Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          VXetzr2qbEcSdHN11yOZik6FQuaV3SPmNTAr/jW/5PA=
Subject key identifier:   83:77:58:B3:63:10:06:39:88:FB:63:97:D5:61:8E:9E:8A:DA:AC:6E
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       019CAEDA390E1E1B5067665C544DE700A339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          01AD
Signing time:             Mon 02 Mar 2026 14:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 14:01:02 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: e0O28mF5skvvFLkiKLpBrjEw81FRIQSTDAin01viJGo=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:39:0e:1e:1b:50:67:66:5c:54:4d:e7:00:a3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Mar  2 14:01:02 2026 GMT
            Not After : Mar  3 14:01:02 2026 GMT
        Subject: CN=837758b36310063988fb6397d5618e9e8adaac6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:a6:84:b5:2c:b0:a6:c4:62:b6:5a:72:84:
                    d5:37:c7:c3:41:bc:87:2b:01:15:9c:35:0b:b8:54:
                    b4:e3:e5:9a:d7:60:29:c1:d0:f2:da:a8:1a:71:ba:
                    b8:77:e3:48:00:d6:19:a4:fb:65:9f:29:6c:08:cc:
                    5e:6f:20:47:be:e4:c5:a9:81:b0:cb:6b:03:94:39:
                    bc:55:b3:9b:82:d6:15:6f:78:2e:a4:c4:c8:a0:77:
                    60:e4:5b:24:6b:16:23:85:5e:f1:1a:e4:8e:d2:dd:
                    62:73:29:96:5f:b5:24:0b:24:bf:cb:fb:3b:90:b7:
                    58:08:7c:b3:a7:80:54:ac:e9:ef:2e:f8:65:3d:a0:
                    9b:82:87:85:6a:92:ec:50:d5:45:fd:11:bc:9e:47:
                    ff:46:63:92:39:5c:48:b6:71:6e:d2:3b:d0:42:58:
                    39:74:9e:c2:59:4c:f4:ce:af:72:81:c3:8e:21:f5:
                    38:94:0d:bd:7f:e3:ba:f9:dd:47:06:4e:83:f8:f4:
                    cb:30:0b:13:44:48:92:55:12:b7:e1:3b:7c:37:ca:
                    f5:06:fa:8f:f5:21:d6:e1:67:5d:cc:44:9f:26:79:
                    32:85:d3:0c:e1:a2:92:24:5d:97:5a:99:0e:cf:47:
                    70:c2:71:98:9d:c1:6a:60:43:99:d3:7e:36:ad:fe:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:58:B3:63:10:06:39:88:FB:63:97:D5:61:8E:9E:8A:DA:AC:6E
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:23:cc:bf:32:2d:1d:17:a9:fb:30:d7:be:8d:4d:bd:38:b4:
         4e:1c:51:5c:6a:aa:bd:d4:01:e8:2e:c2:ba:9b:31:04:ac:d5:
         69:26:b7:ea:11:51:17:5f:3b:f4:d9:85:40:81:38:28:ee:71:
         5c:96:1f:65:80:14:70:59:58:4b:bf:6b:cd:5b:33:f8:53:5d:
         7f:88:7c:f6:3c:66:f9:0e:e5:25:ef:f0:0f:f6:c2:0c:0d:c3:
         aa:41:8e:e3:db:0e:03:4b:ae:84:9f:8d:78:33:a2:86:ef:86:
         1e:62:2c:98:fa:57:dc:33:a6:59:2d:aa:74:c1:6e:7e:20:3c:
         1d:dd:15:dc:2e:d3:17:d8:37:29:14:02:75:e0:70:32:69:02:
         a8:49:9c:8b:b7:14:a2:73:09:6a:49:0c:06:72:49:8e:54:90:
         3f:17:ab:8c:f8:24:95:e9:d1:f0:7e:31:2d:df:d5:fb:62:6c:
         7c:89:90:c0:ae:0e:0d:f7:b3:de:4d:7a:cd:c7:1d:ab:6c:6f:
         44:60:87:83:56:f1:0b:67:fb:08:6c:2b:c1:53:a0:51:3e:1a:
         5e:7c:b7:32:9f:8c:19:8d:7f:b7:69:76:e9:51:26:ec:0c:61:
         3f:c4:35:41:1a:18:e2:31:30:1d:76:ef:da:94:14:d4:4c:70:
         29:fc:c5:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2jkOHhtQZ2ZcVE3nAKM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjYwMzAyMTQwMTAyWhcNMjYwMzAzMTQwMTAyWjAzMTEwLwYDVQQD
Eyg4Mzc3NThiMzYzMTAwNjM5ODhmYjYzOTdkNTYxOGU5ZThhZGFhYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRqmhLUssKbEYrZacoTVN8fDQbyH
KwEVnDULuFS04+Wa12ApwdDy2qgacbq4d+NIANYZpPtlnylsCMxebyBHvuTFqYGw
y2sDlDm8VbObgtYVb3gupMTIoHdg5FskaxYjhV7xGuSO0t1icymWX7UkCyS/y/s7
kLdYCHyzp4BUrOnvLvhlPaCbgoeFapLsUNVF/RG8nkf/RmOSOVxItnFu0jvQQlg5
dJ7CWUz0zq9ygcOOIfU4lA29f+O6+d1HBk6D+PTLMAsTREiSVRK34Tt8N8r1BvqP
9SHW4WddzESfJnkyhdMM4aKSJF2XWpkOz0dwwnGYncFqYEOZ0342rf6gwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN3WLNjEAY5iPtjl9Vhjp6K2qxuMB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCPMvzIt
HRep+zDXvo1NvTi0ThxRXGqqvdQB6C7CupsxBKzVaSa36hFRF1879NmFQIE4KO5x
XJYfZYAUcFlYS79rzVsz+FNdf4h89jxm+Q7lJe/wD/bCDA3DqkGO49sOA0uuhJ+N
eDOihu+GHmIsmPpX3DOmWS2qdMFufiA8Hd0V3C7TF9g3KRQCdeBwMmkCqEmci7cU
onMJakkMBnJJjlSQPxerjPgklenR8H4xLd/V+2JsfImQwK4ODfez3k16zccdq2xv
RGCHg1bxC2f7CGwrwVOgUT4aXny3Mp+MGY1/t2l26VEm7AxhP8Q1QRoY4jEwHXbv
2pQU1ExwKfzFHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:22 2026 by rpki-client