Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File:                     733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier:          9pdab1XG/eg8jVSNOxdyY114wg5gvVG+BgeX4l+0rlo=
Subject key identifier:   6A:D8:7D:5B:D0:8D:A7:89:BE:46:68:48:7C:45:A3:87:A4:7B:C9:60
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer:       /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial:       019CAC10347AFD6DBE24498C5461E373A7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number:          1710
Signing time:             Mon 02 Mar 2026 01:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:08 +0000
Files and hashes:         1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: 4O1bhob7FM+mQhl/HhUtofFuls7yuCr/v+UgHaYU8aA=)
                          2: hTPnnRRGk0sclr6F2QfCiyXduQE.roa (hash: d3PjDDBu0PgL89VzwcTP4ys2SUqflMlRPDBwwnwxvfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:34:7a:fd:6d:be:24:49:8c:54:61:e3:73:a7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
        Validity
            Not Before: Mar  2 01:01:08 2026 GMT
            Not After : Mar  3 01:01:08 2026 GMT
        Subject: CN=6ad87d5bd08da789be4668487c45a387a47bc960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:60:fe:86:b2:ac:82:a3:d5:7b:75:88:98:
                    2d:cb:bd:68:98:d9:42:fd:5c:45:17:90:a7:20:f4:
                    a9:f8:62:5d:1c:39:3b:27:65:30:52:8c:71:3c:4f:
                    a6:b2:bb:19:a5:ae:ae:ea:36:92:72:a4:06:fd:0c:
                    c4:16:d7:c3:b2:89:6c:59:19:30:45:d9:8d:96:54:
                    81:79:4e:82:12:ea:a4:e0:53:04:75:18:9e:3f:df:
                    4e:92:a6:71:0b:2a:ad:a5:82:8b:7d:a4:2a:e0:a3:
                    d1:7d:36:d9:30:c0:c4:d7:1e:de:31:bf:47:db:63:
                    47:f4:41:39:5c:07:3a:d9:9b:9f:4c:f8:da:8f:f6:
                    d7:d4:18:62:b3:5d:7d:f8:73:c1:e1:74:bc:8d:01:
                    6d:f8:0a:8c:63:4f:f0:4d:50:a2:5e:3c:96:d5:3e:
                    13:1c:cb:b0:3c:82:7c:2a:75:f7:17:4b:59:ab:9c:
                    08:f8:f9:d8:b5:ae:a2:26:31:59:10:7b:d5:54:e3:
                    3a:95:ac:b2:55:84:cf:d0:de:44:07:3a:15:f0:5c:
                    56:36:bd:68:4d:52:04:f3:c6:03:23:e2:aa:f1:aa:
                    90:30:6d:44:ee:ce:35:22:a3:16:9d:a0:12:ae:ee:
                    6b:af:2c:d1:f4:eb:ed:6d:3e:a9:18:f4:ee:df:dd:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:7D:5B:D0:8D:A7:89:BE:46:68:48:7C:45:A3:87:A4:7B:C9:60
            X509v3 Authority Key Identifier:
                keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:1a:0f:6a:69:d6:03:25:ca:5b:de:b2:14:fe:1b:1f:f1:
         af:7f:3e:c5:e0:cc:b3:e9:c7:0b:2c:c4:ec:2e:af:7f:bd:8e:
         16:1c:cb:82:c8:91:d5:96:74:2c:69:57:0a:eb:40:b2:20:29:
         8d:f6:b6:86:08:85:c2:9f:46:f5:57:af:dd:18:43:b5:60:f5:
         8d:18:58:c4:51:b6:20:d5:49:ae:1b:85:8f:4a:0f:2d:58:82:
         7a:e6:10:11:50:c5:10:ed:c0:b8:9e:34:fd:59:ce:ed:f8:34:
         82:bb:17:e2:06:0e:19:2c:fc:62:f7:2a:dc:ba:76:35:38:20:
         32:40:7b:8c:a2:74:67:e7:63:b1:96:a7:1f:22:47:d1:5e:f7:
         14:5b:9d:a1:f8:ef:32:b6:db:d4:9f:9c:e8:51:7a:79:59:41:
         ca:15:65:20:83:bc:b8:2e:c4:13:cc:fe:3e:1f:be:aa:84:6a:
         b7:85:97:97:10:17:13:5a:b1:4b:f4:1e:41:cb:8a:71:b3:20:
         80:d1:c0:db:03:67:aa:f8:a8:93:48:0b:c6:d3:0e:6c:40:fc:
         e5:ef:47:d0:d7:31:ad:d1:97:5f:a3:dd:a7:3c:9b:3c:a7:32:
         df:3f:44:37:65:cf:c7:d1:3b:67:69:95:84:11:44:9e:85:52:
         45:65:8f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDR6/W2+JEmMVGHjc6fpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2RkMWViZWU1MTNmZmEzMThjZGM4OGI4MWFjMThjZmU3
MjZiMzAwHhcNMjYwMzAyMDEwMTA4WhcNMjYwMzAzMDEwMTA4WjAzMTEwLwYDVQQD
Eyg2YWQ4N2Q1YmQwOGRhNzg5YmU0NjY4NDg3YzQ1YTM4N2E0N2JjOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0plg/oayrIKj1Xt1iJgty71omNlC
/VxFF5CnIPSp+GJdHDk7J2UwUoxxPE+msrsZpa6u6jaScqQG/QzEFtfDsolsWRkw
RdmNllSBeU6CEuqk4FMEdRieP99OkqZxCyqtpYKLfaQq4KPRfTbZMMDE1x7eMb9H
22NH9EE5XAc62ZufTPjaj/bX1Bhis119+HPB4XS8jQFt+AqMY0/wTVCiXjyW1T4T
HMuwPIJ8KnX3F0tZq5wI+PnYta6iJjFZEHvVVOM6layyVYTP0N5EBzoV8FxWNr1o
TVIE88YDI+Kq8aqQMG1E7s41IqMWnaASru5rryzR9OvtbT6pGPTu390UawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrYfVvQjaeJvkZoSHxFo4eke8lgMB8GA1UdIwQY
MBaAFO990evuUT/6MYzciLgawYz+cmswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUt
ZTU2ZmVjYTYxMmU3LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUtZTU2ZmVjYTYxMmU3
LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSoaD2pp
1gMlylveshT+Gx/xr38+xeDMs+nHCyzE7C6vf72OFhzLgsiR1ZZ0LGlXCutAsiAp
jfa2hgiFwp9G9Vev3RhDtWD1jRhYxFG2INVJrhuFj0oPLViCeuYQEVDFEO3AuJ40
/VnO7fg0grsX4gYOGSz8Yvcq3Lp2NTggMkB7jKJ0Z+djsZanHyJH0V73FFudofjv
Mrbb1J+c6FF6eVlByhVlIIO8uC7EE8z+Ph++qoRqt4WXlxAXE1qxS/QeQcuKcbMg
gNHA2wNnqviok0gLxtMObED85e9H0NcxrdGXX6PdpzybPKcy3z9EN2XPx9E7Z2mV
hBFEnoVSRWWPgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:59 2026 by rpki-client