Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          gpEkqpskD5JAH1J/hy9NRABoAezazillg9Q+/ffM3W0=
Subject key identifier:   9F:56:B4:3D:02:93:BD:62:71:2D:FD:06:F4:06:66:8C:6C:A2:2C:CA
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019CAA21492205BA648B6AAE7331417A9F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          06AA
Signing time:             Sun 01 Mar 2026 16:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:33 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: v1oIXC2dqOCgJrNiOnF0bX21GlBkbISZBBJ6EdIyUS4=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:49:22:05:ba:64:8b:6a:ae:73:31:41:7a:9f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Mar  1 16:00:33 2026 GMT
            Not After : Mar  2 16:00:33 2026 GMT
        Subject: CN=9f56b43d0293bd62712dfd06f406668c6ca22cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:dc:82:e1:a0:3c:3e:d3:b9:7b:df:bb:10:
                    e0:ec:7a:89:89:74:e5:5e:b3:4c:12:2e:fa:1c:6b:
                    77:3c:10:2b:b7:3c:57:77:c5:4f:c4:85:6a:e6:2d:
                    56:c4:0e:ba:ba:87:d6:57:94:03:0a:c5:99:9b:02:
                    3a:67:5e:5b:85:d3:01:97:6d:ef:59:26:e4:12:ac:
                    e3:cf:0a:cf:23:07:e6:1b:e2:17:07:62:6e:aa:fb:
                    b4:05:63:7f:02:36:2d:ab:07:d0:96:81:eb:12:26:
                    65:68:9d:cc:76:21:35:33:bc:7a:2c:42:2d:05:2d:
                    ab:27:a3:1f:2c:1d:97:8e:2b:c2:08:d1:36:f8:32:
                    9e:d7:ae:66:c2:0c:e7:bc:db:17:11:91:8e:24:5e:
                    32:c9:50:70:d1:82:6b:dc:6b:e3:a8:23:dc:1f:f2:
                    95:6a:eb:36:1f:82:52:2f:b6:98:ed:63:b9:db:f5:
                    be:38:d0:85:dc:cd:9e:d7:3d:f1:e6:e5:1b:61:ec:
                    ea:84:83:7d:a8:f4:7e:75:cd:3f:a2:4a:1a:c5:3a:
                    a0:90:30:a0:52:41:32:a1:41:85:fe:95:72:aa:6c:
                    ff:fd:fa:11:bc:f1:5b:74:aa:43:25:50:8e:ec:fc:
                    05:0f:f8:98:30:29:a0:e0:c7:59:2b:0e:8b:3c:ee:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:B4:3D:02:93:BD:62:71:2D:FD:06:F4:06:66:8C:6C:A2:2C:CA
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:74:ae:9c:f7:10:cc:d7:41:88:e4:61:11:78:bd:67:5a:
         f5:c8:ad:d4:ae:74:48:0a:59:65:86:fe:45:8f:99:2c:94:6e:
         59:c4:c0:10:09:b0:8f:da:fe:77:14:c3:13:79:0d:73:c7:8b:
         fa:2a:a1:11:ca:97:2d:ef:ae:a4:d1:2d:5c:11:f8:4b:20:c5:
         f0:31:4e:19:d5:ea:56:19:7a:16:30:09:2f:e2:b1:ac:ae:15:
         cd:0b:eb:cb:44:f0:0a:4f:90:7d:9f:84:85:53:78:35:8b:21:
         ce:60:22:d7:4e:30:eb:f4:46:68:86:58:5a:a8:b3:8b:75:d5:
         28:44:d6:3c:09:70:fc:18:7c:57:14:e9:74:f7:51:a2:a7:55:
         b3:67:51:53:ba:3e:a2:e7:61:a8:07:e4:c1:9f:9e:c0:49:89:
         54:b2:01:b8:54:e5:6f:b6:dd:f5:e6:d4:be:e9:e8:bd:89:6f:
         7b:54:88:e1:52:be:50:c5:09:b5:ba:bb:a4:35:9e:99:3c:f8:
         7c:2d:19:95:ff:a6:de:d5:66:7a:6d:e5:ed:c5:88:53:6b:a5:
         71:8a:dc:fd:ae:44:23:57:03:f2:b5:b6:ae:fe:3a:b9:3a:1c:
         fd:6a:3e:2f:42:32:ee:0d:0d:23:07:ef:3d:28:eb:c3:de:db:
         7a:65:61:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUkiBbpki2quczFBep9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjhkMGE3MjA0NTYwYjYzNTZkODM3YmJmMTUxMGQ5NjM2
ZGY2M2EwHhcNMjYwMzAxMTYwMDMzWhcNMjYwMzAyMTYwMDMzWjAzMTEwLwYDVQQD
Eyg5ZjU2YjQzZDAyOTNiZDYyNzEyZGZkMDZmNDA2NjY4YzZjYTIyY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrPcguGgPD7TuXvfuxDg7HqJiXTl
XrNMEi76HGt3PBArtzxXd8VPxIVq5i1WxA66uofWV5QDCsWZmwI6Z15bhdMBl23v
WSbkEqzjzwrPIwfmG+IXB2Juqvu0BWN/AjYtqwfQloHrEiZlaJ3MdiE1M7x6LEIt
BS2rJ6MfLB2XjivCCNE2+DKe165mwgznvNsXEZGOJF4yyVBw0YJr3GvjqCPcH/KV
aus2H4JSL7aY7WO52/W+ONCF3M2e1z3x5uUbYezqhIN9qPR+dc0/okoaxTqgkDCg
UkEyoUGF/pVyqmz//foRvPFbdKpDJVCO7PwFD/iYMCmg4MdZKw6LPO6l1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9WtD0Ck71icS39BvQGZoxsoizKMB8GA1UdIwQY
MBaAFEVo0KcgRWC2NW2De78VENljbfY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgt
NmZlMzVhZTU0YTViLzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgtNmZlMzVhZTU0YTVi
LzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIN0rpz3
EMzXQYjkYRF4vWda9cit1K50SApZZYb+RY+ZLJRuWcTAEAmwj9r+dxTDE3kNc8eL
+iqhEcqXLe+upNEtXBH4SyDF8DFOGdXqVhl6FjAJL+KxrK4VzQvry0TwCk+QfZ+E
hVN4NYshzmAi104w6/RGaIZYWqizi3XVKETWPAlw/Bh8VxTpdPdRoqdVs2dRU7o+
oudhqAfkwZ+ewEmJVLIBuFTlb7bd9ebUvunovYlve1SI4VK+UMUJtbq7pDWemTz4
fC0Zlf+m3tVmem3l7cWIU2ulcYrc/a5EI1cD8rW2rv46uToc/Wo+L0Iy7g0NIwfv
PSjrw97bemVhiA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:04 2026 by rpki-client