Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File:                     M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier:          fTTIfLP8E9091RDd3jBTGMv3S1PfO0+1BohNtV8OEhs=
Subject key identifier:   89:59:2D:F7:B2:69:87:C8:E7:A9:78:E8:06:C0:6D:63:10:8C:54:A5
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       019CA9EAB3B1B382F8E19A875708409C5C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number:          17D7
Signing time:             Sun 01 Mar 2026 15:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 15:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 15:00:56 +0000
Files and hashes:         1: L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa (hash: XjCdltafvkU+W0HTZ2Gpfs3P+GnUcAc+4fU6I9YL5EE=)
                          2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: wlJpnceRv6eW0e9SVV0yVAxGqf4j4NR1RD2TmB5RJPI=)
                          3: dKuH0lj-FcvTEnVQ3b_1AAvtcwM.roa (hash: IdTgVOkZiNhxtZ6mU+Z1OJOU/QZ/1eAxm1oF//XLXhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:b3:b1:b3:82:f8:e1:9a:87:57:08:40:9c:5c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Mar  1 15:00:56 2026 GMT
            Not After : Mar  2 15:00:56 2026 GMT
        Subject: CN=89592df7b26987c8e7a978e806c06d63108c54a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:cc:5e:fa:2a:be:9c:c1:ac:35:6c:36:c5:
                    78:c1:83:69:b6:6a:13:b6:48:1c:51:3b:41:15:f9:
                    71:08:16:e9:84:d0:f6:bc:28:a6:12:3e:b3:af:2a:
                    34:61:88:6c:01:3a:fb:be:a4:49:2d:cf:cd:45:a7:
                    5d:2b:7d:6f:e8:30:44:32:dd:4e:e8:ed:78:3e:88:
                    57:c2:21:c3:99:90:94:5a:ff:ae:c3:e0:ed:d3:e0:
                    d7:47:89:53:74:2e:57:0d:4d:f0:1c:f7:cb:49:72:
                    c8:61:7f:db:85:a0:28:6d:eb:46:f5:dc:8c:13:4c:
                    98:c2:b6:31:07:87:a7:11:12:f1:fc:69:7a:0d:db:
                    60:50:c1:e8:6a:77:a2:95:62:ce:f6:3f:26:66:d3:
                    c5:15:7e:a7:e1:19:03:6f:8e:e3:28:f9:bb:ca:01:
                    48:bd:85:2e:46:cc:8e:37:5e:9c:64:12:1a:51:18:
                    2d:88:b8:d9:a5:46:2e:91:7e:22:14:13:83:d9:d6:
                    49:f1:58:b5:ca:42:69:70:ca:65:ef:6c:05:35:5e:
                    74:88:ba:70:7f:6d:aa:d0:37:9e:ad:82:dd:c8:fc:
                    21:a9:89:b4:f6:47:ae:56:63:24:af:34:fd:0d:c3:
                    17:a8:e6:cb:07:0b:94:da:4f:ad:45:a3:e0:46:2e:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:2D:F7:B2:69:87:C8:E7:A9:78:E8:06:C0:6D:63:10:8C:54:A5
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:ec:ae:e3:d7:b0:49:3d:fa:9d:61:e9:8f:ff:ab:b7:4a:
         20:73:cd:c4:2c:50:ca:eb:3d:c6:fe:8e:ad:f2:b6:de:f6:2f:
         88:c7:28:8b:8a:ab:06:68:5c:07:86:ec:11:ef:ee:d5:7f:69:
         33:f3:3e:12:77:fe:18:d6:2d:0a:85:3d:a6:b1:95:3d:6e:11:
         07:a0:dc:d7:8c:52:35:b9:c3:67:72:cf:e8:1b:d8:1b:94:36:
         b4:75:c3:25:b8:63:87:a8:e0:7f:dd:a1:7c:0c:cb:99:79:ac:
         c1:74:78:73:9f:67:24:a1:04:c3:67:f5:a5:c8:c7:70:6c:fd:
         ef:a0:91:65:75:33:57:b2:55:b8:dc:a7:00:e9:b9:75:67:eb:
         79:b1:cf:ce:30:cc:ca:c7:b6:ea:74:63:1a:d1:6a:af:bf:14:
         ef:02:16:28:cf:26:20:98:a9:2e:a5:77:55:94:b5:ae:05:52:
         ea:c9:52:df:ac:0b:9a:99:64:95:16:cc:6c:91:07:e9:7d:65:
         39:6d:21:3e:58:e2:87:1d:10:78:99:da:ef:dc:63:8c:2b:ff:
         e8:16:06:c8:db:12:d0:fc:f9:87:de:6b:51:04:8d:e6:a1:2b:
         10:1c:a9:ba:69:9e:c8:3b:92:4a:40:87:03:e3:03:cb:12:06:
         3b:2e:cf:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6rOxs4L44ZqHVwhAnFxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTUxZDdmZjAyZDIxZmFjMTkzYWU0YWVkMWYwYzM5NTZj
ZTQ1MTUwHhcNMjYwMzAxMTUwMDU2WhcNMjYwMzAyMTUwMDU2WjAzMTEwLwYDVQQD
Eyg4OTU5MmRmN2IyNjk4N2M4ZTdhOTc4ZTgwNmMwNmQ2MzEwOGM1NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1jMXvoqvpzBrDVsNsV4wYNptmoT
tkgcUTtBFflxCBbphND2vCimEj6zryo0YYhsATr7vqRJLc/NRaddK31v6DBEMt1O
6O14PohXwiHDmZCUWv+uw+Dt0+DXR4lTdC5XDU3wHPfLSXLIYX/bhaAobetG9dyM
E0yYwrYxB4enERLx/Gl6DdtgUMHoaneilWLO9j8mZtPFFX6n4RkDb47jKPm7ygFI
vYUuRsyON16cZBIaURgtiLjZpUYukX4iFBOD2dZJ8Vi1ykJpcMpl72wFNV50iLpw
f22q0DeerYLdyPwhqYm09keuVmMkrzT9DcMXqObLBwuU2k+tRaPgRi7zmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlZLfeyaYfI56l46AbAbWMQjFSlMB8GA1UdIwQY
MBaAFDOlHX/wLSH6wZOuSu0fDDlWzkUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZVZGZfQXRJZnJCazY1SzdSOE1PVmJPUlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MThlNDItZWJhZS00NTQ3LThiMjIt
OWIxZTZhOGU0MGYzLzEvTTZVZGZfQXRJZnJCazY1SzdSOE1PVmJPUlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81MThlNDItZWJhZS00NTQ3LThiMjItOWIxZTZhOGU0MGYz
LzEvTTZVZGZfQXRJZnJCazY1SzdSOE1PVmJPUlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqjsruPX
sEk9+p1h6Y//q7dKIHPNxCxQyus9xv6OrfK23vYviMcoi4qrBmhcB4bsEe/u1X9p
M/M+Enf+GNYtCoU9prGVPW4RB6Dc14xSNbnDZ3LP6BvYG5Q2tHXDJbhjh6jgf92h
fAzLmXmswXR4c59nJKEEw2f1pcjHcGz976CRZXUzV7JVuNynAOm5dWfrebHPzjDM
yse26nRjGtFqr78U7wIWKM8mIJipLqV3VZS1rgVS6slS36wLmplklRbMbJEH6X1l
OW0hPljihx0QeJna79xjjCv/6BYGyNsS0Pz5h95rUQSN5qErEBypummeyDuSSkCH
A+MDyxIGOy7PVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:52 2026 by rpki-client