Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          T6IF14efNk+BcVdav+wULm9Su/UuyjfGBTzT+ZNOxEo=
Subject key identifier:   86:A6:E4:E1:B9:BC:4F:F3:FA:7E:B3:C2:00:08:5E:31:FF:E1:85:B0
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       019CABD8F0AD6AEA7B30C9C906C1BDAE5317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 00:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:47 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: boRC2kr/Ox+ykzgD7qhSSAu02KnTan545MkhhM6QaXk=)
                          2: 6SXRvRN9subXAXEQdsDxLyOEe-Q.roa (hash: 6v9+PcdA0J18w45pfjYrxPzjSyJ7JFTWHaytuSr4qJU=)
                          3: NBS3MDGzYGIADNWFbZYjYkdUa9s.roa (hash: v7XG+TXBJYETx2VmTgwzwAMvOODuFSiHzEpsJiItnm4=)
                          4: bmr462MOzzVfibPxeKpu-EewsJA.roa (hash: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw=)
                          5: xG9W89NLTMo3zDEcMXWD8-7tuik.roa (hash: z2qG6bl0HluFOz/GCJOPJLYtdHcGTOZW8wletJFCQ5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f0:ad:6a:ea:7b:30:c9:c9:06:c1:bd:ae:53:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Mar  2 00:00:47 2026 GMT
            Not After : Mar  3 00:00:47 2026 GMT
        Subject: CN=86a6e4e1b9bc4ff3fa7eb3c200085e31ffe185b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:ce:b4:f7:42:1a:dc:d9:95:29:8f:e2:c1:
                    ad:5f:58:ed:a8:d2:82:7a:5e:04:18:8b:3a:8c:70:
                    61:ac:9b:ea:f3:c7:6d:52:6e:4f:42:8c:02:1d:a7:
                    1c:5b:f9:c1:7d:26:cf:54:63:3f:6c:af:ae:0f:ae:
                    0d:4c:1b:3c:ef:0b:26:46:2e:fb:7a:29:b7:38:b1:
                    c0:fc:ac:82:3d:f7:2b:e6:a1:8c:e1:6a:8a:59:3b:
                    27:07:72:59:dc:42:69:a3:93:7a:3b:aa:ac:61:27:
                    24:44:5b:41:cb:61:7d:a1:99:70:68:8d:be:4f:80:
                    4a:5e:93:c2:f9:a5:96:5e:64:90:47:9d:5f:59:79:
                    63:d8:30:bf:44:f3:45:2f:e4:14:1c:25:4b:e8:10:
                    1c:bb:7b:6a:1c:90:b8:ab:72:15:f2:c3:e3:8a:38:
                    d7:9a:20:2e:bf:f0:bf:ac:7b:4d:bb:92:35:bf:56:
                    54:0c:71:36:9c:40:98:d1:65:33:33:51:79:2e:7e:
                    5d:96:fe:68:55:10:70:39:22:3c:0f:9c:90:31:7b:
                    db:fa:43:81:1e:99:2e:8b:3a:a3:5c:cc:2f:41:87:
                    a5:9c:ec:46:00:8e:a1:c5:ef:de:33:c2:ed:a6:1c:
                    d3:85:67:80:b6:c5:78:33:8f:e0:3f:57:cb:c0:b3:
                    4d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A6:E4:E1:B9:BC:4F:F3:FA:7E:B3:C2:00:08:5E:31:FF:E1:85:B0
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:9d:6c:d7:f9:85:53:a7:23:a6:90:f0:cf:b8:e9:3b:25:
         8b:00:39:ab:ce:15:ec:39:19:bf:b0:10:55:00:ef:f0:82:e0:
         01:2c:4b:e7:ee:3a:05:6b:bf:21:d4:bb:3c:f2:7c:7e:5b:07:
         83:4b:1f:63:fb:85:f5:a1:3b:04:52:b5:fe:d1:5e:55:70:24:
         c3:7b:4d:60:8a:c4:38:fe:b2:95:dc:10:a9:3f:dc:f9:e9:fe:
         d3:5b:58:9c:46:a7:81:d9:8b:1d:f4:b5:20:5c:1c:c5:84:fb:
         02:f9:15:4d:f4:31:82:be:95:3d:ea:b3:3c:59:93:6f:3d:65:
         7e:23:48:1f:3b:51:92:f9:38:7e:ca:e3:b0:d2:65:3c:e9:af:
         4d:11:d4:0d:fa:b6:29:b5:69:a4:37:ee:63:3f:83:3f:27:b6:
         20:7b:2e:f1:23:64:5b:6a:50:85:be:0c:a2:6b:6e:d2:5c:96:
         d8:c7:b8:b6:e1:18:c5:6b:ab:cf:22:ae:2b:e7:c4:96:fc:91:
         83:9d:6e:5f:f8:06:a8:de:0c:43:d6:1b:c2:6d:e8:cb:2f:f4:
         2e:7c:13:10:7f:17:a9:9c:e8:a0:70:5a:2c:3f:cc:10:3c:43:
         43:09:3d:81:d9:98:81:51:30:29:a7:a1:5f:58:a5:d6:45:17:
         78:f0:71:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PCtaup7MMnJBsG9rlMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjYwMzAyMDAwMDQ3WhcNMjYwMzAzMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg4NmE2ZTRlMWI5YmM0ZmYzZmE3ZWIzYzIwMDA4NWUzMWZmZTE4NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+TOtPdCGtzZlSmP4sGtX1jtqNKC
el4EGIs6jHBhrJvq88dtUm5PQowCHaccW/nBfSbPVGM/bK+uD64NTBs87wsmRi77
eim3OLHA/KyCPfcr5qGM4WqKWTsnB3JZ3EJpo5N6O6qsYSckRFtBy2F9oZlwaI2+
T4BKXpPC+aWWXmSQR51fWXlj2DC/RPNFL+QUHCVL6BAcu3tqHJC4q3IV8sPjijjX
miAuv/C/rHtNu5I1v1ZUDHE2nECY0WUzM1F5Ln5dlv5oVRBwOSI8D5yQMXvb+kOB
HpkuizqjXMwvQYelnOxGAI6hxe/eM8LtphzThWeAtsV4M4/gP1fLwLNNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIam5OG5vE/z+n6zwgAIXjH/4YWwMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcKdbNf5
hVOnI6aQ8M+46TsliwA5q84V7DkZv7AQVQDv8ILgASxL5+46BWu/IdS7PPJ8flsH
g0sfY/uF9aE7BFK1/tFeVXAkw3tNYIrEOP6yldwQqT/c+en+01tYnEangdmLHfS1
IFwcxYT7AvkVTfQxgr6VPeqzPFmTbz1lfiNIHztRkvk4fsrjsNJlPOmvTRHUDfq2
KbVppDfuYz+DPye2IHsu8SNkW2pQhb4Momtu0lyW2Me4tuEYxWurzyKuK+fElvyR
g51uX/gGqN4MQ9Ybwm3oyy/0LnwTEH8XqZzooHBaLD/MEDxDQwk9gdmYgVEwKaeh
X1il1kUXePBxeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:11 2026 by rpki-client