Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          6ej4d4SSjxFR+w8EYqkEpcnS10snbyE5JLJ0vp05nRs=
Subject key identifier:   CC:7F:A1:7A:AB:E0:38:F1:61:8E:10:16:CE:8A:93:5B:F4:06:26:13
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       019CAD22D12493BC52C89B7A13933B91E81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          030C
Signing time:             Mon 02 Mar 2026 06:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:05 +0000
Files and hashes:         1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: lvsa6Y0J88dUtIn+yAsh8RvFxwcAkO545PKC1PICtRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:d1:24:93:bc:52:c8:9b:7a:13:93:3b:91:e8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Mar  2 06:01:05 2026 GMT
            Not After : Mar  3 06:01:05 2026 GMT
        Subject: CN=cc7fa17aabe038f1618e1016ce8a935bf4062613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:19:6c:2c:43:bf:53:69:b3:18:c6:58:54:
                    6d:f9:af:aa:a3:a6:88:12:65:40:ba:b5:6c:bd:c4:
                    a2:4d:8b:58:46:c2:5f:fc:43:0e:d1:87:c7:bd:f0:
                    82:26:84:03:25:7b:cd:b7:75:5a:71:13:5c:20:bb:
                    b9:99:ad:bb:82:b5:65:4a:c7:2d:5e:cb:fa:99:81:
                    21:3f:23:bd:d2:98:01:46:1f:15:2a:af:9f:34:8a:
                    06:cd:d6:78:53:fa:f9:b8:ce:ac:02:4d:e3:ff:ef:
                    73:09:69:4c:81:f3:41:bc:cb:8e:1e:82:5d:e4:78:
                    59:01:30:1c:3c:9b:17:82:e3:45:ad:6a:25:d0:7a:
                    85:d1:cd:93:b3:77:02:d2:3c:50:56:f9:60:dc:7a:
                    07:90:b0:02:bb:a3:75:71:8e:1f:1c:d4:91:f5:94:
                    6a:f7:44:aa:4a:2a:b1:5b:55:82:bd:33:49:6f:e6:
                    4e:8a:f1:85:97:6e:fe:86:0f:16:4b:5c:c6:30:79:
                    bd:01:d5:8a:6a:03:c8:40:16:f7:83:05:91:e1:70:
                    c5:a4:2a:8a:eb:90:b0:64:eb:95:43:35:64:fc:17:
                    ba:98:1c:96:8c:ee:1f:9b:91:66:2d:15:7c:f7:39:
                    d4:ed:3f:f2:8a:9b:16:da:4a:fe:f2:f8:55:74:ce:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7F:A1:7A:AB:E0:38:F1:61:8E:10:16:CE:8A:93:5B:F4:06:26:13
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:38:49:65:b2:66:9e:37:0e:b9:d0:49:ac:8b:79:eb:43:
         15:0a:7f:32:24:b2:7e:da:0f:4a:15:1d:2e:af:41:58:4f:da:
         d0:e5:ae:74:b4:8d:07:fc:70:f6:a9:8f:40:e9:0d:dc:e0:03:
         ba:98:a0:fe:83:bd:7c:80:a5:7f:d7:62:50:eb:94:79:65:14:
         dc:e5:0c:0f:87:41:66:c7:7e:4d:84:d9:63:cd:df:68:39:3a:
         8e:63:c8:b7:15:9d:d2:7c:79:40:41:5c:86:6c:1d:a3:28:ad:
         ce:53:59:f3:19:6c:cd:15:e1:35:df:f5:ee:56:4f:c9:79:76:
         03:e6:5a:58:28:76:4a:42:ed:4d:43:da:c0:8e:10:e1:2f:a6:
         5a:01:5c:be:2f:94:2b:22:22:c9:e0:5d:fd:9a:99:ea:be:b0:
         33:c0:19:e5:44:be:12:76:29:18:47:90:64:d6:8e:8e:83:3e:
         04:4b:5d:f2:05:d0:a0:14:1b:61:c7:46:88:2a:05:51:60:55:
         5b:28:0d:3e:58:78:04:86:f7:51:62:29:1c:a5:4b:66:cb:bb:
         31:3d:73:a6:ed:3b:b3:93:08:15:0c:df:6a:88:9e:75:b0:c3:
         a1:e2:d5:3c:bb:2a:4f:75:db:cc:32:83:0e:a6:5b:7c:b2:07:
         c3:94:59:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytItEkk7xSyJt6E5M7kegeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTUwYTRlY2Y0NTgxMGNmNmY2OWM5N2MzYzY4NWNmYzI0
OTc2YzIwHhcNMjYwMzAyMDYwMTA1WhcNMjYwMzAzMDYwMTA1WjAzMTEwLwYDVQQD
EyhjYzdmYTE3YWFiZTAzOGYxNjE4ZTEwMTZjZThhOTM1YmY0MDYyNjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUIZbCxDv1NpsxjGWFRt+a+qo6aI
EmVAurVsvcSiTYtYRsJf/EMO0YfHvfCCJoQDJXvNt3VacRNcILu5ma27grVlSsct
Xsv6mYEhPyO90pgBRh8VKq+fNIoGzdZ4U/r5uM6sAk3j/+9zCWlMgfNBvMuOHoJd
5HhZATAcPJsXguNFrWol0HqF0c2Ts3cC0jxQVvlg3HoHkLACu6N1cY4fHNSR9ZRq
90SqSiqxW1WCvTNJb+ZOivGFl27+hg8WS1zGMHm9AdWKagPIQBb3gwWR4XDFpCqK
65CwZOuVQzVk/Be6mByWjO4fm5FmLRV89znU7T/yipsW2kr+8vhVdM6hBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx/oXqr4DjxYY4QFs6Kk1v0BiYTMB8GA1UdIwQY
MBaAFK6lCk7PRYEM9vacl8PGhc/CSXbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYt
YzcyYTljNmZiOGYyLzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYtYzcyYTljNmZiOGYy
LzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKQ4SWWy
Zp43DrnQSayLeetDFQp/MiSyftoPShUdLq9BWE/a0OWudLSNB/xw9qmPQOkN3OAD
upig/oO9fIClf9diUOuUeWUU3OUMD4dBZsd+TYTZY83faDk6jmPItxWd0nx5QEFc
hmwdoyitzlNZ8xlszRXhNd/17lZPyXl2A+ZaWCh2SkLtTUPawI4Q4S+mWgFcvi+U
KyIiyeBd/ZqZ6r6wM8AZ5US+EnYpGEeQZNaOjoM+BEtd8gXQoBQbYcdGiCoFUWBV
WygNPlh4BIb3UWIpHKVLZsu7MT1zpu07s5MIFQzfaoiedbDDoeLVPLsqT3XbzDKD
DqZbfLIHw5RZHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:24 2026 by rpki-client