Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          wx6XytnpcmvnqkP6GVyVoOoyciN8GDl/BCbL952UG+c=
Subject key identifier:   6C:9B:73:90:C1:C6:C6:ED:77:19:FD:B9:7D:AD:57:D5:AF:CE:4B:CA
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       019CAF11471BFC4FD4F285049BBE9944C18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0F5B
Signing time:             Mon 02 Mar 2026 15:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:10 +0000
Files and hashes:         1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
                          2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: A72eU1b3MgjPnltD/eNX6uRTjLxGo/NgBoaXYOzr9ic=)
                          4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
                          5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:47:1b:fc:4f:d4:f2:85:04:9b:be:99:44:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Mar  2 15:01:10 2026 GMT
            Not After : Mar  3 15:01:10 2026 GMT
        Subject: CN=6c9b7390c1c6c6ed7719fdb97dad57d5afce4bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:2e:cd:c6:29:9c:7f:f0:87:6d:d7:69:40:
                    bf:ec:b0:b3:f7:3b:0f:9b:11:8c:0c:cb:ef:c4:62:
                    c0:1f:47:a5:07:73:1c:17:8e:e3:ac:4b:99:91:11:
                    ce:26:6f:d3:bf:38:98:56:67:4f:ce:f6:f4:f1:2a:
                    f0:b2:bb:2f:9c:43:22:83:20:e8:7c:7c:40:d0:4c:
                    1c:30:f6:e3:f9:de:72:b4:31:b5:13:90:92:ca:b8:
                    e5:d2:ec:4c:6b:f1:a4:e6:4b:d8:e1:43:43:f4:6f:
                    e3:10:2d:ce:76:9f:9b:6b:21:2c:03:12:31:e6:2a:
                    99:11:62:e9:ae:b9:dc:8b:2e:5b:16:ca:47:91:4f:
                    ab:f1:2d:29:b8:39:df:a6:5e:a7:50:41:0b:53:d1:
                    bd:1a:5b:5d:ea:92:c2:f2:35:ea:96:d6:df:26:88:
                    2a:35:69:47:67:45:30:cc:99:5f:9c:21:25:45:28:
                    e5:0d:4f:88:73:e9:1d:01:cf:56:4f:36:06:dd:b6:
                    08:8b:e3:55:ec:17:4e:7a:20:c8:12:4a:dd:11:fd:
                    54:f6:70:6e:7b:6c:ae:d9:5e:74:6c:b2:22:14:a4:
                    3f:5d:d5:c1:5e:86:b6:ad:d2:81:9f:57:d0:21:7d:
                    19:58:27:06:95:28:c0:dd:e1:1d:d4:8d:c6:1f:96:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:73:90:C1:C6:C6:ED:77:19:FD:B9:7D:AD:57:D5:AF:CE:4B:CA
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:83:e2:4e:61:89:45:ce:b3:b5:37:ca:2d:c5:da:a3:10:
         93:a9:f9:ae:fa:5c:f2:3f:89:1e:0a:2d:f3:19:85:aa:a1:27:
         2c:9c:54:10:9b:46:cc:7f:35:c1:26:9e:bc:16:95:22:eb:5a:
         4c:9e:fb:54:2e:7c:a1:fc:e5:f0:50:30:99:9f:27:38:92:66:
         f7:a5:3d:0a:dc:b4:29:65:10:be:65:de:46:7f:b0:a5:7f:e7:
         2e:93:bd:75:9e:5f:a0:52:0a:5c:74:34:60:58:99:68:43:1c:
         78:40:52:e5:e3:dd:77:f0:04:98:04:61:19:cb:8a:bd:b3:df:
         13:58:7f:95:5e:65:68:a3:22:7e:0b:0a:bc:4c:1b:0a:09:91:
         30:3d:5c:38:4f:64:e5:ee:4b:2b:66:a9:3e:a2:54:f4:0e:4c:
         43:0e:e4:1b:4b:6c:38:12:e1:60:93:19:cf:2e:4e:36:3a:42:
         cf:5a:cb:ec:a9:4b:50:9d:bf:88:b6:68:20:27:8d:2e:2c:88:
         e9:47:6e:1e:33:b1:6c:8c:35:55:28:3d:e3:9e:78:f8:a7:ae:
         bd:95:74:c7:d0:68:b0:86:98:44:fe:9a:77:88:05:61:05:df:
         d0:15:d2:3a:65:c1:0a:c9:35:96:e4:ce:d7:7e:68:54:e2:f0:
         28:6b:f2:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEUcb/E/U8oUEm76ZRMGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzgzMWE2MWJjOGE4ZjRjYjg1ODg3MDIyZmI2Zjg2Mzk3
MzQ1ZGMwHhcNMjYwMzAyMTUwMTEwWhcNMjYwMzAzMTUwMTEwWjAzMTEwLwYDVQQD
Eyg2YzliNzM5MGMxYzZjNmVkNzcxOWZkYjk3ZGFkNTdkNWFmY2U0YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhEuzcYpnH/wh23XaUC/7LCz9zsP
mxGMDMvvxGLAH0elB3McF47jrEuZkRHOJm/TvziYVmdPzvb08SrwsrsvnEMigyDo
fHxA0EwcMPbj+d5ytDG1E5CSyrjl0uxMa/Gk5kvY4UND9G/jEC3Odp+bayEsAxIx
5iqZEWLprrnciy5bFspHkU+r8S0puDnfpl6nUEELU9G9Gltd6pLC8jXqltbfJogq
NWlHZ0UwzJlfnCElRSjlDU+Ic+kdAc9WTzYG3bYIi+NV7BdOeiDIEkrdEf1U9nBu
e2yu2V50bLIiFKQ/XdXBXoa2rdKBn1fQIX0ZWCcGlSjA3eEd1I3GH5bsawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGybc5DBxsbtdxn9uX2tV9WvzkvKMB8GA1UdIwQY
MBaAFGA4MaYbyKj0y4WIcCL7b4Y5c0XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYt
OTgwODU0NTkzM2M5LzEvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYtOTgwODU0NTkzM2M5
LzEvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn52D4k5h
iUXOs7U3yi3F2qMQk6n5rvpc8j+JHgot8xmFqqEnLJxUEJtGzH81wSaevBaVIuta
TJ77VC58ofzl8FAwmZ8nOJJm96U9Cty0KWUQvmXeRn+wpX/nLpO9dZ5foFIKXHQ0
YFiZaEMceEBS5ePdd/AEmARhGcuKvbPfE1h/lV5laKMifgsKvEwbCgmRMD1cOE9k
5e5LK2apPqJU9A5MQw7kG0tsOBLhYJMZzy5ONjpCz1rL7KlLUJ2/iLZoICeNLiyI
6UduHjOxbIw1VSg94554+KeuvZV0x9BosIaYRP6ad4gFYQXf0BXSOmXBCsk1luTO
135oVOLwKGvyRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:04 2026 by rpki-client