Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File:                     1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier:          W9TIYhY2O7Umf9Nd8vl+eLu7yC69OBY0ZXb5hOZ+pJg=
Subject key identifier:   72:A5:E5:3C:33:F0:F0:39:44:11:01:C2:75:24:96:75:0F:52:49:2A
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer:       /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial:       019CAE3579F960F6C27A9FF785B5D86068D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 11:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:06 +0000
Files and hashes:         1: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: b/ZPkgB0JBY1pH5YTcyHkJxIXBJKmmBHJyIfqOwLzGw=)
                          2: b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa (hash: qVB8vS/+30gYKUJ73KLGwaTJdr2WF4QKkFEP1LjTXyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:79:f9:60:f6:c2:7a:9f:f7:85:b5:d8:60:68:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
        Validity
            Not Before: Mar  2 11:01:06 2026 GMT
            Not After : Mar  3 11:01:06 2026 GMT
        Subject: CN=72a5e53c33f0f039441101c2752496750f52492a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:50:1b:52:59:74:db:26:29:12:b8:76:dd:
                    56:d9:9c:27:a5:82:39:c8:10:54:3b:ab:c3:29:1e:
                    33:43:97:51:98:a2:5c:52:74:92:5d:75:cb:c6:48:
                    75:27:a2:d4:3b:70:40:6b:36:ee:7b:af:d6:18:3f:
                    06:52:3a:84:9d:ab:ae:09:df:7c:ef:48:e3:ad:b5:
                    03:90:ce:1d:94:d8:5e:c0:d2:9c:c8:da:cd:6e:a1:
                    ef:5e:b8:e2:80:08:dd:de:b5:7d:9a:28:f2:22:d4:
                    c7:cc:5f:c2:d5:ad:6b:04:34:a1:a9:3c:68:43:c3:
                    0f:7a:9d:c7:b9:f5:cd:a5:47:a0:ba:eb:86:7d:27:
                    1c:38:eb:11:92:92:4f:8d:c1:16:56:df:8b:9c:f0:
                    db:e4:aa:a1:61:a3:85:4b:e5:67:05:69:a2:47:63:
                    92:07:53:1c:7f:5f:d8:cc:59:29:fc:25:52:87:94:
                    9e:45:bc:31:c8:b8:5b:74:37:97:ac:28:09:de:0e:
                    23:cc:40:6a:f9:80:c1:b5:a9:f3:68:04:f0:26:2b:
                    d6:9e:a8:d5:ad:33:60:de:6e:5c:a4:1f:af:7e:2e:
                    1c:35:8d:6c:9e:ab:68:86:31:73:99:d0:68:1b:e7:
                    b1:d0:bd:2f:a1:62:51:31:48:66:5c:c0:6e:d3:b7:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:E5:3C:33:F0:F0:39:44:11:01:C2:75:24:96:75:0F:52:49:2A
            X509v3 Authority Key Identifier:
                keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:39:14:e6:b5:62:49:22:be:a2:cd:bc:2d:ff:d1:ae:6b:87:
         e3:d0:9a:ae:2b:e7:20:1f:2d:e9:a3:f9:e3:d4:6f:73:44:54:
         ad:00:37:1e:75:3b:c2:00:57:bb:ad:7a:70:ed:66:f2:a2:1b:
         bb:f5:0b:f2:8c:e2:71:5d:9d:7d:ff:cf:da:e3:04:45:dd:6d:
         5c:83:18:57:c7:07:9b:89:86:35:93:de:7f:5a:63:85:4d:2c:
         51:49:f4:87:e9:91:bb:81:7d:40:ee:e4:3e:85:eb:22:4a:1f:
         ce:62:c1:7d:d1:4f:96:9f:a5:e9:51:12:4b:c9:f7:e0:b2:2b:
         4c:23:06:bf:32:77:93:f9:fc:84:49:b6:41:54:be:8b:4a:35:
         18:94:28:f0:38:18:2d:6b:25:ed:08:be:75:ab:97:35:4c:77:
         34:ed:1d:2d:4d:ac:56:44:bb:36:de:8f:b0:0f:d2:4c:8c:4c:
         93:d0:28:11:13:30:5f:b3:0d:e8:08:a7:8d:46:3c:56:39:25:
         b8:2b:e2:4a:a8:f3:16:3f:ab:4b:c6:a2:93:56:ba:8a:08:4d:
         c3:7e:51:a6:dd:39:c2:35:0f:81:6a:dd:5a:d9:45:61:fe:77:
         ba:3e:51:5f:8a:1d:24:e1:a3:b6:ee:47:d3:0d:23:d8:0a:0f:
         97:89:dd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNXn5YPbCep/3hbXYYGjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjYwMzAyMTEwMTA2WhcNMjYwMzAzMTEwMTA2WjAzMTEwLwYDVQQD
Eyg3MmE1ZTUzYzMzZjBmMDM5NDQxMTAxYzI3NTI0OTY3NTBmNTI0OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX5QG1JZdNsmKRK4dt1W2ZwnpYI5
yBBUO6vDKR4zQ5dRmKJcUnSSXXXLxkh1J6LUO3BAazbue6/WGD8GUjqEnauuCd98
70jjrbUDkM4dlNhewNKcyNrNbqHvXrjigAjd3rV9mijyItTHzF/C1a1rBDShqTxo
Q8MPep3HufXNpUeguuuGfSccOOsRkpJPjcEWVt+LnPDb5KqhYaOFS+VnBWmiR2OS
B1Mcf1/YzFkp/CVSh5SeRbwxyLhbdDeXrCgJ3g4jzEBq+YDBtanzaATwJivWnqjV
rTNg3m5cpB+vfi4cNY1snqtohjFzmdBoG+ex0L0voWJRMUhmXMBu07ehhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKl5Twz8PA5RBEBwnUklnUPUkkqMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjkU5rVi
SSK+os28Lf/RrmuH49CarivnIB8t6aP549Rvc0RUrQA3HnU7wgBXu616cO1m8qIb
u/UL8ozicV2dff/P2uMERd1tXIMYV8cHm4mGNZPef1pjhU0sUUn0h+mRu4F9QO7k
PoXrIkofzmLBfdFPlp+l6VESS8n34LIrTCMGvzJ3k/n8hEm2QVS+i0o1GJQo8DgY
LWsl7Qi+dauXNUx3NO0dLU2sVkS7Nt6PsA/STIxMk9AoERMwX7MN6AinjUY8Vjkl
uCviSqjzFj+rS8aik1a6ighNw35Rpt05wjUPgWrdWtlFYf53uj5RX4odJOGjtu5H
0w0j2AoPl4ndKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:42 2026 by rpki-client