Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          h/W35UlcktUJ1cu3Pdu09JQCrdx9vheXHIfyaslMHNo=
Subject key identifier:   15:96:82:C8:F0:68:06:08:A3:AA:1A:47:46:34:48:E9:F1:77:B2:7F
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       019CAA21BF7B0384BB78BCDA1BF339DAF60E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          14FA
Signing time:             Sun 01 Mar 2026 16:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:04 +0000
Files and hashes:         1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
                          2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: aN4FHroRurRTimHJoaG/+6aKhKjezgqpErgfb+3hu+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:bf:7b:03:84:bb:78:bc:da:1b:f3:39:da:f6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Mar  1 16:01:04 2026 GMT
            Not After : Mar  2 16:01:04 2026 GMT
        Subject: CN=159682c8f0680608a3aa1a47463448e9f177b27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:da:12:25:0b:4a:36:7f:80:96:43:72:3c:1a:
                    c4:a9:c2:20:bc:26:b6:96:4b:fb:29:23:12:71:8f:
                    57:49:4d:66:82:f0:2c:f2:f7:b5:1d:d8:2c:1d:f3:
                    f7:b9:d6:bd:ce:a5:d8:85:3b:6a:e3:1d:a1:67:1f:
                    a2:a4:41:34:8d:97:44:76:3c:d8:b6:0f:e8:58:0c:
                    b6:b0:5d:24:33:cc:3a:4b:0a:74:df:f3:a2:9b:a0:
                    6c:89:16:7d:97:b0:26:f6:3e:2a:f6:a5:c2:7a:82:
                    4a:e3:58:96:1e:29:ba:83:82:6b:26:61:e4:bf:2b:
                    f5:af:db:c9:d7:9d:dc:51:3d:c2:2e:c4:49:75:33:
                    bd:b1:ee:d0:c7:24:77:4f:cd:02:9c:c2:00:5a:39:
                    c1:08:65:84:cf:43:63:3a:80:00:fe:fa:70:4e:23:
                    91:51:0b:55:5e:f0:26:5e:ae:8f:bb:99:56:8b:9d:
                    6b:0d:6b:9c:6e:cf:bc:05:fe:cd:3f:2e:53:06:1d:
                    78:7f:14:81:bb:b8:d0:09:25:fd:15:8a:6c:45:51:
                    f3:3c:6b:f3:a0:75:e9:f4:d0:70:5f:ac:b4:cc:af:
                    c0:06:e0:41:5e:bb:0a:50:81:62:a6:59:d1:e4:d3:
                    b2:3d:fb:48:40:d8:c5:6b:04:9f:d2:e3:26:e5:c6:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:82:C8:F0:68:06:08:A3:AA:1A:47:46:34:48:E9:F1:77:B2:7F
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:15:ca:7a:57:35:e0:87:bc:1c:94:de:84:da:50:99:f5:64:
         b6:4b:42:a8:47:01:29:9f:32:0c:29:5a:1d:0b:0b:79:d0:20:
         df:65:01:ce:b3:2e:74:f6:e7:11:9f:bb:7a:43:be:72:5b:9e:
         ab:32:23:a7:1e:74:f8:6f:0a:c2:34:d6:15:7b:a0:94:9c:33:
         b1:46:79:8b:6d:22:e3:5d:e6:71:5e:f6:5f:51:e6:be:74:5d:
         10:c8:0c:0b:80:a6:b9:93:3d:f2:6c:d8:bd:97:fd:ff:0d:d5:
         a9:56:b1:50:b6:c2:82:dc:3c:0e:1a:1d:32:3d:f1:28:df:6c:
         78:60:e3:a2:50:a9:87:5a:6d:f1:df:fa:89:4b:4d:02:10:f5:
         41:d9:77:f3:ff:17:88:4a:99:35:a6:c3:77:77:20:43:56:8c:
         33:1d:6f:96:3d:83:5c:f7:3b:dc:32:7e:63:e1:b1:cb:1e:c6:
         e9:21:64:0d:70:7c:78:c3:48:65:93:11:99:b1:4c:7a:03:8b:
         be:e8:ee:a4:8e:e1:bd:9b:4b:7f:22:c7:0c:1f:39:a0:f4:cd:
         66:bd:48:f9:4b:a6:e4:b0:1f:6f:76:a4:89:d1:2c:95:34:77:
         e7:f7:3a:1d:d7:f0:99:6c:41:23:c4:5b:af:fe:12:b8:a1:2d:
         8a:d2:a9:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIb97A4S7eLzaG/M52vYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1
ZjFmMDIwHhcNMjYwMzAxMTYwMTA0WhcNMjYwMzAyMTYwMTA0WjAzMTEwLwYDVQQD
EygxNTk2ODJjOGYwNjgwNjA4YTNhYTFhNDc0NjM0NDhlOWYxNzdiMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7doSJQtKNn+AlkNyPBrEqcIgvCa2
lkv7KSMScY9XSU1mgvAs8ve1HdgsHfP3uda9zqXYhTtq4x2hZx+ipEE0jZdEdjzY
tg/oWAy2sF0kM8w6Swp03/Oim6BsiRZ9l7Am9j4q9qXCeoJK41iWHim6g4JrJmHk
vyv1r9vJ153cUT3CLsRJdTO9se7QxyR3T80CnMIAWjnBCGWEz0NjOoAA/vpwTiOR
UQtVXvAmXq6Pu5lWi51rDWucbs+8Bf7NPy5TBh14fxSBu7jQCSX9FYpsRVHzPGvz
oHXp9NBwX6y0zK/ABuBBXrsKUIFiplnR5NOyPftIQNjFawSf0uMm5caRCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWWgsjwaAYIo6oaR0Y0SOnxd7J/MB8GA1UdIwQY
MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt
M2M3NDEyMjBlYTAwLzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw
LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBXKelc1
4Ie8HJTehNpQmfVktktCqEcBKZ8yDClaHQsLedAg32UBzrMudPbnEZ+7ekO+clue
qzIjpx50+G8KwjTWFXuglJwzsUZ5i20i413mcV72X1HmvnRdEMgMC4CmuZM98mzY
vZf9/w3VqVaxULbCgtw8DhodMj3xKN9seGDjolCph1pt8d/6iUtNAhD1Qdl38/8X
iEqZNabDd3cgQ1aMMx1vlj2DXPc73DJ+Y+Gxyx7G6SFkDXB8eMNIZZMRmbFMegOL
vujupI7hvZtLfyLHDB85oPTNZr1I+Uum5LAfb3akidEslTR35/c6HdfwmWxBI8Rb
r/4SuKEtitKpYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:02 2026 by rpki-client