Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File:                     iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier:          etJLCQjQnfeYMfg/zz6UEnttIoYccGnHE/c1P/NOmlI=
Subject key identifier:   BE:6E:1D:66:B0:CA:35:9F:66:EB:1B:37:63:AF:94:A8:E7:0B:07:45
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer:       /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial:       019CACB52B138960534D539D441F337CF7F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number:          93
Signing time:             Mon 02 Mar 2026 04:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:19 +0000
Files and hashes:         1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
                          2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: +YumQ8a3iVF6STMwtvY6LIThx83dm5bIMDDxbeovuRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:2b:13:89:60:53:4d:53:9d:44:1f:33:7c:f7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
        Validity
            Not Before: Mar  2 04:01:19 2026 GMT
            Not After : Mar  3 04:01:19 2026 GMT
        Subject: CN=be6e1d66b0ca359f66eb1b3763af94a8e70b0745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:58:2c:8d:da:68:40:60:6f:bc:23:80:d1:
                    38:83:ed:32:9e:65:01:51:e1:ea:0f:0b:39:7b:3f:
                    27:38:93:ef:34:4c:c1:4c:d0:8c:22:ab:4a:a4:d1:
                    85:9c:f0:86:19:f2:3d:5f:4d:16:8b:00:d5:02:76:
                    aa:11:8d:ee:2d:16:b0:bc:a3:57:51:6a:94:e3:f5:
                    84:11:b5:44:20:53:83:52:4c:77:d1:56:85:b0:f3:
                    08:e0:c4:5c:bf:96:1c:13:f4:75:bc:4d:a3:1f:d1:
                    15:48:02:2b:8d:04:20:bd:b4:37:b0:10:8a:c4:9b:
                    6d:26:b7:e0:04:37:76:ff:97:d3:c2:94:98:5d:ac:
                    e9:92:a5:75:e6:92:f1:b7:b5:95:89:67:72:77:7d:
                    27:42:e9:cc:8e:5b:24:cf:be:a1:9a:cd:fe:f1:9f:
                    71:79:ff:30:38:cc:52:37:08:07:d0:e1:a8:b4:32:
                    be:08:e4:0f:01:38:50:9d:1f:6e:f6:cb:1a:7f:51:
                    d6:98:e1:96:3a:67:d6:dd:c5:2e:31:86:15:24:e6:
                    7a:c3:c5:4f:f1:2e:5d:6c:d7:95:c7:7a:bc:28:08:
                    f5:0a:a0:e9:53:e3:dc:bc:a8:f0:04:fb:50:11:0e:
                    30:28:ef:c9:00:ca:b8:a1:fa:88:b6:f6:ef:2c:78:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6E:1D:66:B0:CA:35:9F:66:EB:1B:37:63:AF:94:A8:E7:0B:07:45
            X509v3 Authority Key Identifier:
                keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:20:bc:03:6c:ec:a8:a7:4c:82:ad:a9:4a:89:85:8d:36:a4:
         80:55:be:a4:fc:45:f4:b5:ba:4f:18:4f:e2:ff:2f:40:1c:9c:
         25:ee:d7:57:70:fe:5b:75:eb:c3:a1:d7:72:8f:bb:87:5c:cb:
         99:92:ca:49:39:54:19:31:59:b3:41:1a:6b:d6:f6:17:11:a7:
         93:44:1e:e9:67:94:26:15:df:3f:16:3f:11:fd:b2:f8:ab:77:
         43:43:d1:11:82:4b:0c:08:28:78:e7:f0:47:95:7b:d3:62:46:
         be:2d:3b:32:07:c9:1d:de:0a:29:a3:37:26:73:23:5c:b9:3c:
         22:c4:ce:2c:eb:71:04:dc:a8:25:50:45:ee:5d:cb:b8:2f:2d:
         2c:7c:bd:5b:59:5a:e9:b9:04:73:23:45:ec:81:78:51:14:64:
         46:70:ba:19:4a:e4:24:39:60:31:2f:ba:d4:81:90:6e:9c:3c:
         56:dd:4f:03:d3:4b:b5:8d:86:6c:03:3c:2b:79:d9:0b:44:10:
         8e:7d:eb:ae:08:ef:af:cf:14:9e:7b:84:07:50:d1:cc:61:65:
         d2:ed:48:18:83:31:2d:08:9f:2a:53:97:f2:82:22:ee:86:f1:
         89:43:1e:4a:eb:fb:88:ba:44:90:3f:88:27:7c:8d:73:c9:b2:
         53:34:0c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystSsTiWBTTVOdRB8zfPf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzgzNDBiYmNmODJiY2UwNjVjZWViMzc4Y2JhYTQ3Yjlh
MzJjZGQwHhcNMjYwMzAyMDQwMTE5WhcNMjYwMzAzMDQwMTE5WjAzMTEwLwYDVQQD
EyhiZTZlMWQ2NmIwY2EzNTlmNjZlYjFiMzc2M2FmOTRhOGU3MGIwNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+BYLI3aaEBgb7wjgNE4g+0ynmUB
UeHqDws5ez8nOJPvNEzBTNCMIqtKpNGFnPCGGfI9X00WiwDVAnaqEY3uLRawvKNX
UWqU4/WEEbVEIFODUkx30VaFsPMI4MRcv5YcE/R1vE2jH9EVSAIrjQQgvbQ3sBCK
xJttJrfgBDd2/5fTwpSYXazpkqV15pLxt7WViWdyd30nQunMjlskz76hms3+8Z9x
ef8wOMxSNwgH0OGotDK+COQPAThQnR9u9ssaf1HWmOGWOmfW3cUuMYYVJOZ6w8VP
8S5dbNeVx3q8KAj1CqDpU+PcvKjwBPtQEQ4wKO/JAMq4ofqItvbvLHjUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5uHWawyjWfZusbN2OvlKjnCwdFMB8GA1UdIwQY
MBaAFIg4NAu8+CvOBlzus3jLqke5oyzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYt
MzVlMzk5NjRkZmRjLzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYtMzVlMzk5NjRkZmRj
LzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSC8A2zs
qKdMgq2pSomFjTakgFW+pPxF9LW6TxhP4v8vQBycJe7XV3D+W3Xrw6HXco+7h1zL
mZLKSTlUGTFZs0Eaa9b2FxGnk0Qe6WeUJhXfPxY/Ef2y+Kt3Q0PREYJLDAgoeOfw
R5V702JGvi07MgfJHd4KKaM3JnMjXLk8IsTOLOtxBNyoJVBF7l3LuC8tLHy9W1la
6bkEcyNF7IF4URRkRnC6GUrkJDlgMS+61IGQbpw8Vt1PA9NLtY2GbAM8K3nZC0QQ
jn3rrgjvr88UnnuEB1DRzGFl0u1IGIMxLQifKlOX8oIi7obxiUMeSuv7iLpEkD+I
J3yNc8myUzQMPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:09 2026 by rpki-client