Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          PV7Www0bMOaZQHa/SmSvBJpPdbmHhaXWM5+OkCfDhZk=
Subject key identifier:   5D:3B:1F:BA:7E:F8:5F:F7:3D:E9:36:AE:BE:70:A4:EA:A0:EA:E8:C4
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019CACEB70956A683EDECEA6F9D32055EE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0C93
Signing time:             Mon 02 Mar 2026 05:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:36 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: QbRk/LtxXICvxuFzyBNvGsQP7CNqR4Ba6sEWpYP54RA=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:70:95:6a:68:3e:de:ce:a6:f9:d3:20:55:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Mar  2 05:00:36 2026 GMT
            Not After : Mar  3 05:00:36 2026 GMT
        Subject: CN=5d3b1fba7ef85ff73de936aebe70a4eaa0eae8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:bb:7f:57:34:95:d0:45:db:75:32:01:0a:
                    3f:29:68:7c:2b:6e:a0:92:b2:4b:ca:14:99:59:bc:
                    d8:cf:7a:ab:90:98:4d:3d:f1:07:60:e8:bd:b8:02:
                    ec:76:32:7c:57:86:66:3f:af:5b:21:a6:5b:e8:68:
                    68:3a:76:5e:df:71:a1:34:29:33:c1:5b:a5:14:3f:
                    d4:ad:00:4d:f8:38:13:d2:fe:cd:49:3e:5a:48:95:
                    74:07:0a:ee:c5:f5:1d:b7:93:2e:ae:a0:c9:f5:b0:
                    f8:20:19:88:0a:87:a6:af:4b:7f:06:1c:ad:22:76:
                    87:d3:ac:fa:b6:ff:3a:91:f4:c7:64:4c:ec:ee:d0:
                    94:76:4b:9f:0f:15:bd:05:fd:cc:20:3c:01:b4:e0:
                    96:43:8a:81:ce:3e:a4:cd:ac:58:5c:6f:2b:a2:c0:
                    3a:3f:b9:60:8a:08:5f:65:28:5f:eb:98:72:c1:2a:
                    9f:fe:1f:5c:19:07:7a:6d:57:3a:e1:49:f0:0a:6b:
                    bd:93:0b:c1:ef:f2:77:ef:9a:81:09:ea:e4:e4:e3:
                    fb:d8:8f:f4:65:ac:ad:e8:f6:de:d2:ea:a7:33:92:
                    99:90:f2:13:80:a6:90:50:04:03:b9:73:61:d3:a4:
                    bc:4a:0d:00:53:0b:09:7f:d0:13:b1:05:a6:14:49:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3B:1F:BA:7E:F8:5F:F7:3D:E9:36:AE:BE:70:A4:EA:A0:EA:E8:C4
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:9f:26:e1:96:dc:84:54:23:b0:b7:c5:0c:63:01:9b:73:
         37:36:65:e0:84:02:6f:a4:c3:2d:24:b0:cc:6f:b0:52:3f:19:
         77:87:6c:61:ed:50:30:3f:75:b4:ac:69:cb:cf:1c:69:e5:27:
         4b:97:33:81:81:ce:f0:bd:41:cd:b0:ac:12:9e:b5:55:9a:8d:
         38:d4:fe:23:1a:bf:06:f9:67:35:a8:ff:db:10:c1:97:98:03:
         30:f5:03:fb:0c:a0:2b:7b:18:ee:81:fc:5f:34:f4:67:81:17:
         bf:5e:8b:e4:eb:07:66:42:c4:f1:ad:54:0e:14:03:33:60:20:
         b0:92:23:07:df:4d:ee:b6:38:a6:2d:af:63:59:3e:34:f3:fe:
         37:0f:85:47:64:fa:d8:4b:87:42:f5:4a:55:72:bd:83:6a:45:
         b5:24:5e:7e:83:7b:15:74:f3:a8:b5:86:9c:b6:c3:3d:ba:24:
         09:35:09:7b:bb:5c:78:d2:a2:2a:cd:06:f3:48:bc:70:fe:bc:
         c4:be:38:7b:2d:d5:8e:e9:05:66:ea:92:56:c7:9b:19:18:c7:
         b2:4d:d7:2c:6b:79:7e:48:55:cb:4a:36:0d:6b:67:71:5d:9b:
         ab:17:ca:23:8b:50:aa:c0:f8:4b:73:88:16:5b:36:a4:01:51:
         7e:94:eb:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys63CVamg+3s6m+dMgVe5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWE5YTQ0NTU3ZDQ2ZmYyZDgwODhhMjI4ODg1YWZmMDAw
ZGMyYTIwHhcNMjYwMzAyMDUwMDM2WhcNMjYwMzAzMDUwMDM2WjAzMTEwLwYDVQQD
Eyg1ZDNiMWZiYTdlZjg1ZmY3M2RlOTM2YWViZTcwYTRlYWEwZWFlOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoG7f1c0ldBF23UyAQo/KWh8K26g
krJLyhSZWbzYz3qrkJhNPfEHYOi9uALsdjJ8V4ZmP69bIaZb6GhoOnZe33GhNCkz
wVulFD/UrQBN+DgT0v7NST5aSJV0BwruxfUdt5MurqDJ9bD4IBmICoemr0t/Bhyt
InaH06z6tv86kfTHZEzs7tCUdkufDxW9Bf3MIDwBtOCWQ4qBzj6kzaxYXG8rosA6
P7lgighfZShf65hywSqf/h9cGQd6bVc64UnwCmu9kwvB7/J375qBCerk5OP72I/0
Zayt6Pbe0uqnM5KZkPITgKaQUAQDuXNh06S8Sg0AUwsJf9ATsQWmFEnqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF07H7p++F/3Pek2rr5wpOqg6ujEMB8GA1UdIwQY
MBaAFPEamkRVfUb/LYCIoiiIWv8ADcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAt
YTYwYmM3ZDA3ODc4LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAtYTYwYmM3ZDA3ODc4
LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIN+fJuGW
3IRUI7C3xQxjAZtzNzZl4IQCb6TDLSSwzG+wUj8Zd4dsYe1QMD91tKxpy88caeUn
S5czgYHO8L1BzbCsEp61VZqNONT+Ixq/BvlnNaj/2xDBl5gDMPUD+wygK3sY7oH8
XzT0Z4EXv16L5OsHZkLE8a1UDhQDM2AgsJIjB99N7rY4pi2vY1k+NPP+Nw+FR2T6
2EuHQvVKVXK9g2pFtSRefoN7FXTzqLWGnLbDPbokCTUJe7tceNKiKs0G80i8cP68
xL44ey3VjukFZuqSVsebGRjHsk3XLGt5fkhVy0o2DWtncV2bqxfKI4tQqsD4S3OI
Fls2pAFRfpTrpg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:00 2026 by rpki-client