Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File:                     kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier:          S28YOpZ+A0bYPBNsEU9RwHpybnEYV2Lij84XbIQ7jGk=
Subject key identifier:   9B:43:50:F1:FE:13:D8:84:C1:D2:B5:EC:65:04:EC:81:F9:C8:44:59
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer:       /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial:       019CAEA374991A1D0E088C7649D054CD1017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number:          83
Signing time:             Mon 02 Mar 2026 13:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:13 +0000
Files and hashes:         1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
                          2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: mcigyKw+9G7UMAYAp2kc0G8ykpfXImHNFOpSxWhh14I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:74:99:1a:1d:0e:08:8c:76:49:d0:54:cd:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
        Validity
            Not Before: Mar  2 13:01:13 2026 GMT
            Not After : Mar  3 13:01:13 2026 GMT
        Subject: CN=9b4350f1fe13d884c1d2b5ec6504ec81f9c84459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:5f:56:6e:2b:f5:73:c5:d1:4b:2c:31:50:
                    ce:4d:7a:41:f1:89:50:f7:b9:6c:36:78:b7:f8:d5:
                    cf:86:99:1b:b8:87:8c:ea:de:64:af:54:93:6f:e3:
                    6c:71:f8:cc:0e:96:6f:75:3c:56:bb:ea:98:ed:23:
                    64:dc:27:9e:19:4d:00:5e:5c:20:8f:0d:04:92:3f:
                    83:59:d7:27:bc:f4:40:49:70:4d:c2:15:51:9c:da:
                    a9:04:3c:c2:6a:3f:fc:6b:85:15:d3:58:56:08:5c:
                    5f:32:9e:62:6b:e9:d6:de:c4:70:23:2e:97:ee:30:
                    8d:f4:a0:a0:79:2c:cc:74:57:5c:7c:b3:da:d1:49:
                    c1:d1:6a:4c:14:b6:57:e4:b4:27:52:b5:1c:29:cd:
                    bd:68:ac:59:98:a8:ec:1c:1e:76:2a:d7:c2:54:58:
                    f6:60:ea:e7:86:33:d3:4d:16:65:bb:8f:cd:32:02:
                    d8:aa:22:01:16:51:d8:47:ff:ac:76:fa:c6:27:e9:
                    09:3d:52:43:75:9d:9b:55:46:66:bb:64:d1:77:aa:
                    5f:89:3f:b2:12:ac:0f:19:52:68:5a:b2:d1:23:e2:
                    e0:af:fc:ed:1c:88:38:55:94:79:71:62:bb:4c:bd:
                    71:a1:03:f4:c1:80:49:51:1b:35:35:35:6f:43:f8:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:50:F1:FE:13:D8:84:C1:D2:B5:EC:65:04:EC:81:F9:C8:44:59
            X509v3 Authority Key Identifier:
                keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:14:c5:c1:80:8e:c1:50:03:52:8f:c8:6e:75:b4:6b:90:
         fb:5f:18:c5:19:40:24:5f:47:da:0b:8c:11:0f:64:7d:0c:40:
         18:cd:43:1a:9f:07:40:a3:e9:aa:a0:f2:84:c6:25:8f:ed:75:
         fe:db:36:72:4c:38:ae:83:c7:5f:c5:41:a1:28:eb:c7:2f:ed:
         d0:75:10:87:a2:13:9f:14:3c:8d:e9:70:8d:35:a2:88:85:87:
         2f:27:93:1f:73:3b:5a:e5:b1:db:7d:60:19:a3:7e:75:57:24:
         47:d4:0e:1a:ea:df:41:f3:f8:92:0e:e2:5d:3b:0f:5b:26:62:
         1c:ec:84:a5:30:f5:3d:21:a7:0a:fa:d7:51:65:21:19:b9:06:
         aa:17:16:e8:32:28:bf:03:5c:7e:49:16:cc:26:f7:bc:21:e9:
         5e:6c:2f:ac:5e:bf:50:ee:bc:0c:17:a4:00:9f:1e:19:37:28:
         3a:e2:0b:43:4b:41:f0:03:f7:71:b6:e6:08:21:63:5b:a4:7c:
         61:4b:eb:a9:c3:00:f9:b4:87:81:d7:23:df:80:2c:5a:8e:dd:
         8c:fc:93:fc:a2:72:73:df:75:e2:13:01:29:0b:3c:60:28:a8:
         b8:c4:23:04:94:44:1e:bb:33:9e:fa:8b:a3:68:9a:bd:86:cc:
         c0:9c:70:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo3SZGh0OCIx2SdBUzRAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTY0MmMwZDQ2ZjhkNGU0YzIzNGMzM2FmYmVmNWE0ODM5
YzZhMjIwHhcNMjYwMzAyMTMwMTEzWhcNMjYwMzAzMTMwMTEzWjAzMTEwLwYDVQQD
Eyg5YjQzNTBmMWZlMTNkODg0YzFkMmI1ZWM2NTA0ZWM4MWY5Yzg0NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljFfVm4r9XPF0UssMVDOTXpB8YlQ
97lsNni3+NXPhpkbuIeM6t5kr1STb+NscfjMDpZvdTxWu+qY7SNk3CeeGU0AXlwg
jw0Ekj+DWdcnvPRASXBNwhVRnNqpBDzCaj/8a4UV01hWCFxfMp5ia+nW3sRwIy6X
7jCN9KCgeSzMdFdcfLPa0UnB0WpMFLZX5LQnUrUcKc29aKxZmKjsHB52KtfCVFj2
YOrnhjPTTRZlu4/NMgLYqiIBFlHYR/+sdvrGJ+kJPVJDdZ2bVUZmu2TRd6pfiT+y
EqwPGVJoWrLRI+Lgr/ztHIg4VZR5cWK7TL1xoQP0wYBJURs1NTVvQ/ijZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtDUPH+E9iEwdK17GUE7IH5yERZMB8GA1UdIwQY
MBaAFJAWQsDUb41OTCNMM6++9aSDnGoiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAt
NDMxMjViZjA5NmIxLzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAtNDMxMjViZjA5NmIx
LzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEAUxcGA
jsFQA1KPyG51tGuQ+18YxRlAJF9H2guMEQ9kfQxAGM1DGp8HQKPpqqDyhMYlj+11
/ts2ckw4roPHX8VBoSjrxy/t0HUQh6ITnxQ8jelwjTWiiIWHLyeTH3M7WuWx231g
GaN+dVckR9QOGurfQfP4kg7iXTsPWyZiHOyEpTD1PSGnCvrXUWUhGbkGqhcW6DIo
vwNcfkkWzCb3vCHpXmwvrF6/UO68DBekAJ8eGTcoOuILQ0tB8AP3cbbmCCFjW6R8
YUvrqcMA+bSHgdcj34AsWo7djPyT/KJyc9914hMBKQs8YCiouMQjBJREHrsznvqL
o2iavYbMwJxw3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:07:48 2026 by rpki-client