Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File:                     DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier:          GH7WC7pa3KAti07sQ5fnrGz1G9xLXIO3Mk/M1dhU2W4=
Subject key identifier:   10:24:38:82:15:D5:C2:36:7E:67:B3:68:49:A1:33:0E:46:FD:97:60
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       019CAAC69E272134C814CE61E18473BDEBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 19:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:09 +0000
Files and hashes:         1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
                          2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
                          3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: +pvBoV7fz0gtnZG0/RUerTNmjMmhzefzm7KkkmpPFIo=)
                          4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
                          5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
                          6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
                          7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
                          8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:9e:27:21:34:c8:14:ce:61:e1:84:73:bd:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: Mar  1 19:01:09 2026 GMT
            Not After : Mar  2 19:01:09 2026 GMT
        Subject: CN=1024388215d5c2367e67b36849a1330e46fd9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:de:f0:25:39:67:19:09:0b:b0:80:3a:23:
                    cb:cf:4a:17:51:b0:c5:a0:4c:81:fb:72:b1:38:44:
                    c0:95:ce:d4:5d:8f:e0:1d:12:2b:10:15:fe:6a:35:
                    10:98:56:30:d5:6d:96:6f:f6:f1:35:56:8c:dd:97:
                    b1:64:43:37:51:36:5b:32:df:28:73:bf:65:27:f4:
                    3c:4a:14:be:f4:94:17:84:17:46:58:c9:54:56:0d:
                    f0:fd:07:02:19:e2:83:0e:8a:fd:22:fc:5d:42:dd:
                    73:fd:57:61:15:ca:bc:71:64:d7:8e:23:94:95:d5:
                    ba:db:81:99:47:81:08:5d:55:a4:7e:81:4b:d9:a9:
                    93:ca:f3:31:c2:05:53:29:1c:72:50:e8:60:bf:de:
                    4c:7c:58:0f:8e:5e:81:70:28:5c:97:0d:9c:59:ff:
                    01:0b:d9:17:d9:d0:5d:10:56:85:a2:34:e6:f1:3d:
                    ea:ab:66:98:af:41:91:7e:c0:72:35:6a:fa:a4:5e:
                    4f:49:4d:6b:69:27:05:2c:06:27:60:e8:52:de:14:
                    2b:74:66:e8:f0:bd:63:1f:d5:e5:28:8d:2e:ea:d1:
                    e5:51:25:db:d0:fd:94:91:b9:39:1e:72:c8:07:8e:
                    aa:4e:ae:04:b6:01:17:33:2e:82:49:30:7d:fd:f7:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:24:38:82:15:D5:C2:36:7E:67:B3:68:49:A1:33:0E:46:FD:97:60
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:2d:26:eb:b8:49:e0:eb:c2:30:be:7c:04:bb:bd:50:4e:
         ab:26:c9:08:6e:65:c2:f1:b9:93:6d:ea:94:40:79:e1:90:5c:
         7f:0e:c8:b7:07:e7:99:a9:03:25:7c:8e:98:9e:cb:97:d9:f2:
         6e:28:f8:58:85:32:7a:56:78:7d:b6:9d:c2:1c:17:bd:90:41:
         c4:06:44:de:19:e2:ef:ae:01:ec:5b:a2:e6:bc:d8:f8:8c:82:
         37:e2:7f:2f:26:01:df:0b:63:12:0b:64:11:4f:d0:9a:0d:94:
         60:ca:d3:a9:87:8f:63:cc:ca:3e:3b:6f:70:c5:ba:99:36:b4:
         67:bf:1c:8c:00:6b:13:b5:20:23:c1:02:5f:cd:90:5a:d6:b5:
         ae:44:54:e7:5f:78:a7:05:56:91:47:1a:e7:ec:e9:d5:6c:b8:
         bf:d1:0b:0f:3d:82:16:f0:3c:21:4a:bd:e2:4a:1e:14:20:24:
         9e:2c:76:16:b2:9d:01:30:59:bd:5a:06:f5:52:31:60:62:8a:
         c4:a9:61:4f:d7:b0:ea:da:ac:25:7f:76:2d:db:be:0f:56:d2:
         73:56:6f:21:b8:d4:02:73:02:80:cd:d9:ba:92:26:47:ca:ab:
         cd:7b:54:c9:ee:13:24:7e:7c:e1:49:70:ee:86:4f:ec:cc:ed:
         3a:98:54:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxp4nITTIFM5h4YRzveukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjYwMzAxMTkwMTA5WhcNMjYwMzAyMTkwMTA5WjAzMTEwLwYDVQQD
EygxMDI0Mzg4MjE1ZDVjMjM2N2U2N2IzNjg0OWExMzMwZTQ2ZmQ5NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfDe8CU5ZxkJC7CAOiPLz0oXUbDF
oEyB+3KxOETAlc7UXY/gHRIrEBX+ajUQmFYw1W2Wb/bxNVaM3ZexZEM3UTZbMt8o
c79lJ/Q8ShS+9JQXhBdGWMlUVg3w/QcCGeKDDor9IvxdQt1z/VdhFcq8cWTXjiOU
ldW624GZR4EIXVWkfoFL2amTyvMxwgVTKRxyUOhgv95MfFgPjl6BcChclw2cWf8B
C9kX2dBdEFaFojTm8T3qq2aYr0GRfsByNWr6pF5PSU1raScFLAYnYOhS3hQrdGbo
8L1jH9XlKI0u6tHlUSXb0P2Ukbk5HnLIB46qTq4EtgEXMy6CSTB9/ffFpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAkOIIV1cI2fmezaEmhMw5G/ZdgMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajAtJuu4
SeDrwjC+fAS7vVBOqybJCG5lwvG5k23qlEB54ZBcfw7ItwfnmakDJXyOmJ7Ll9ny
bij4WIUyelZ4fbadwhwXvZBBxAZE3hni764B7Fui5rzY+IyCN+J/LyYB3wtjEgtk
EU/Qmg2UYMrTqYePY8zKPjtvcMW6mTa0Z78cjABrE7UgI8ECX82QWta1rkRU5194
pwVWkUca5+zp1Wy4v9ELDz2CFvA8IUq94koeFCAknix2FrKdATBZvVoG9VIxYGKK
xKlhT9ew6tqsJX92Ldu+D1bSc1ZvIbjUAnMCgM3ZupImR8qrzXtUye4TJH584Ulw
7oZP7MztOphULQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:00 2026 by rpki-client