Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File:                     q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier:          DuPc7QGSAaa6Fb5wm0YcgBYAtvNIRvPqw9/LW6FiKfY=
Subject key identifier:   48:5B:AE:EA:D8:57:9A:50:2B:9A:50:10:AD:BE:E3:09:08:AC:4C:84
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer:       /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial:       019CAC0FD14B2F8ED95711EC6545B10E8A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number:          0810
Signing time:             Mon 02 Mar 2026 01:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:43 +0000
Files and hashes:         1: YY2bD1lJGVXnAve4KCOQnRgcyqM.roa (hash: zyz3+Ol7aMUrRBs0SEp2hLbGVzOPcEMMPHj5nB0BmD0=)
                          2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: 5QB/zbV8JgFFExDvVRXZ79DQ7CqqpqGnOZSF5bwLzes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:d1:4b:2f:8e:d9:57:11:ec:65:45:b1:0e:8a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
        Validity
            Not Before: Mar  2 01:00:43 2026 GMT
            Not After : Mar  3 01:00:43 2026 GMT
        Subject: CN=485baeead8579a502b9a5010adbee30908ac4c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:a7:ad:4a:8f:06:62:19:48:75:70:38:ba:
                    46:fb:d1:08:48:f0:71:4f:40:75:76:7b:53:2b:f5:
                    a8:ce:ab:9a:2f:df:bf:a9:4b:4a:4e:5a:50:77:c1:
                    5d:bc:45:95:90:6f:24:9b:10:58:9c:38:f0:37:d7:
                    d1:2a:26:23:96:db:14:9f:ec:23:0f:e3:59:01:65:
                    6b:47:ce:e0:6c:c3:fe:c7:ab:d6:31:0f:65:3f:11:
                    65:ef:bc:84:2f:fd:08:97:04:e6:23:08:c6:67:68:
                    07:2f:a7:9b:14:2f:f8:71:9f:53:bb:32:fd:1d:cf:
                    15:e4:ff:d9:9c:13:53:f5:8d:05:ff:07:16:4d:af:
                    65:5c:ea:3f:2f:3f:3e:55:7e:a9:c4:b2:8a:d0:46:
                    40:c2:64:4f:e8:6b:40:e7:d3:b1:f5:06:75:12:52:
                    59:c8:b7:a2:bb:19:f8:60:7b:7a:58:6c:51:b6:d8:
                    af:6e:c0:34:b1:0d:1b:54:c6:29:57:79:d5:a4:e3:
                    a9:76:0d:26:01:1a:c3:58:cc:33:c7:90:c9:84:d8:
                    0c:36:9d:13:89:e5:8b:e9:e2:55:0a:eb:88:8c:8b:
                    b2:d0:3f:dc:78:76:54:44:26:5b:27:cb:4a:3e:5d:
                    09:d4:1a:73:40:60:a5:4c:5b:0d:d3:11:dc:be:c9:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5B:AE:EA:D8:57:9A:50:2B:9A:50:10:AD:BE:E3:09:08:AC:4C:84
            X509v3 Authority Key Identifier:
                keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:22:a3:d4:56:61:3f:6d:e0:44:dc:34:c4:cd:a5:08:a8:
         ce:6a:22:18:16:e9:28:5e:61:be:07:3a:4f:3f:ba:53:a4:2e:
         d6:83:8b:16:1d:fb:90:cd:42:d9:42:1a:17:c8:64:bb:e0:ef:
         70:88:d5:3f:c9:51:47:95:56:21:15:26:33:63:87:90:2b:02:
         77:d4:03:e8:f2:b8:70:c9:ba:b9:32:bb:82:04:79:bf:65:1e:
         61:b7:67:cd:1e:75:08:98:46:92:12:88:12:98:63:89:43:74:
         af:38:a2:57:97:03:a6:9a:d7:ad:27:87:f6:2e:36:7d:75:28:
         3e:0a:df:29:16:c0:1e:3e:2f:e6:16:bd:33:bc:e2:27:3f:0e:
         78:0c:46:1e:e1:2e:ce:69:38:9c:aa:0e:98:e2:e8:0c:16:6a:
         da:5d:99:8b:39:7b:a5:f8:95:f3:ac:6c:5e:2c:72:74:81:9f:
         3c:66:e5:33:6f:4a:fb:6a:d9:d1:d4:01:1f:f4:3d:84:70:48:
         46:a6:87:75:c1:04:9a:ca:04:44:3b:5f:14:23:8e:b1:9e:be:
         cd:0c:78:be:9f:87:e3:fe:45:2a:5b:8d:4b:de:c9:7f:c4:44:
         3b:c9:99:d2:b2:4b:b3:2a:f9:16:ef:3e:4f:e4:69:ac:6e:61:
         56:fd:90:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9FLL47ZVxHsZUWxDoqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTliNDYyZWZjMDQ1ODM5NjBhMjA1ZjJmNDU2NTlkYzdm
ZTNjNmMwHhcNMjYwMzAyMDEwMDQzWhcNMjYwMzAzMDEwMDQzWjAzMTEwLwYDVQQD
Eyg0ODViYWVlYWQ4NTc5YTUwMmI5YTUwMTBhZGJlZTMwOTA4YWM0Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bynrUqPBmIZSHVwOLpG+9EISPBx
T0B1dntTK/WozquaL9+/qUtKTlpQd8FdvEWVkG8kmxBYnDjwN9fRKiYjltsUn+wj
D+NZAWVrR87gbMP+x6vWMQ9lPxFl77yEL/0IlwTmIwjGZ2gHL6ebFC/4cZ9TuzL9
Hc8V5P/ZnBNT9Y0F/wcWTa9lXOo/Lz8+VX6pxLKK0EZAwmRP6GtA59Ox9QZ1ElJZ
yLeiuxn4YHt6WGxRttivbsA0sQ0bVMYpV3nVpOOpdg0mARrDWMwzx5DJhNgMNp0T
ieWL6eJVCuuIjIuy0D/ceHZURCZbJ8tKPl0J1BpzQGClTFsN0xHcvsknQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhbrurYV5pQK5pQEK2+4wkIrEyEMB8GA1UdIwQY
MBaAFKtZtGLvwEWDlgogXy9FZZ3H/jxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUt
ZmQ1ZmFlZDFjMWQwLzEvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUtZmQ1ZmFlZDFjMWQw
LzEvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKIio9RW
YT9t4ETcNMTNpQiozmoiGBbpKF5hvgc6Tz+6U6Qu1oOLFh37kM1C2UIaF8hku+Dv
cIjVP8lRR5VWIRUmM2OHkCsCd9QD6PK4cMm6uTK7ggR5v2UeYbdnzR51CJhGkhKI
EphjiUN0rziiV5cDpprXrSeH9i42fXUoPgrfKRbAHj4v5ha9M7ziJz8OeAxGHuEu
zmk4nKoOmOLoDBZq2l2Zizl7pfiV86xsXixydIGfPGblM29K+2rZ0dQBH/Q9hHBI
RqaHdcEEmsoERDtfFCOOsZ6+zQx4vp+H4/5FKluNS97Jf8REO8mZ0rJLsyr5Fu8+
T+RprG5hVv2Q8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:33 2026 by rpki-client