Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File:                     HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier:          WrN9teu7GOv6QbKGdrl3IjicD4xYeL4yE4IpsTELqgo=
Subject key identifier:   7C:F0:D0:FC:15:9F:1F:93:35:4E:F3:D5:11:7B:25:C3:51:52:98:24
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       019CAA21B187E2EB822BEFD24E9B05994C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number:          1313
Signing time:             Sun 01 Mar 2026 16:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:00 +0000
Files and hashes:         1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=)
                          2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=)
                          3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: wlPy1B1auegG8Tv3xf8ORZB3i2YHo7vY53qvLaba6GA=)
                          4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=)
                          5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=)
                          6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=)
                          7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=)
                          8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=)
                          9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=)
                          10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:b1:87:e2:eb:82:2b:ef:d2:4e:9b:05:99:4c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: Mar  1 16:01:00 2026 GMT
            Not After : Mar  2 16:01:00 2026 GMT
        Subject: CN=7cf0d0fc159f1f93354ef3d5117b25c351529824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:1e:a8:d2:1c:9d:57:91:4f:f1:5e:38:ac:
                    53:60:47:7b:28:4b:ce:6e:a6:22:99:80:d4:c1:cd:
                    a5:d5:9d:78:37:c4:e0:89:32:ec:58:d1:f8:8c:39:
                    ca:7a:7d:4c:42:80:a0:b5:64:fd:17:cf:9c:7a:06:
                    63:b9:61:65:30:4f:9d:e4:15:70:f5:eb:c2:84:2b:
                    5d:8c:30:58:a6:c7:2d:76:08:14:f0:b4:e2:78:7f:
                    40:e0:9c:9c:c7:62:20:56:ff:fb:83:b8:59:74:fb:
                    90:fe:37:65:dd:b6:f5:52:6b:cc:a1:eb:0b:87:e8:
                    d6:76:bb:d5:dc:98:a7:9a:3e:c2:3a:c2:e5:18:a6:
                    53:74:c9:9b:78:0d:dd:ae:9a:41:26:46:00:7c:c4:
                    9e:50:6f:d5:fe:a4:96:f6:17:10:9e:ee:6d:eb:e7:
                    e9:af:2e:c8:dd:2a:cb:53:2d:d3:18:ed:f8:cd:a9:
                    09:71:34:c4:a3:4e:e7:9a:ea:05:eb:60:4f:c7:82:
                    8b:0f:14:f1:d3:9e:e9:85:48:c2:53:ba:ed:ba:a1:
                    1a:5c:de:13:d9:38:b4:2e:a3:f0:fe:0a:8f:3a:8c:
                    3c:85:ad:21:7c:2f:4c:b6:32:24:ae:01:56:17:d7:
                    62:f3:41:6b:91:17:96:cc:ea:36:ba:8d:2e:3b:01:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:D0:FC:15:9F:1F:93:35:4E:F3:D5:11:7B:25:C3:51:52:98:24
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:a2:64:39:89:18:33:2a:0d:24:d1:e3:97:c6:e1:a0:62:
         76:b8:7e:13:dd:be:75:76:c8:ae:6a:45:f4:a4:83:19:63:dc:
         16:39:d7:cc:f2:da:32:3d:e3:c9:70:94:bb:5e:f2:22:dd:5a:
         b3:da:af:23:fe:5e:15:08:23:50:27:d0:97:4a:9e:08:a2:9f:
         d4:92:f4:bc:18:c9:70:9e:58:3f:26:ed:30:7a:0b:12:4c:8b:
         6d:e9:09:d9:0f:7b:21:da:2c:80:32:42:8f:32:5a:c1:5c:8c:
         7a:7d:3d:4b:4e:f1:33:a9:b9:ac:8d:79:dd:70:c5:b6:9a:77:
         42:8c:5b:4a:f2:47:ac:5c:94:56:b4:5c:47:aa:62:53:56:d9:
         48:39:db:bb:6d:e8:b9:a8:4c:9c:f7:47:08:b2:fe:d1:09:fc:
         dd:14:10:8e:40:b6:98:f1:9e:b1:f2:a9:5a:42:ba:e9:78:65:
         a6:08:3c:43:dd:3e:b7:5f:5f:84:78:76:1e:7d:43:ff:6d:39:
         bf:9a:bd:14:ba:6e:77:ff:fe:a6:42:92:20:e8:ab:fa:f2:3d:
         8d:19:e6:2b:34:0c:ad:2b:8d:40:2f:bc:61:bf:41:2b:5b:f1:
         e6:55:f2:37:99:86:80:c7:2b:60:89:c9:d8:6f:b0:d7:38:01:
         5d:6f:86:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIbGH4uuCK+/STpsFmUx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2
ZDIwMzkwHhcNMjYwMzAxMTYwMTAwWhcNMjYwMzAyMTYwMTAwWjAzMTEwLwYDVQQD
Eyg3Y2YwZDBmYzE1OWYxZjkzMzU0ZWYzZDUxMTdiMjVjMzUxNTI5ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUseqNIcnVeRT/FeOKxTYEd7KEvO
bqYimYDUwc2l1Z14N8TgiTLsWNH4jDnKen1MQoCgtWT9F8+cegZjuWFlME+d5BVw
9evChCtdjDBYpsctdggU8LTieH9A4Jycx2IgVv/7g7hZdPuQ/jdl3bb1UmvMoesL
h+jWdrvV3Jinmj7COsLlGKZTdMmbeA3drppBJkYAfMSeUG/V/qSW9hcQnu5t6+fp
ry7I3SrLUy3TGO34zakJcTTEo07nmuoF62BPx4KLDxTx057phUjCU7rtuqEaXN4T
2Ti0LqPw/gqPOow8ha0hfC9MtjIkrgFWF9di80FrkReWzOo2uo0uOwGl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzw0PwVnx+TNU7z1RF7JcNRUpgkMB8GA1UdIwQY
MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt
YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj
LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ26iZDmJ
GDMqDSTR45fG4aBidrh+E92+dXbIrmpF9KSDGWPcFjnXzPLaMj3jyXCUu17yIt1a
s9qvI/5eFQgjUCfQl0qeCKKf1JL0vBjJcJ5YPybtMHoLEkyLbekJ2Q97IdosgDJC
jzJawVyMen09S07xM6m5rI153XDFtpp3QoxbSvJHrFyUVrRcR6piU1bZSDnbu23o
uahMnPdHCLL+0Qn83RQQjkC2mPGesfKpWkK66Xhlpgg8Q90+t19fhHh2Hn1D/205
v5q9FLpud//+pkKSIOir+vI9jRnmKzQMrSuNQC+8Yb9BK1vx5lXyN5mGgMcrYInJ
2G+w1zgBXW+GGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:03 2026 by rpki-client