Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          6zOEGsQ/XvadaCKPrLKUPzW4Q0jpTySAgTyhxww0UpY=
Subject key identifier:   0F:A0:1F:70:1C:2C:E6:29:1D:F4:4F:AE:FE:64:AA:0B:A3:2F:82:4D
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       019CAAC6336608276009AEC294F030E249D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          1850
Signing time:             Sun 01 Mar 2026 19:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:41 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: HQbeYncpXEZ/oDWLhOBZ7tS40WI2yCei7R8vkI3qqws=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:33:66:08:27:60:09:ae:c2:94:f0:30:e2:49:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Mar  1 19:00:41 2026 GMT
            Not After : Mar  2 19:00:41 2026 GMT
        Subject: CN=0fa01f701c2ce6291df44faefe64aa0ba32f824d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:05:3a:af:a5:7e:ee:00:96:2f:b3:58:0d:
                    0f:0e:ac:87:5b:2b:df:c7:d6:0c:88:cd:96:94:e1:
                    e8:e8:0f:c6:c3:a3:95:9e:db:dd:39:61:cd:50:2c:
                    ae:79:1d:29:2c:e7:cd:4e:ee:6f:79:74:aa:41:b0:
                    81:02:43:ca:ee:33:bd:56:a2:72:7b:99:b5:f0:ec:
                    4b:00:ff:00:24:4f:1d:f2:ba:fe:a0:f2:ff:98:7c:
                    ef:d9:28:99:3b:15:9d:a1:25:00:5a:da:0d:92:c8:
                    e0:f4:06:57:e1:c4:89:9f:67:87:8f:23:5e:9a:c3:
                    8e:bc:15:f2:60:97:9f:ea:83:fa:f9:c9:b5:db:4d:
                    ac:35:ab:a1:e1:b4:d9:11:59:35:06:7d:a1:c8:8e:
                    fa:0e:62:fa:82:fc:47:d0:1f:a1:42:dd:fd:89:6b:
                    77:70:80:69:9d:33:2f:63:cf:b2:2c:4c:2f:45:0f:
                    56:f3:10:c0:cd:11:3a:98:06:b3:ee:bf:b7:86:09:
                    66:f7:d7:a4:82:03:5e:62:45:7b:73:61:6a:35:ae:
                    f3:52:df:9b:c9:03:9e:d3:cd:b1:f8:00:2b:c3:37:
                    7d:93:f1:20:d9:86:37:bc:19:a8:fc:0a:94:95:a9:
                    95:e1:2f:ed:ae:f6:c7:71:c1:cf:5f:fa:45:bc:67:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A0:1F:70:1C:2C:E6:29:1D:F4:4F:AE:FE:64:AA:0B:A3:2F:82:4D
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:97:5f:06:86:9f:50:16:41:7f:22:f0:ef:5e:66:69:6e:
         0a:79:4a:15:5e:01:25:6b:54:78:72:9b:e8:c1:94:14:cb:e2:
         c9:48:e8:7f:40:4f:74:3b:00:ee:e7:6a:f0:01:27:94:31:9b:
         c2:67:53:0b:83:53:b3:ba:ac:5d:0c:6e:2f:04:4f:d9:02:df:
         3b:7a:3a:93:ca:0e:8b:58:b7:52:c8:d4:ef:fb:e1:2c:a1:6c:
         94:7f:5c:76:39:0b:92:46:b8:db:c6:38:9b:4f:87:8f:8a:36:
         7b:8a:98:0c:3a:9f:6a:2d:de:f4:56:91:87:05:73:52:9f:31:
         b5:ea:e5:4c:0a:4a:c3:55:ef:a6:39:dd:c2:b1:d0:5f:77:5b:
         b8:38:e0:0b:d1:9d:06:f3:5d:7a:96:8e:05:e9:e1:c2:23:44:
         42:fa:c1:a1:ce:c0:42:cc:bb:43:50:14:e9:4d:f1:13:7b:de:
         4c:c7:6b:f1:fc:4e:16:80:3f:d2:49:b6:3d:33:e4:db:31:a7:
         fd:5a:2b:95:03:5d:6b:e0:d0:b4:e5:e5:3e:74:0a:d1:b3:b7:
         8a:28:e1:b1:5f:cb:13:b0:e3:27:a7:1e:91:3f:99:7d:40:f1:
         de:6f:92:44:56:c8:03:8d:39:a9:88:3b:3f:bc:6c:f5:25:ea:
         ed:a8:df:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxjNmCCdgCa7ClPAw4knSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk
ZTg5OTcwHhcNMjYwMzAxMTkwMDQxWhcNMjYwMzAyMTkwMDQxWjAzMTEwLwYDVQQD
EygwZmEwMWY3MDFjMmNlNjI5MWRmNDRmYWVmZTY0YWEwYmEzMmY4MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziQFOq+lfu4Ali+zWA0PDqyHWyvf
x9YMiM2WlOHo6A/Gw6OVntvdOWHNUCyueR0pLOfNTu5veXSqQbCBAkPK7jO9VqJy
e5m18OxLAP8AJE8d8rr+oPL/mHzv2SiZOxWdoSUAWtoNksjg9AZX4cSJn2eHjyNe
msOOvBXyYJef6oP6+cm1202sNauh4bTZEVk1Bn2hyI76DmL6gvxH0B+hQt39iWt3
cIBpnTMvY8+yLEwvRQ9W8xDAzRE6mAaz7r+3hglm99ekggNeYkV7c2FqNa7zUt+b
yQOe082x+AArwzd9k/Eg2YY3vBmo/AqUlamV4S/trvbHccHPX/pFvGfEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+gH3AcLOYpHfRPrv5kqgujL4JNMB8GA1UdIwQY
MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt
ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm
LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfGXXwaG
n1AWQX8i8O9eZmluCnlKFV4BJWtUeHKb6MGUFMviyUjof0BPdDsA7udq8AEnlDGb
wmdTC4NTs7qsXQxuLwRP2QLfO3o6k8oOi1i3UsjU7/vhLKFslH9cdjkLkka428Y4
m0+Hj4o2e4qYDDqfai3e9FaRhwVzUp8xterlTApKw1XvpjndwrHQX3dbuDjgC9Gd
BvNdepaOBenhwiNEQvrBoc7AQsy7Q1AU6U3xE3veTMdr8fxOFoA/0km2PTPk2zGn
/VorlQNda+DQtOXlPnQK0bO3iijhsV/LE7DjJ6cekT+ZfUDx3m+SRFbIA405qYg7
P7xs9SXq7ajfTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:58 2026 by rpki-client