Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          GagGllJyi/2GXYe3iyuU51TFXmtO35QAlaoDVIcbPlc=
Subject key identifier:   96:13:63:7E:C2:C8:2B:34:C0:B0:D1:CD:91:A3:17:77:03:BF:80:21
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019CAA58793CA66FF5B539C31CF53386DD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 17:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:50 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: bkT/7IksJxgFIJk9xbchRYUw/Ya0YhNgoTDMbuxAspU=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:79:3c:a6:6f:f5:b5:39:c3:1c:f5:33:86:dd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Mar  1 17:00:50 2026 GMT
            Not After : Mar  2 17:00:50 2026 GMT
        Subject: CN=9613637ec2c82b34c0b0d1cd91a3177703bf8021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:19:e2:27:aa:e3:80:9a:14:b7:23:fe:67:
                    43:e4:80:fe:71:41:60:e4:e9:fa:1a:18:70:2a:82:
                    bb:66:b0:99:e1:bd:b6:9c:6b:74:c1:2f:fd:f4:83:
                    18:2a:be:2a:c0:cf:52:fb:84:c9:a7:cb:de:c1:da:
                    36:0f:e6:ce:e7:47:56:e8:b6:97:d1:4b:e2:27:56:
                    f4:36:13:70:df:5a:25:dc:f9:0a:e6:4e:02:b4:b7:
                    7e:34:f2:45:a7:87:cd:c6:fb:27:9f:ee:eb:29:21:
                    e2:19:1d:41:11:95:5a:cd:da:9e:a0:02:01:58:78:
                    d6:f0:9f:7e:2d:6b:ba:b6:3b:70:59:d6:3a:02:e9:
                    da:1b:0f:24:24:94:d9:1c:7b:5f:2c:28:3e:8e:ab:
                    59:31:e7:eb:aa:56:e2:1c:a0:d2:58:32:7f:f5:f7:
                    50:26:33:61:b6:90:5e:d0:63:4e:c8:af:84:8c:74:
                    86:1e:2b:bb:fa:de:6b:05:9a:e7:77:36:4e:d5:43:
                    44:1e:c9:80:53:b6:cc:5e:45:75:f8:43:3d:d6:a9:
                    38:61:16:4e:78:e6:ef:67:f4:51:f5:82:12:dd:e5:
                    65:76:0c:07:b9:1c:2c:b4:d6:33:9c:98:58:d8:60:
                    3c:cd:6c:10:c6:40:8e:dd:d7:11:a2:ca:e2:fa:ad:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:13:63:7E:C2:C8:2B:34:C0:B0:D1:CD:91:A3:17:77:03:BF:80:21
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:27:c6:92:5a:e1:ee:63:93:65:47:05:a3:19:b8:89:01:
         59:94:cd:ee:be:a9:21:ca:28:59:4d:15:11:10:e9:7e:d2:b2:
         d4:ff:02:9d:a2:e0:e1:47:82:67:cb:9c:72:37:9d:76:c0:61:
         1b:70:54:55:85:5e:fd:a0:2e:b7:54:44:8f:4f:f1:b8:03:59:
         51:a5:05:87:03:c2:25:45:6a:51:42:1c:cd:14:c5:f5:5b:40:
         62:28:3e:61:bb:7a:d9:79:c0:28:68:0a:9f:4a:ba:85:09:c6:
         d4:be:36:97:54:70:3f:ba:54:6e:fe:d4:98:d1:19:04:12:0a:
         cd:08:91:55:85:d0:56:30:5e:9d:b5:ad:b4:2d:ec:e3:02:61:
         3a:b8:b8:c2:3b:5a:fc:e8:54:66:5a:98:c4:52:11:ea:13:eb:
         34:db:5b:d3:f7:74:f3:cb:fc:7c:69:19:18:9b:89:85:7a:31:
         88:74:a9:54:a4:4c:71:fc:dd:d4:15:b2:c4:ab:fc:02:2f:21:
         67:ef:3f:45:39:de:8f:bc:08:f1:a2:75:30:85:e9:fc:8d:3b:
         f1:b2:d8:30:bf:3b:e6:ad:88:c4:ad:ba:91:e2:46:9b:7f:3c:
         36:fc:59:33:8c:b3:fc:86:e2:fc:80:39:2e:3b:c7:05:16:1f:
         dd:a9:f0:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHk8pm/1tTnDHPUzht2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjYwMzAxMTcwMDUwWhcNMjYwMzAyMTcwMDUwWjAzMTEwLwYDVQQD
Eyg5NjEzNjM3ZWMyYzgyYjM0YzBiMGQxY2Q5MWEzMTc3NzAzYmY4MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jkZ4ieq44CaFLcj/mdD5ID+cUFg
5On6GhhwKoK7ZrCZ4b22nGt0wS/99IMYKr4qwM9S+4TJp8vewdo2D+bO50dW6LaX
0UviJ1b0NhNw31ol3PkK5k4CtLd+NPJFp4fNxvsnn+7rKSHiGR1BEZVazdqeoAIB
WHjW8J9+LWu6tjtwWdY6AunaGw8kJJTZHHtfLCg+jqtZMefrqlbiHKDSWDJ/9fdQ
JjNhtpBe0GNOyK+EjHSGHiu7+t5rBZrndzZO1UNEHsmAU7bMXkV1+EM91qk4YRZO
eObvZ/RR9YIS3eVldgwHuRwstNYznJhY2GA8zWwQxkCO3dcRosri+q2S0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYTY37CyCs0wLDRzZGjF3cDv4AhMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsInxpJa
4e5jk2VHBaMZuIkBWZTN7r6pIcooWU0VERDpftKy1P8CnaLg4UeCZ8uccjeddsBh
G3BUVYVe/aAut1REj0/xuANZUaUFhwPCJUVqUUIczRTF9VtAYig+Ybt62XnAKGgK
n0q6hQnG1L42l1RwP7pUbv7UmNEZBBIKzQiRVYXQVjBenbWttC3s4wJhOri4wjta
/OhUZlqYxFIR6hPrNNtb0/d088v8fGkZGJuJhXoxiHSpVKRMcfzd1BWyxKv8Ai8h
Z+8/RTnej7wI8aJ1MIXp/I078bLYML875q2IxK26keJGm388NvxZM4yz/Ibi/IA5
LjvHBRYf3anw4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:12 2026 by rpki-client