Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File:                     9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier:          W0QcVOrRT2hsiGCsIgcAC6qp9Adona/xbtPghGAirXs=
Subject key identifier:   8F:1C:74:9A:CE:3F:AC:99:E1:33:2E:14:8F:28:A9:DC:09:0D:76:ED
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer:       /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial:       019CACB559F3F547092A56351C731397DF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number:          1843
Signing time:             Mon 02 Mar 2026 04:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:31 +0000
Files and hashes:         1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: NLaupAHqdFcNGWmvqcOgGtrUN0xPNqMx10dL5oFPADs=)
                          2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
                          3: u-xiDa9PrBG52ESi9g99XF0w-kM.roa (hash: Gn+0aGT2XxNqhltcQSBQF67cBSHRAted9T1Eep6Q9Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:59:f3:f5:47:09:2a:56:35:1c:73:13:97:df:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
        Validity
            Not Before: Mar  2 04:01:31 2026 GMT
            Not After : Mar  3 04:01:31 2026 GMT
        Subject: CN=8f1c749ace3fac99e1332e148f28a9dc090d76ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:a6:2d:b2:bf:53:ce:a0:2d:ec:fa:22:65:
                    2d:dc:97:29:66:04:73:d1:68:c3:5a:73:00:4b:99:
                    de:76:00:fa:a8:74:5d:b5:7a:47:c7:b9:31:78:d1:
                    f6:65:46:2f:84:44:ef:ce:a7:42:5e:7a:4b:47:89:
                    b1:62:b7:b2:3e:7f:76:d1:0d:03:7e:b9:63:cf:0a:
                    79:00:70:48:2f:4b:04:f5:e7:d0:a1:49:ac:fd:4a:
                    cc:26:31:c8:3b:a4:76:62:2e:88:51:0f:7e:8e:b3:
                    ef:ef:a9:aa:20:13:fd:52:bd:4c:c3:0f:fa:70:39:
                    1c:80:5a:e5:73:6e:5c:60:4e:cc:4b:05:e1:f9:23:
                    56:37:23:78:a6:cb:40:dc:10:2d:6e:e5:81:30:9e:
                    55:59:32:53:d6:e4:ee:6f:e0:1e:26:c1:85:13:76:
                    ec:99:64:8f:f4:07:a6:01:17:00:c5:5b:ba:98:a1:
                    e2:81:e4:7c:20:e9:3e:5d:e4:70:d2:60:75:4c:de:
                    34:01:16:a8:e2:99:b3:fa:00:41:9e:76:14:18:3e:
                    e0:ae:f3:70:b2:6a:84:f9:b9:72:81:af:02:ff:72:
                    3f:05:8c:77:5b:ac:e0:df:80:2c:6a:2a:90:ee:20:
                    0f:7c:ed:37:5c:e1:e8:13:fc:c7:da:43:a6:70:65:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:74:9A:CE:3F:AC:99:E1:33:2E:14:8F:28:A9:DC:09:0D:76:ED
            X509v3 Authority Key Identifier:
                keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:96:48:66:21:8f:6a:33:6f:37:c3:5b:d3:de:d8:4b:e3:
         d8:c2:c0:bd:6a:b2:b2:a5:37:ca:63:f3:b4:c3:22:1d:17:5f:
         c1:c3:89:e3:ef:7f:17:6d:5c:96:b5:36:f3:eb:26:c2:e8:cd:
         d4:12:72:68:7e:ac:25:5b:d9:7e:c9:e3:0b:fe:64:e7:12:eb:
         3f:ad:e5:25:79:98:04:d2:e8:f9:71:48:09:01:45:73:be:c3:
         41:5c:75:7f:21:3c:07:fb:94:2d:44:ab:21:fc:c3:e5:20:b6:
         52:54:48:b5:b1:92:6f:c7:7d:9b:6e:32:67:84:4a:be:47:66:
         40:b4:04:47:ad:07:4e:7d:87:a3:08:59:e1:d3:a2:94:82:91:
         90:f9:73:59:50:aa:6d:db:a7:be:84:19:c7:9f:eb:c8:4f:06:
         a7:a4:00:21:f2:c5:d3:3c:9a:da:ee:f8:4f:e7:96:ff:dd:89:
         df:76:0e:91:f4:d2:60:2b:3d:d5:8c:04:ae:44:56:c8:7f:de:
         3d:10:7c:6f:1d:11:c3:de:14:78:c6:db:d7:98:c4:b4:26:29:
         ce:37:b4:11:05:02:dc:42:85:02:5b:a8:d4:f4:75:e3:fe:e5:
         ed:89:e3:97:29:5f:3e:51:75:b2:50:9a:75:17:90:94:0a:5c:
         8e:42:02:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystVnz9UcJKlY1HHMTl98eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1
OWU5M2EwHhcNMjYwMzAyMDQwMTMxWhcNMjYwMzAzMDQwMTMxWjAzMTEwLwYDVQQD
Eyg4ZjFjNzQ5YWNlM2ZhYzk5ZTEzMzJlMTQ4ZjI4YTlkYzA5MGQ3NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCimLbK/U86gLez6ImUt3JcpZgRz
0WjDWnMAS5nedgD6qHRdtXpHx7kxeNH2ZUYvhETvzqdCXnpLR4mxYreyPn920Q0D
frljzwp5AHBIL0sE9efQoUms/UrMJjHIO6R2Yi6IUQ9+jrPv76mqIBP9Ur1Mww/6
cDkcgFrlc25cYE7MSwXh+SNWNyN4pstA3BAtbuWBMJ5VWTJT1uTub+AeJsGFE3bs
mWSP9AemARcAxVu6mKHigeR8IOk+XeRw0mB1TN40ARao4pmz+gBBnnYUGD7grvNw
smqE+blyga8C/3I/BYx3W6zg34AsaiqQ7iAPfO03XOHoE/zH2kOmcGVBBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8cdJrOP6yZ4TMuFI8oqdwJDXbtMB8GA1UdIwQY
MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt
ZGUwZWM3NmE0NjcyLzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy
LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS6WSGYh
j2ozbzfDW9Pe2Evj2MLAvWqysqU3ymPztMMiHRdfwcOJ4+9/F21clrU28+smwujN
1BJyaH6sJVvZfsnjC/5k5xLrP63lJXmYBNLo+XFICQFFc77DQVx1fyE8B/uULUSr
IfzD5SC2UlRItbGSb8d9m24yZ4RKvkdmQLQER60HTn2HowhZ4dOilIKRkPlzWVCq
bdunvoQZx5/ryE8Gp6QAIfLF0zya2u74T+eW/92J33YOkfTSYCs91YwErkRWyH/e
PRB8bx0Rw94UeMbb15jEtCYpzje0EQUC3EKFAluo1PR14/7l7YnjlylfPlF1slCa
dReQlApcjkICmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:32 2026 by rpki-client