Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          SIQZPbSfBvwj2RUU/3wxsjCOKknLDULV2SKuOoOG5VI=
Subject key identifier:   A7:62:0A:A9:06:FE:9A:0F:D3:83:A7:C3:FA:99:8D:6E:63:E9:DB:A3
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019CA7FC823053F7CC3C0DAE5449AA84BF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          03B1
Signing time:             Sun 01 Mar 2026 06:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 06:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 06:01:09 +0000
Files and hashes:         1: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (hash: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=)
                          2: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: J/95xJJCwNzDym0Njdd1c26eruYdPdBFRZB4RLRwkpU=)
                          3: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:fc:82:30:53:f7:cc:3c:0d:ae:54:49:aa:84:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Mar  1 06:01:09 2026 GMT
            Not After : Mar  2 06:01:09 2026 GMT
        Subject: CN=a7620aa906fe9a0fd383a7c3fa998d6e63e9dba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:ec:07:03:11:e5:0e:15:13:44:5a:aa:72:
                    49:65:c0:a4:06:83:e8:a0:58:7c:ca:78:75:19:de:
                    07:30:06:aa:84:b2:0e:a1:04:23:90:36:0f:ac:0a:
                    28:0f:bf:40:5f:c9:3c:0b:cc:b2:9e:21:0d:d1:fc:
                    39:fd:ed:77:9f:c4:cb:d3:9c:59:3e:d5:5a:b3:68:
                    d9:9a:2d:88:7f:37:b3:4d:9e:e6:84:b1:1d:ba:f1:
                    d8:6d:1f:80:4c:6c:8b:10:de:4f:c8:e7:0e:9f:c8:
                    3f:dd:5c:4d:7e:57:ea:96:c9:02:b9:b5:b1:36:ba:
                    a8:7e:f6:95:fa:71:51:4a:e0:8a:b9:7b:7b:75:d4:
                    a0:bb:3a:85:4b:a9:ed:50:9d:8e:91:c7:f2:95:fe:
                    ce:a7:57:54:ac:f5:e8:18:08:a6:94:c3:41:97:9b:
                    85:66:af:25:ad:71:d0:40:7a:96:58:cb:33:8e:c1:
                    f0:e5:e9:aa:87:21:7f:be:6e:bf:f0:0a:da:09:0f:
                    e0:9b:c9:11:fa:e5:68:22:28:ef:77:26:fe:85:04:
                    ae:91:77:e5:44:ff:62:0b:80:c5:97:fe:16:3c:76:
                    42:df:d4:de:0f:1c:1d:13:8b:20:d3:71:78:22:7c:
                    6a:4b:1d:fd:4c:69:7b:68:17:0b:1f:8c:63:62:7c:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:0A:A9:06:FE:9A:0F:D3:83:A7:C3:FA:99:8D:6E:63:E9:DB:A3
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:7d:7c:a6:16:99:81:62:73:97:57:c2:ff:af:2e:6b:00:
         15:dd:5d:3a:ff:b7:7e:a8:d6:ee:28:87:cd:8d:2d:f2:73:0e:
         9e:04:64:d5:94:07:38:6a:24:d4:af:80:f8:d1:0c:0f:a5:bc:
         04:79:e4:67:1b:08:06:10:b8:a6:64:c5:5a:50:1e:fa:e4:04:
         22:1a:1a:af:8f:f9:aa:0c:9f:c6:ff:84:3a:04:cf:fe:0d:87:
         f1:01:6b:6b:bb:31:29:aa:41:b5:7d:57:1f:73:bc:09:15:8c:
         66:0e:10:f5:ac:74:fd:a0:96:fc:91:b6:9c:ad:cf:b9:29:6a:
         16:19:9e:6a:19:f4:33:b2:01:e7:ab:da:c3:79:88:c8:15:11:
         3a:7a:e6:b4:33:9c:21:1a:a1:e9:3c:9c:88:e2:b6:9e:4d:e0:
         2c:8f:4d:47:bc:0b:a7:bc:9e:33:1c:d3:49:57:0e:17:66:c9:
         b2:d5:2a:90:fa:52:e9:fe:84:3f:19:b5:e5:fa:36:b4:f9:c6:
         14:ae:c6:3a:49:a5:71:8a:57:48:8a:79:4a:79:56:4d:86:bd:
         fe:97:91:f5:51:14:29:f9:54:ef:92:f7:88:56:3d:fe:99:82:
         85:14:40:b4:c2:c1:de:eb:aa:6a:2d:e2:f3:69:d7:da:63:04:
         3a:eb:5b:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/IIwU/fMPA2uVEmqhL9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjVhOGMwMDk1ODI1ZTEzZjQ2YmRiMzcwYjdmZGNhOWI5
ZjhhNTIwHhcNMjYwMzAxMDYwMTA5WhcNMjYwMzAyMDYwMTA5WjAzMTEwLwYDVQQD
EyhhNzYyMGFhOTA2ZmU5YTBmZDM4M2E3YzNmYTk5OGQ2ZTYzZTlkYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus3sBwMR5Q4VE0RaqnJJZcCkBoPo
oFh8ynh1Gd4HMAaqhLIOoQQjkDYPrAooD79AX8k8C8yyniEN0fw5/e13n8TL05xZ
PtVas2jZmi2IfzezTZ7mhLEduvHYbR+ATGyLEN5PyOcOn8g/3VxNflfqlskCubWx
NrqofvaV+nFRSuCKuXt7ddSguzqFS6ntUJ2Okcfylf7Op1dUrPXoGAimlMNBl5uF
Zq8lrXHQQHqWWMszjsHw5emqhyF/vm6/8AraCQ/gm8kR+uVoIijvdyb+hQSukXfl
RP9iC4DFl/4WPHZC39TeDxwdE4sg03F4InxqSx39TGl7aBcLH4xjYnztvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdiCqkG/poP04Onw/qZjW5j6dujMB8GA1UdIwQY
MBaAFPO1qMAJWCXhP0a9s3C3/cqbn4pSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEt
MjkyNmJiYzE2Nzk2LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEtMjkyNmJiYzE2Nzk2
LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfV9fKYW
mYFic5dXwv+vLmsAFd1dOv+3fqjW7iiHzY0t8nMOngRk1ZQHOGok1K+A+NEMD6W8
BHnkZxsIBhC4pmTFWlAe+uQEIhoar4/5qgyfxv+EOgTP/g2H8QFra7sxKapBtX1X
H3O8CRWMZg4Q9ax0/aCW/JG2nK3PuSlqFhmeahn0M7IB56vaw3mIyBUROnrmtDOc
IRqh6TyciOK2nk3gLI9NR7wLp7yeMxzTSVcOF2bJstUqkPpS6f6EPxm15fo2tPnG
FK7GOkmlcYpXSIp5SnlWTYa9/peR9VEUKflU75L3iFY9/pmChRRAtMLB3uuqai3i
82nX2mMEOutbhQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:14 2026 by rpki-client