Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File:                     opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier:          rxPI9NRor2imrxY/vfSNlGBSymUtmQHyi1cDLe6dgeI=
Subject key identifier:   AE:E2:10:78:FE:44:92:58:42:70:F1:B8:7B:28:C7:38:50:87:DA:FF
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer:       /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial:       019CA945DD6EA258E12A74611943A5EE72DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number:          37
Signing time:             Sun 01 Mar 2026 12:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:53 +0000
Files and hashes:         1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
                          2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
                          3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: JZJudjZNAiR29N/5Tg5sbYHsFxujz97nSoUFXkXD0PU=)
                          4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:dd:6e:a2:58:e1:2a:74:61:19:43:a5:ee:72:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
        Validity
            Not Before: Mar  1 12:00:53 2026 GMT
            Not After : Mar  2 12:00:53 2026 GMT
        Subject: CN=aee21078fe4492584270f1b87b28c7385087daff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:42:24:f6:4b:f8:35:0e:dc:73:d4:75:d2:
                    78:a4:22:8f:09:84:75:41:9a:b2:60:46:a1:a9:7f:
                    72:81:4d:0c:bd:68:64:bd:23:c1:6a:f0:b5:c9:8f:
                    90:d9:e1:d3:d7:9d:e6:ee:fb:ee:f7:cb:46:c9:03:
                    7e:3e:41:85:0e:9f:2a:f0:db:7e:bd:47:62:d0:ba:
                    7b:67:26:bb:56:cc:eb:97:60:6e:7b:a4:c1:42:4e:
                    26:5d:b3:c6:c3:8a:83:a3:59:3f:da:db:d6:df:49:
                    ef:6a:11:65:c3:4f:dd:dd:34:00:e3:89:e3:09:e6:
                    4b:20:6f:69:b6:25:af:81:24:5f:39:9d:73:22:ea:
                    7d:a6:e1:88:02:b5:6f:bd:40:6d:89:f5:c2:6d:a8:
                    0c:ba:9b:b8:5b:d9:31:52:fb:26:47:04:6b:d4:9f:
                    51:92:a8:41:ca:9c:43:6c:e6:73:8f:ec:4c:32:db:
                    f0:2a:4e:c0:50:cf:02:56:5d:2e:33:ee:10:7d:d2:
                    29:3b:ad:66:32:6c:84:70:b1:5c:6a:16:55:ac:f9:
                    e7:99:cc:ef:bd:f4:3d:0a:7d:48:60:b8:99:ad:a0:
                    de:5e:80:51:96:1c:8c:4a:0d:2f:92:66:46:68:0f:
                    f9:66:35:a5:3d:0d:2a:2d:c4:9f:3d:28:31:58:ab:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E2:10:78:FE:44:92:58:42:70:F1:B8:7B:28:C7:38:50:87:DA:FF
            X509v3 Authority Key Identifier:
                keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:f1:78:89:d0:f4:73:72:e5:e9:8b:f0:7c:1d:23:1a:93:
         a0:f0:ea:5c:52:62:f3:17:85:fa:ec:1b:3e:79:b3:50:45:91:
         23:7a:78:1f:59:ee:e6:d4:c3:f3:e8:a0:ab:ed:a1:50:f1:7f:
         61:77:c3:46:7d:a5:67:ec:d4:5c:80:15:78:47:fe:15:cf:d2:
         7c:54:1b:63:4f:1b:ca:ac:cf:91:d4:79:e4:2d:aa:98:4d:71:
         96:3b:ea:a9:8b:5b:be:ab:ec:1c:f4:e4:70:5b:cb:4e:1c:29:
         2f:f5:c0:9d:88:ff:85:b5:63:06:ad:e2:6e:02:35:20:f8:33:
         d9:bd:bd:a5:4d:3e:c5:c3:0a:af:4a:15:06:f2:4b:c6:af:39:
         73:47:cd:7d:78:a8:52:30:91:ae:8e:61:cc:1d:ba:37:55:70:
         1a:ab:65:da:4c:2f:9f:0c:30:1c:4f:1c:c2:76:b2:19:74:a5:
         44:bc:55:e9:fb:7b:5b:ec:f5:4c:a0:64:19:a0:7e:fe:50:c7:
         df:07:b5:f0:09:dd:ca:2f:37:a9:66:80:9d:f0:25:07:60:ab:
         3c:54:5e:ae:b7:11:9e:22:75:49:05:df:60:97:78:13:9c:38:
         0a:04:d4:b7:eb:80:64:6a:b9:db:28:7b:10:ec:e2:36:e1:75:
         c2:00:95:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRd1uoljhKnRhGUOl7nLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWJiOTQ3Njc1MGVjMGUyNjIyYTUwNWU1MTUxMmVmNmY1
YTViYjQwHhcNMjYwMzAxMTIwMDUzWhcNMjYwMzAyMTIwMDUzWjAzMTEwLwYDVQQD
EyhhZWUyMTA3OGZlNDQ5MjU4NDI3MGYxYjg3YjI4YzczODUwODdkYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1stCJPZL+DUO3HPUddJ4pCKPCYR1
QZqyYEahqX9ygU0MvWhkvSPBavC1yY+Q2eHT153m7vvu98tGyQN+PkGFDp8q8Nt+
vUdi0Lp7Zya7Vszrl2Bue6TBQk4mXbPGw4qDo1k/2tvW30nvahFlw0/d3TQA44nj
CeZLIG9ptiWvgSRfOZ1zIup9puGIArVvvUBtifXCbagMupu4W9kxUvsmRwRr1J9R
kqhBypxDbOZzj+xMMtvwKk7AUM8CVl0uM+4QfdIpO61mMmyEcLFcahZVrPnnmczv
vfQ9Cn1IYLiZraDeXoBRlhyMSg0vkmZGaA/5ZjWlPQ0qLcSfPSgxWKuzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7iEHj+RJJYQnDxuHsoxzhQh9r/MB8GA1UdIwQY
MBaAFKKbuUdnUOwOJiKlBeUVEu9vWlu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYt
Y2FkOTUxMDIwNmFiLzEvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYtY2FkOTUxMDIwNmFi
LzEvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqobxeInQ
9HNy5emL8HwdIxqToPDqXFJi8xeF+uwbPnmzUEWRI3p4H1nu5tTD8+igq+2hUPF/
YXfDRn2lZ+zUXIAVeEf+Fc/SfFQbY08byqzPkdR55C2qmE1xljvqqYtbvqvsHPTk
cFvLThwpL/XAnYj/hbVjBq3ibgI1IPgz2b29pU0+xcMKr0oVBvJLxq85c0fNfXio
UjCRro5hzB26N1VwGqtl2kwvnwwwHE8cwnayGXSlRLxV6ft7W+z1TKBkGaB+/lDH
3we18Andyi83qWaAnfAlB2CrPFRerrcRniJ1SQXfYJd4E5w4CgTUt+uAZGq52yh7
EOziNuF1wgCVGA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:40 2026 by rpki-client