Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          997lyIfl1s7a0qLEKBs83Q2Tj5YCBl8P/QxcY7VhX0c=
Subject key identifier:   E2:14:21:E6:C2:BB:52:F8:4E:62:65:A7:3D:8C:17:A0:90:2E:C5:3C
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       019CAFB5CC6E430B2241960869C0F1209B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          0540
Signing time:             Mon 02 Mar 2026 18:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 18:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 18:00:53 +0000
Files and hashes:         1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: BmdeYn6NPMMSsCVqys4TjTYLDV5nDp548TK6IqJXA3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b5:cc:6e:43:0b:22:41:96:08:69:c0:f1:20:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Mar  2 18:00:53 2026 GMT
            Not After : Mar  3 18:00:53 2026 GMT
        Subject: CN=e21421e6c2bb52f84e6265a73d8c17a0902ec53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c8:4d:64:f2:9f:84:dd:f2:ad:c3:1b:60:b9:
                    61:e2:40:8d:f0:9e:2e:71:cc:c7:c9:37:bc:14:37:
                    0b:39:c9:a4:2b:9f:b9:c8:c4:04:90:1c:d1:82:49:
                    1d:36:81:be:0e:ee:ad:37:c1:30:10:32:35:64:49:
                    f2:9d:9f:17:cb:8f:e2:32:eb:bf:5a:fb:e8:b3:36:
                    8f:aa:a4:17:88:65:81:7e:cb:c9:cb:33:67:9d:62:
                    18:07:7c:4c:fb:d0:99:ed:a3:de:ca:e9:69:c1:d2:
                    91:8b:ac:2b:ea:7e:7c:89:94:3d:92:bb:7b:f6:78:
                    36:78:20:02:4c:74:5e:d1:7d:47:18:e6:6d:2f:9b:
                    b8:11:de:07:fb:a1:ab:4f:13:32:49:bb:94:4a:5d:
                    a0:b0:b7:c2:c2:9c:39:d0:64:37:cb:9d:b0:c8:fa:
                    40:1d:c9:9c:8d:24:a6:a3:33:ad:b5:e2:57:ce:8f:
                    08:65:0a:2d:53:1e:ee:cb:68:98:f1:76:60:ae:74:
                    1a:be:e1:94:7a:93:69:cb:5a:2d:25:85:ea:25:34:
                    3a:8e:8e:57:95:68:57:6e:11:fc:68:01:2f:8f:58:
                    6d:af:1a:81:e3:17:37:d5:3e:0f:3b:a4:b3:21:b1:
                    34:2c:54:87:4d:8b:c0:ac:5e:6b:bc:f0:7d:83:4d:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:21:E6:C2:BB:52:F8:4E:62:65:A7:3D:8C:17:A0:90:2E:C5:3C
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:73:22:4d:bf:e0:a5:79:55:23:69:72:c7:db:06:b8:20:a0:
         dd:1d:81:59:6b:4b:8c:15:08:f3:b6:69:75:7a:2a:2f:b5:6f:
         33:34:ec:3f:78:ee:ec:ce:6e:aa:67:08:f7:7a:63:a5:38:55:
         33:35:d6:ee:81:00:09:6a:f8:27:b3:d8:44:a4:a4:70:42:54:
         b0:95:cd:8d:5a:56:ea:ee:15:ef:a6:67:7f:3c:a4:b6:14:d5:
         90:12:8f:10:6b:17:e5:20:90:eb:e3:b9:ef:81:00:e0:12:56:
         64:64:b8:77:54:06:8f:49:7c:b6:36:f0:f2:f5:2a:ad:77:a9:
         e5:ac:28:33:98:77:8e:c5:68:23:a4:f2:5d:50:39:61:12:11:
         48:16:62:38:2b:63:fb:c9:e5:cc:da:4a:28:7e:61:84:2a:1a:
         12:42:59:4e:f1:27:12:c5:e8:1a:ea:15:36:d3:bf:d4:1a:8d:
         55:e8:3e:e5:c5:a3:55:21:38:9d:87:73:41:4e:78:5a:62:db:
         f2:84:d9:f7:f2:c7:cc:a6:61:73:11:e5:71:4b:e9:42:f2:12:
         36:fe:31:f3:1f:3b:74:14:e5:92:8d:79:7f:a4:69:fd:f2:c6:
         cd:8f:37:ff:e1:c0:02:02:50:a6:9c:73:a4:40:d4:7d:5b:b6:
         ad:ea:66:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtcxuQwsiQZYIacDxIJtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGMzMjlkODc2M2MyOWYyOTkzMWFiYmI4MTk1Zjk3NTAz
ODI5OGIwHhcNMjYwMzAyMTgwMDUzWhcNMjYwMzAzMTgwMDUzWjAzMTEwLwYDVQQD
EyhlMjE0MjFlNmMyYmI1MmY4NGU2MjY1YTczZDhjMTdhMDkwMmVjNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MhNZPKfhN3yrcMbYLlh4kCN8J4u
cczHyTe8FDcLOcmkK5+5yMQEkBzRgkkdNoG+Du6tN8EwEDI1ZEnynZ8Xy4/iMuu/
WvvoszaPqqQXiGWBfsvJyzNnnWIYB3xM+9CZ7aPeyulpwdKRi6wr6n58iZQ9krt7
9ng2eCACTHRe0X1HGOZtL5u4Ed4H+6GrTxMySbuUSl2gsLfCwpw50GQ3y52wyPpA
HcmcjSSmozOtteJXzo8IZQotUx7uy2iY8XZgrnQavuGUepNpy1otJYXqJTQ6jo5X
lWhXbhH8aAEvj1htrxqB4xc31T4PO6SzIbE0LFSHTYvArF5rvPB9g00/gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIUIebCu1L4TmJlpz2MF6CQLsU8MB8GA1UdIwQY
MBaAFJqMMp2HY8KfKZMau7gZX5dQOCmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYt
ZmRhOGExM2NhMWQ3LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYtZmRhOGExM2NhMWQ3
LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHMiTb/g
pXlVI2lyx9sGuCCg3R2BWWtLjBUI87ZpdXoqL7VvMzTsP3ju7M5uqmcI93pjpThV
MzXW7oEACWr4J7PYRKSkcEJUsJXNjVpW6u4V76ZnfzykthTVkBKPEGsX5SCQ6+O5
74EA4BJWZGS4d1QGj0l8tjbw8vUqrXep5awoM5h3jsVoI6TyXVA5YRIRSBZiOCtj
+8nlzNpKKH5hhCoaEkJZTvEnEsXoGuoVNtO/1BqNVeg+5cWjVSE4nYdzQU54WmLb
8oTZ9/LHzKZhcxHlcUvpQvISNv4x8x87dBTlko15f6Rp/fLGzY83/+HAAgJQppxz
pEDUfVu2repmvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:08 2026 by rpki-client