Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File:                     T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier:          awfSXIs2cemskyZw5Uw95JU37uZ1VbMRFZom+0RE8hU=
Subject key identifier:   7C:DF:A6:0B:78:4E:BE:BA:35:66:E1:7B:FB:EA:85:8D:E4:39:07:6A
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       019CA97CD3A750C550B7127B28BEAC7B438F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number:          0447
Signing time:             Sun 01 Mar 2026 13:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:55 +0000
Files and hashes:         1: RNKA09gmabj2JlF4I1bGm-LyfJ4.asa (hash: 9aXjOvMKdj2EmkaeYTua4+aJ6Mm8p/TnOqM6sJ1bQoY=)
                          2: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: pYR+rxIo61sWTH2r75q+PoDZkt8jTg6PM4QhwT3dWMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:d3:a7:50:c5:50:b7:12:7b:28:be:ac:7b:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Mar  1 13:00:55 2026 GMT
            Not After : Mar  2 13:00:55 2026 GMT
        Subject: CN=7cdfa60b784ebeba3566e17bfbea858de439076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:fb:6c:c2:fb:41:a9:ea:95:2e:ab:9e:8e:
                    ea:92:b4:e9:c3:e5:bf:c6:76:c3:3a:59:5b:bd:a4:
                    db:d7:88:68:78:d6:35:37:ac:e8:86:27:c4:6c:84:
                    a4:8f:e3:b5:ae:f2:12:49:3f:f5:7e:98:d3:b2:30:
                    ab:08:09:2f:85:f7:d6:71:46:c5:89:96:50:0e:4f:
                    3c:53:98:1f:1c:ce:e4:28:25:d9:eb:60:ff:91:2d:
                    89:1d:53:57:08:83:a2:d6:e0:cb:dc:20:e8:79:a1:
                    1a:dc:b8:3a:af:01:91:2e:30:55:60:0a:f9:2f:86:
                    92:0a:07:56:26:2b:63:8c:c9:0c:e9:6d:e0:01:62:
                    8e:0b:f9:e9:0d:f1:10:ba:fc:d5:d3:c0:a8:eb:fb:
                    3e:ef:6e:1b:8d:fe:50:89:72:94:48:d7:0e:ab:7c:
                    9f:c5:4b:4f:24:6c:ee:57:ec:c0:89:be:ba:da:c6:
                    6b:b2:e2:00:39:a1:42:50:23:74:92:8b:fa:7b:47:
                    1c:9f:97:71:e9:79:2b:8d:15:a4:00:0b:60:e8:e5:
                    b0:8a:a6:a3:df:6f:ad:0d:8d:59:e8:52:f1:49:aa:
                    4b:08:f3:80:d7:61:63:79:47:0c:24:1f:6c:bb:3f:
                    55:d1:a4:4e:7f:73:71:26:a0:15:f5:1a:f4:9a:10:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:A6:0B:78:4E:BE:BA:35:66:E1:7B:FB:EA:85:8D:E4:39:07:6A
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:94:04:77:da:1e:3d:e6:2d:4e:a2:33:24:e7:e7:9b:cc:
         80:e4:21:50:32:7d:d2:d8:ca:d8:a4:07:c3:3b:51:ab:1f:18:
         b7:98:87:26:7c:c8:a2:b0:5e:6b:1a:3f:5d:77:b0:6b:af:ab:
         88:1c:17:69:4d:7c:45:8d:df:cd:d2:ce:35:f7:6d:13:5c:bf:
         f9:f8:1e:27:4b:f5:06:8e:35:fc:49:f7:2a:b3:7c:71:42:90:
         62:78:f9:1f:ee:46:1a:34:85:ff:b9:ae:97:d3:08:a1:1d:a4:
         d9:8e:74:b7:d1:3e:26:f9:55:8e:ba:d7:41:4e:7b:85:5a:ed:
         9b:4e:65:55:a4:19:a1:7a:ae:05:4e:18:49:ba:dc:0b:e7:7a:
         33:04:e7:9a:0c:14:16:b8:b3:b1:65:40:53:88:58:5e:71:8d:
         4e:86:74:24:9d:f6:d9:ea:e6:45:6a:11:c8:f7:eb:4c:42:d5:
         bb:21:03:c2:8f:21:b5:49:fe:93:bd:23:2b:fa:21:fd:f2:f4:
         b2:66:0b:a9:f2:88:a6:cd:56:b9:5a:29:b9:66:c1:5f:55:d4:
         28:30:d9:2b:70:07:48:ad:5b:9a:ce:ba:f5:6f:fe:10:91:d3:
         b3:4e:7b:72:22:27:df:95:31:26:fb:32:48:fa:fa:58:f4:2a:
         51:a2:d8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfNOnUMVQtxJ7KL6se0OPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTU3MTBhM2U4NDA1YzFhZmRhNmM2M2U5ZTc3MzY2ZWZj
NjFlN2MwHhcNMjYwMzAxMTMwMDU1WhcNMjYwMzAyMTMwMDU1WjAzMTEwLwYDVQQD
Eyg3Y2RmYTYwYjc4NGViZWJhMzU2NmUxN2JmYmVhODU4ZGU0MzkwNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXP7bML7QanqlS6rno7qkrTpw+W/
xnbDOllbvaTb14hoeNY1N6zohifEbISkj+O1rvISST/1fpjTsjCrCAkvhffWcUbF
iZZQDk88U5gfHM7kKCXZ62D/kS2JHVNXCIOi1uDL3CDoeaEa3Lg6rwGRLjBVYAr5
L4aSCgdWJitjjMkM6W3gAWKOC/npDfEQuvzV08Co6/s+724bjf5QiXKUSNcOq3yf
xUtPJGzuV+zAib662sZrsuIAOaFCUCN0kov6e0ccn5dx6XkrjRWkAAtg6OWwiqaj
32+tDY1Z6FLxSapLCPOA12FjeUcMJB9suz9V0aROf3NxJqAV9Rr0mhDZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzfpgt4Tr66NWbhe/vqhY3kOQdqMB8GA1UdIwQY
MBaAFE9VcQo+hAXBr9psY+nnc2bvxh58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMzU1ZjYtMjcwYy00MmI4LWIyNjQt
YjBkNzExN2Q3OTRmLzEvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMzU1ZjYtMjcwYy00MmI4LWIyNjQtYjBkNzExN2Q3OTRm
LzEvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGeUBHfa
Hj3mLU6iMyTn55vMgOQhUDJ90tjK2KQHwztRqx8Yt5iHJnzIorBeaxo/XXewa6+r
iBwXaU18RY3fzdLONfdtE1y/+fgeJ0v1Bo41/En3KrN8cUKQYnj5H+5GGjSF/7mu
l9MIoR2k2Y50t9E+JvlVjrrXQU57hVrtm05lVaQZoXquBU4YSbrcC+d6MwTnmgwU
FrizsWVAU4hYXnGNToZ0JJ322ermRWoRyPfrTELVuyEDwo8htUn+k70jK/oh/fL0
smYLqfKIps1WuVopuWbBX1XUKDDZK3AHSK1bms669W/+EJHTs057ciIn35UxJvsy
SPr6WPQqUaLYBw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:52:26 2026 by rpki-client