Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File:                     tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier:          5dNUcOsJp9tziKPd4DFhLoHjUaTFuwJs+JIAMDzj5x0=
Subject key identifier:   12:04:45:C9:48:32:A3:CF:09:67:2A:14:24:DC:0C:FF:6F:DD:F8:84
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer:       /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial:       019CAE3538078A0B6D9ED3CDC1ED87FFCF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 11:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:49 +0000
Files and hashes:         1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
                          2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
                          3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: kQpwg0i8WAQYb8KJmN2htWoTl5dv4CrvAfOgJmJo2mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:38:07:8a:0b:6d:9e:d3:cd:c1:ed:87:ff:cf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
        Validity
            Not Before: Mar  2 11:00:49 2026 GMT
            Not After : Mar  3 11:00:49 2026 GMT
        Subject: CN=120445c94832a3cf09672a1424dc0cff6fddf884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:a2:e9:09:64:df:c2:2e:41:84:35:25:21:
                    13:29:14:f2:53:b6:ce:d7:02:6a:05:5a:4e:e1:0c:
                    94:9a:ee:20:21:05:0d:99:15:b3:5a:09:f4:3a:b4:
                    79:93:eb:ec:49:ff:9a:f1:4b:21:56:f0:7f:ab:bc:
                    04:e7:bf:05:41:2c:91:70:a3:4f:e2:a6:6a:8e:a2:
                    3b:14:9e:f3:7b:54:69:4f:09:33:0b:10:63:4d:03:
                    dc:85:f9:d8:db:9f:7e:bf:62:d1:09:eb:40:86:b5:
                    d0:37:1e:56:28:29:a5:79:b2:c9:d7:bf:49:eb:0e:
                    eb:6a:20:89:77:ba:35:86:b8:ca:01:dc:38:2b:28:
                    b2:bd:e4:f2:dd:5c:c6:07:35:75:38:36:89:2a:f9:
                    d0:a8:a4:47:cd:e0:95:39:95:a5:5f:ab:e1:7e:bb:
                    78:c6:13:47:e3:38:ea:55:08:56:4a:23:ca:94:a2:
                    da:bb:01:fd:ac:10:6b:a0:43:e7:9c:5f:38:3a:20:
                    7c:57:39:76:b7:0d:f7:79:ff:ea:96:d2:54:90:14:
                    10:ce:86:8c:2d:18:f8:b2:5a:14:17:10:44:9f:4d:
                    ce:8d:a7:9d:e9:ee:f5:53:f5:8b:0a:79:4b:e8:84:
                    e5:1a:87:35:4b:a6:7c:0f:62:5f:25:0f:25:96:25:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:45:C9:48:32:A3:CF:09:67:2A:14:24:DC:0C:FF:6F:DD:F8:84
            X509v3 Authority Key Identifier:
                keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:ae:b3:42:f3:57:aa:66:3b:af:14:1b:58:60:a7:2a:f8:
         4f:13:35:a6:e4:11:c7:9a:e1:b4:98:ed:46:f6:d4:b7:85:30:
         8d:05:83:8f:01:9a:87:46:64:37:dc:f9:7a:03:cd:af:07:7a:
         09:eb:a0:a1:89:3f:cc:87:6b:3c:24:ac:25:9c:5c:7e:7b:20:
         35:64:b7:65:f2:24:15:07:68:36:98:cf:0b:fe:52:fe:6c:79:
         fb:8d:61:0d:6e:bd:00:13:29:5d:e6:61:c1:50:38:cb:7f:f9:
         96:2b:d0:7d:04:04:dc:8e:04:c6:37:5d:6d:52:32:db:f3:9a:
         e7:69:75:1c:75:71:25:fb:3c:d5:65:10:96:08:11:88:be:9a:
         5c:e0:cd:1a:2c:0d:d6:0e:c5:6d:1b:17:51:97:f8:67:ed:07:
         23:e9:25:7a:ec:16:d8:ed:44:4d:0f:8d:d2:a4:c9:6e:cc:3b:
         72:d1:cc:3a:2d:69:2f:c0:46:fc:44:1b:9c:08:fc:04:f9:b9:
         53:08:07:36:43:7c:d9:18:8f:4c:25:f7:7c:31:77:1d:7e:d1:
         91:ec:52:46:a5:78:5f:64:36:48:b6:74:52:39:42:d7:3d:0c:
         33:89:41:5f:9f:9e:d8:c1:2e:5c:91:8c:23:08:ed:62:48:fc:
         e7:27:8a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNTgHigttntPNwe2H/8+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjYwMzAyMTEwMDQ5WhcNMjYwMzAzMTEwMDQ5WjAzMTEwLwYDVQQD
EygxMjA0NDVjOTQ4MzJhM2NmMDk2NzJhMTQyNGRjMGNmZjZmZGRmODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOi6Qlk38IuQYQ1JSETKRTyU7bO
1wJqBVpO4QyUmu4gIQUNmRWzWgn0OrR5k+vsSf+a8UshVvB/q7wE578FQSyRcKNP
4qZqjqI7FJ7ze1RpTwkzCxBjTQPchfnY259+v2LRCetAhrXQNx5WKCmlebLJ179J
6w7raiCJd7o1hrjKAdw4KyiyveTy3VzGBzV1ODaJKvnQqKRHzeCVOZWlX6vhfrt4
xhNH4zjqVQhWSiPKlKLauwH9rBBroEPnnF84OiB8Vzl2tw33ef/qltJUkBQQzoaM
LRj4sloUFxBEn03Ojaed6e71U/WLCnlL6ITlGoc1S6Z8D2JfJQ8lliX1/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIERclIMqPPCWcqFCTcDP9v3fiEMB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwCus0Lz
V6pmO68UG1hgpyr4TxM1puQRx5rhtJjtRvbUt4UwjQWDjwGah0ZkN9z5egPNrwd6
CeugoYk/zIdrPCSsJZxcfnsgNWS3ZfIkFQdoNpjPC/5S/mx5+41hDW69ABMpXeZh
wVA4y3/5livQfQQE3I4ExjddbVIy2/Oa52l1HHVxJfs81WUQlggRiL6aXODNGiwN
1g7FbRsXUZf4Z+0HI+kleuwW2O1ETQ+N0qTJbsw7ctHMOi1pL8BG/EQbnAj8BPm5
UwgHNkN82RiPTCX3fDF3HX7RkexSRqV4X2Q2SLZ0UjlC1z0MM4lBX5+e2MEuXJGM
IwjtYkj85yeK8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:25 2026 by rpki-client