Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          Id/6RmS8UU4u1WiL2JLJc0c1LEFrosq0Ht7eEmPp57Q=
Subject key identifier:   B9:FB:4C:78:E3:BC:A1:5A:D5:73:98:4F:B2:DB:E1:A1:5F:57:EE:B3
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       019CAD2301795CD88C46E1D3863E996805E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          1182
Signing time:             Mon 02 Mar 2026 06:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:18 +0000
Files and hashes:         1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
                          2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
                          3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
                          4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: 0QTQ2vyYsWZmjFMrn7yclwOilH7hKMvN5BlZXg3jSRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:23:01:79:5c:d8:8c:46:e1:d3:86:3e:99:68:05:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Mar  2 06:01:18 2026 GMT
            Not After : Mar  3 06:01:18 2026 GMT
        Subject: CN=b9fb4c78e3bca15ad573984fb2dbe1a15f57eeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:2b:8a:50:6f:fc:6c:50:d2:33:41:c5:63:
                    eb:b6:8c:08:b4:3d:25:e5:7d:34:85:53:a0:bd:08:
                    ac:22:50:4f:92:43:c7:0e:78:c9:c4:b6:f9:e6:7e:
                    39:2d:b7:6a:69:dd:20:83:58:49:50:80:7c:5c:d4:
                    36:3c:d3:3d:5b:49:a4:9a:7a:43:5c:f1:b9:09:3c:
                    7d:d8:09:dd:20:1c:28:a6:04:30:18:5f:77:7b:b9:
                    2e:cc:b6:49:80:d8:dc:70:8e:50:b9:dd:06:ac:95:
                    64:55:7e:e2:9a:0a:8c:69:7a:e9:6f:47:20:50:68:
                    a9:b4:93:12:a7:58:13:31:dc:61:af:fc:79:61:3d:
                    df:09:33:a6:92:23:76:8e:89:cb:d9:30:eb:91:75:
                    3e:8f:2f:4b:3a:e7:c3:6f:69:ef:e5:5d:95:38:50:
                    d3:41:33:63:5b:e8:aa:1a:69:e3:bf:3a:85:8c:f5:
                    df:ca:36:bb:b4:03:c8:a5:19:cb:35:12:56:2c:83:
                    02:7f:f6:67:97:96:5a:c8:11:ef:55:23:c6:47:1f:
                    3d:ab:3e:da:6f:30:71:9e:53:b6:13:19:bf:bf:82:
                    c9:26:25:46:33:f6:15:3b:e7:97:e7:ca:ca:7a:a0:
                    b6:52:4a:e7:74:2a:26:98:3b:53:98:34:ed:c8:4c:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:4C:78:E3:BC:A1:5A:D5:73:98:4F:B2:DB:E1:A1:5F:57:EE:B3
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:f5:78:f4:02:38:1b:76:c1:59:91:44:78:c0:84:48:2a:
         c4:b5:dc:83:6e:c2:91:63:8f:81:73:9f:ce:40:14:83:7e:b1:
         01:99:7c:06:fc:85:66:cb:64:e2:d6:d5:b1:67:ee:69:3c:ca:
         86:75:ce:d5:0d:cc:30:a2:a5:cd:04:ea:af:7d:b2:fb:1d:43:
         bf:13:06:da:2e:5d:b3:7b:6f:97:82:ef:e5:a8:2b:30:db:ce:
         15:65:0d:f1:df:6c:9d:c3:85:ce:ca:43:ca:e4:f1:52:cf:31:
         44:8d:60:30:8f:e2:f0:2e:b2:81:f3:69:de:be:25:16:31:62:
         ad:23:05:98:a9:d2:fe:aa:9c:75:b0:83:83:a7:2f:28:2b:de:
         28:ba:03:84:e1:6e:ab:b7:ac:c9:0d:33:86:3d:6d:cd:a4:3f:
         ed:10:3d:ca:4d:c6:2f:d8:67:d1:e5:01:16:90:73:8d:20:63:
         66:4e:38:b6:f4:19:e7:af:c6:b1:47:24:b3:fc:ff:80:84:01:
         ea:41:65:c5:09:9f:c0:cc:8a:7c:49:f4:35:d9:38:e4:b5:24:
         84:bb:e2:58:4e:ce:6c:e4:30:9c:c9:c9:98:ed:db:42:69:87:
         3f:ea:90:8a:0d:0a:fa:45:37:af:b5:d6:a9:9b:65:28:af:b3:
         42:f6:11:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIwF5XNiMRuHThj6ZaAXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjYwMzAyMDYwMTE4WhcNMjYwMzAzMDYwMTE4WjAzMTEwLwYDVQQD
EyhiOWZiNGM3OGUzYmNhMTVhZDU3Mzk4NGZiMmRiZTFhMTVmNTdlZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIrilBv/GxQ0jNBxWPrtowItD0l
5X00hVOgvQisIlBPkkPHDnjJxLb55n45Lbdqad0gg1hJUIB8XNQ2PNM9W0mkmnpD
XPG5CTx92AndIBwopgQwGF93e7kuzLZJgNjccI5Qud0GrJVkVX7imgqMaXrpb0cg
UGiptJMSp1gTMdxhr/x5YT3fCTOmkiN2jonL2TDrkXU+jy9LOufDb2nv5V2VOFDT
QTNjW+iqGmnjvzqFjPXfyja7tAPIpRnLNRJWLIMCf/Znl5ZayBHvVSPGRx89qz7a
bzBxnlO2Exm/v4LJJiVGM/YVO+eX58rKeqC2UkrndCommDtTmDTtyEyKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn7THjjvKFa1XOYT7Lb4aFfV+6zMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftH1ePQC
OBt2wVmRRHjAhEgqxLXcg27CkWOPgXOfzkAUg36xAZl8BvyFZstk4tbVsWfuaTzK
hnXO1Q3MMKKlzQTqr32y+x1DvxMG2i5ds3tvl4Lv5agrMNvOFWUN8d9sncOFzspD
yuTxUs8xRI1gMI/i8C6ygfNp3r4lFjFirSMFmKnS/qqcdbCDg6cvKCveKLoDhOFu
q7esyQ0zhj1tzaQ/7RA9yk3GL9hn0eUBFpBzjSBjZk44tvQZ56/GsUcks/z/gIQB
6kFlxQmfwMyKfEn0Ndk45LUkhLviWE7ObOQwnMnJmO3bQmmHP+qQig0K+kU3r7XW
qZtlKK+zQvYRIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:24 2026 by rpki-client