Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File:                     TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier:          7yRFoDvE5x+rJeNYcF0mYQK4MLKd4BeOM/OnqLlRIL0=
Subject key identifier:   06:E3:D0:CF:C9:F6:78:77:ED:10:91:25:3E:CA:B5:BF:9E:CF:E9:C0
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer:       /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial:       019CACB4E827B952181601633E204712AA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:02 +0000
Files and hashes:         1: 16U2Zcvc6E7UFGeywJvIx4XiVgQ.roa (hash: B22/eCk44cDYUs5H7aJKFJrAI0Ca0WhxkwmE6m9DyGw=)
                          2: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: MPCs8kXL3MkMXYj1Fd/dVbS7bMNDepvwNQr68NUvZks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e8:27:b9:52:18:16:01:63:3e:20:47:12:aa:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
        Validity
            Not Before: Mar  2 04:01:02 2026 GMT
            Not After : Mar  3 04:01:02 2026 GMT
        Subject: CN=06e3d0cfc9f67877ed1091253ecab5bf9ecfe9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:b5:66:36:51:b2:68:32:e2:fd:d2:d8:5f:
                    83:f7:22:38:8d:d0:b1:76:ee:c8:1e:c0:5b:d0:9a:
                    28:d7:94:42:e8:89:fc:28:40:1c:8c:0e:5b:29:bd:
                    18:48:52:a6:5e:ad:3c:01:65:02:89:fe:e0:d5:4a:
                    a8:fb:63:65:9a:2a:62:36:b5:4a:b7:46:4f:23:e9:
                    70:ae:56:9e:49:1c:43:30:cc:b0:94:07:9c:20:f8:
                    25:09:ec:3f:98:60:92:4e:d1:0c:3a:36:18:dc:b1:
                    07:9b:59:f7:1c:e7:c3:0b:5d:54:62:f9:b1:3c:b2:
                    6c:c3:d4:0c:cb:7f:5e:90:aa:f8:63:bf:16:8a:aa:
                    c9:6b:63:94:f3:df:df:7a:b4:a9:5d:65:de:43:8f:
                    d6:e8:f8:c2:55:52:18:23:2d:49:0a:9c:14:3c:0b:
                    3c:5c:59:30:10:82:52:df:96:ff:76:a6:63:c5:48:
                    94:38:2c:29:7e:1c:ef:1f:3b:a0:4a:ed:38:81:33:
                    9b:9c:53:3c:ae:0f:1f:29:00:78:ae:d8:d2:91:9d:
                    dc:79:a5:f1:6e:61:db:c8:75:b7:b0:47:fc:da:7f:
                    fd:e8:d3:82:7c:49:e8:84:4b:38:3c:65:22:9b:db:
                    6b:57:df:52:33:aa:2b:61:d5:f3:c3:60:a3:9d:8e:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E3:D0:CF:C9:F6:78:77:ED:10:91:25:3E:CA:B5:BF:9E:CF:E9:C0
            X509v3 Authority Key Identifier:
                keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8a:0c:e7:15:fb:50:1f:70:69:34:ab:0f:5e:fc:5e:0b:d6:
         61:41:0e:2c:9b:c5:5f:05:cb:17:b1:ee:8c:7f:3d:a5:92:6c:
         05:e3:17:ab:4e:43:d4:a6:3d:f2:41:1b:2a:97:d7:f2:82:ac:
         45:77:14:22:c1:a4:6f:e8:e0:ff:0e:ea:17:ad:01:e4:a4:57:
         04:61:d8:1e:bb:19:d0:b8:ce:e8:dd:8f:0e:38:b7:51:96:f0:
         b8:8b:b0:7e:a2:2c:e3:c3:d4:7e:98:54:0b:e7:7c:0b:db:f6:
         ef:47:6d:3c:f6:fd:15:b5:b3:51:9b:de:8c:93:07:74:5d:42:
         d5:4b:c9:38:70:d9:36:f9:d0:e7:bf:28:74:84:5f:30:ed:81:
         d0:5c:51:bd:56:95:80:d2:35:65:d6:68:79:11:6f:1a:f4:f2:
         61:c3:1c:19:c0:79:49:07:57:34:2c:8e:bc:79:d9:5e:ec:96:
         06:42:cd:0b:b2:41:2a:85:cf:0d:ef:f4:3d:4f:03:bd:3e:1f:
         d3:00:c9:85:d9:34:51:e9:7e:c1:52:50:f7:ce:ea:a8:61:1a:
         9d:31:36:75:48:47:7e:5f:25:1c:7c:17:4e:af:da:3a:fb:5d:
         10:ea:be:f7:f5:16:03:a4:7f:2c:1f:66:a6:f3:06:38:0b:68:
         9f:33:7d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystOgnuVIYFgFjPiBHEqooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw
ZjgyNmIwHhcNMjYwMzAyMDQwMTAyWhcNMjYwMzAzMDQwMTAyWjAzMTEwLwYDVQQD
EygwNmUzZDBjZmM5ZjY3ODc3ZWQxMDkxMjUzZWNhYjViZjllY2ZlOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXy1ZjZRsmgy4v3S2F+D9yI4jdCx
du7IHsBb0Joo15RC6In8KEAcjA5bKb0YSFKmXq08AWUCif7g1Uqo+2NlmipiNrVK
t0ZPI+lwrlaeSRxDMMywlAecIPglCew/mGCSTtEMOjYY3LEHm1n3HOfDC11UYvmx
PLJsw9QMy39ekKr4Y78WiqrJa2OU89/ferSpXWXeQ4/W6PjCVVIYIy1JCpwUPAs8
XFkwEIJS35b/dqZjxUiUOCwpfhzvHzugSu04gTObnFM8rg8fKQB4rtjSkZ3ceaXx
bmHbyHW3sEf82n/96NOCfEnohEs4PGUim9trV99SM6orYdXzw2CjnY6RlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbj0M/J9nh37RCRJT7Ktb+ez+nAMB8GA1UdIwQY
MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt
YzFlOTQxZTU5YzE0LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0
LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACooM5xX7
UB9waTSrD178XgvWYUEOLJvFXwXLF7HujH89pZJsBeMXq05D1KY98kEbKpfX8oKs
RXcUIsGkb+jg/w7qF60B5KRXBGHYHrsZ0LjO6N2PDji3UZbwuIuwfqIs48PUfphU
C+d8C9v270dtPPb9FbWzUZvejJMHdF1C1UvJOHDZNvnQ578odIRfMO2B0FxRvVaV
gNI1ZdZoeRFvGvTyYcMcGcB5SQdXNCyOvHnZXuyWBkLNC7JBKoXPDe/0PU8DvT4f
0wDJhdk0Uel+wVJQ987qqGEanTE2dUhHfl8lHHwXTq/aOvtdEOq+9/UWA6R/LB9m
pvMGOAtonzN9Xw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:01 2026 by rpki-client