qU4IRoAVccpbUI9SGGuGX211x27mkTn3sHAEaDXqi8kXPyDYpMxsv0yp+db/ziyU
D2LpCg71iatDnpeeqXfH01xtIWaixbNzRfb2ULkzmyK3gDzaBGW7wjkJ98BmNfvk
DnXN6auYR5rXnR5CDO6sc+scEGg9xSq8LGQF6hy5GsS1ZFu3JOmuMB0v++Laakya
cUT40fZimTAnzjUGcI5dg0hKeoJ1d/+VNxpbsD4dz5xdyA1+4q7a0wbmym5NnY6C
hLj+7u6AVHPIFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:15 2026 by rpki-client