Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File:                     pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier:          Fbq5/oM7RutKOi/0dI6ELAX+wyjnALRB39Cjd3F1rn4=
Subject key identifier:   67:D4:81:32:32:84:05:BD:DB:6F:AB:93:FF:A7:58:F7:0D:01:A2:82
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer:       /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial:       019CABA26A9DA1845AD8B64726BC6207BAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 23:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:13 +0000
Files and hashes:         1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
                          2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: e/zuoRMnoNPQOes0R6DFlcF9cGNAkqCdOE3ZTb8VaY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:6a:9d:a1:84:5a:d8:b6:47:26:bc:62:07:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
        Validity
            Not Before: Mar  1 23:01:13 2026 GMT
            Not After : Mar  2 23:01:13 2026 GMT
        Subject: CN=67d48132328405bddb6fab93ffa758f70d01a282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:3f:6c:49:be:65:89:bb:b4:30:36:c4:2f:
                    83:28:fe:4b:d3:77:d1:cd:23:15:49:a2:14:b8:e3:
                    d9:c6:14:0d:d9:75:f6:32:fc:39:81:7c:33:87:2f:
                    58:8e:4e:57:b2:c3:b1:c7:60:bd:fe:e9:5a:55:2f:
                    9b:cc:04:ce:7c:d6:62:24:80:19:60:86:6b:d3:c8:
                    33:46:f9:1b:52:8d:60:74:37:01:39:0b:b5:56:31:
                    a0:36:a3:88:7b:bc:48:96:02:eb:af:10:d5:67:66:
                    31:1a:38:3d:b4:2c:15:29:20:fc:3a:86:e2:b8:21:
                    5a:ad:85:74:be:85:82:7b:d4:8a:f6:2a:f3:cf:bf:
                    74:f2:b2:1b:bb:72:b2:ab:cf:de:64:16:cb:26:06:
                    fc:95:85:69:b6:99:4d:18:1c:8f:da:71:96:78:71:
                    ab:44:b2:47:a7:62:1a:43:1c:83:34:94:7d:c5:ac:
                    28:27:ca:06:2c:a3:10:ee:9d:c6:ba:e9:04:06:42:
                    82:62:fc:19:78:5f:93:19:22:b6:09:9e:33:da:17:
                    e9:34:62:37:d5:83:bc:1a:f9:4a:63:a1:9d:85:c6:
                    e1:5f:0a:c6:cd:63:6d:ba:96:4c:4f:61:10:ce:90:
                    0b:a0:32:78:92:32:b8:b4:40:a8:1d:88:2d:df:60:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D4:81:32:32:84:05:BD:DB:6F:AB:93:FF:A7:58:F7:0D:01:A2:82
            X509v3 Authority Key Identifier:
                keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:50:de:47:61:bf:19:5d:cc:1c:26:63:c1:b5:1e:d2:ae:
         26:78:57:4a:f3:94:f3:0a:22:60:e5:6b:5b:22:4c:d2:91:2e:
         9d:49:5d:d1:5b:28:79:1f:8f:65:75:d7:a6:67:74:22:ae:a6:
         b6:b0:d5:57:31:de:8b:ef:8f:32:12:09:83:d2:35:7f:fc:2a:
         a1:74:26:3c:20:ca:39:8e:a8:eb:ef:05:05:8b:d5:06:7f:27:
         a0:11:df:5e:71:db:69:1f:0c:ea:57:a0:c9:15:5d:8f:ac:c8:
         da:47:ce:cc:9c:61:89:0a:4f:7f:56:16:4a:10:fa:01:3c:51:
         ae:dd:68:03:66:a2:15:c2:55:46:66:ba:24:7a:0a:06:7d:99:
         87:0c:78:18:72:60:af:21:ec:a4:45:ae:99:90:e7:20:c5:b3:
         a1:22:1a:38:f6:a7:81:eb:d8:5f:ee:96:b7:2f:ac:82:84:09:
         fa:e4:b0:cb:fc:c6:ef:7d:90:a2:c6:bb:fc:30:7b:6e:92:b8:
         9b:3a:e1:b6:ec:ab:d9:55:1e:b1:fa:38:57:4c:d7:f9:07:72:
         0a:63:0f:2c:fb:21:16:aa:89:16:63:dc:67:42:13:56:b3:e1:
         0e:3c:bc:db:d4:98:5c:70:6e:35:b3:24:f7:cd:41:66:fb:0d:
         ee:40:ca:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyromqdoYRa2LZHJrxiB7q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjYwMzAxMjMwMTEzWhcNMjYwMzAyMjMwMTEzWjAzMTEwLwYDVQQD
Eyg2N2Q0ODEzMjMyODQwNWJkZGI2ZmFiOTNmZmE3NThmNzBkMDFhMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rw/bEm+ZYm7tDA2xC+DKP5L03fR
zSMVSaIUuOPZxhQN2XX2Mvw5gXwzhy9Yjk5XssOxx2C9/ulaVS+bzATOfNZiJIAZ
YIZr08gzRvkbUo1gdDcBOQu1VjGgNqOIe7xIlgLrrxDVZ2YxGjg9tCwVKSD8Oobi
uCFarYV0voWCe9SK9irzz7908rIbu3Kyq8/eZBbLJgb8lYVptplNGByP2nGWeHGr
RLJHp2IaQxyDNJR9xawoJ8oGLKMQ7p3GuukEBkKCYvwZeF+TGSK2CZ4z2hfpNGI3
1YO8GvlKY6GdhcbhXwrGzWNtupZMT2EQzpALoDJ4kjK4tECoHYgt32D8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfUgTIyhAW922+rk/+nWPcNAaKCMB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOdQ3kdh
vxldzBwmY8G1HtKuJnhXSvOU8woiYOVrWyJM0pEunUld0VsoeR+PZXXXpmd0Iq6m
trDVVzHei++PMhIJg9I1f/wqoXQmPCDKOY6o6+8FBYvVBn8noBHfXnHbaR8M6leg
yRVdj6zI2kfOzJxhiQpPf1YWShD6ATxRrt1oA2aiFcJVRma6JHoKBn2Zhwx4GHJg
ryHspEWumZDnIMWzoSIaOPangevYX+6Wty+sgoQJ+uSwy/zG732Qosa7/DB7bpK4
mzrhtuyr2VUesfo4V0zX+QdyCmMPLPshFqqJFmPcZ0ITVrPhDjy829SYXHBuNbMk
981BZvsN7kDKEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:06 2026 by rpki-client