Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          ZhHnnnL9rBoibGXHYmQlGlchrr9E9vDkF8tUr4NS6Ko=
Subject key identifier:   13:15:9D:D3:5E:07:1E:C3:13:CB:F6:E6:E1:DC:23:4A:81:8E:E6:78
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       019CB05AF2FBD01F3B48CAC6B366DD87F03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 21:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 21:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 21:01:16 +0000
Files and hashes:         1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 1rbmHhZ8SZbnpBdlY/jns3JPD0rgn+Yq5nTyuuy+BUw=)
                          2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:5a:f2:fb:d0:1f:3b:48:ca:c6:b3:66:dd:87:f0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: Mar  2 21:01:16 2026 GMT
            Not After : Mar  3 21:01:16 2026 GMT
        Subject: CN=13159dd35e071ec313cbf6e6e1dc234a818ee678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:8c:67:79:36:f7:d7:50:b7:04:c7:b8:43:
                    36:06:91:2e:81:6a:fd:1e:a8:d1:1a:57:54:70:a3:
                    d5:39:85:73:c3:09:54:4e:fd:ae:e7:95:bb:e7:df:
                    bd:0c:31:4e:e5:00:30:43:85:d9:c8:ab:93:34:46:
                    36:35:0d:92:61:04:98:74:f0:4d:e1:33:dd:d9:16:
                    55:b3:3e:8e:07:59:54:74:7a:46:e2:24:2a:db:30:
                    10:71:5b:58:d4:58:56:c0:8f:48:ee:5f:7e:57:bd:
                    25:6e:ae:81:4c:af:97:d0:33:9f:49:e6:31:64:6a:
                    cb:35:6c:4c:9f:e7:1d:af:ef:13:d3:a3:6c:f1:5b:
                    64:9d:48:29:1b:bd:41:60:ea:a5:de:60:e1:07:3b:
                    d2:b0:73:4e:e5:e7:a5:8e:03:4e:6e:32:e8:07:36:
                    be:dc:64:11:a6:d8:a6:53:3a:9a:4d:09:13:ec:cd:
                    29:fa:7d:5d:46:54:ac:e7:b8:18:e0:e6:a2:e1:db:
                    56:70:11:c4:ac:9d:f6:a5:8e:80:9e:85:8d:dd:c3:
                    05:62:b8:7e:00:b5:bd:fa:ca:1c:56:df:4a:c1:ba:
                    92:59:c2:4f:8b:23:02:48:73:1f:44:53:62:54:97:
                    af:8d:90:00:c9:94:48:7b:30:f8:fe:80:97:8e:03:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:9D:D3:5E:07:1E:C3:13:CB:F6:E6:E1:DC:23:4A:81:8E:E6:78
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:44:85:3b:bc:5a:55:41:73:a8:51:10:e3:d8:09:2a:8b:
         35:01:0a:1a:69:96:96:78:2a:11:59:23:1e:8d:40:f9:d0:29:
         af:5e:01:bf:cd:9e:bc:06:99:ee:4a:48:12:8c:ad:b5:53:1c:
         2c:d2:29:2c:d3:02:2c:55:ed:c5:ef:79:ca:a1:b6:f2:4a:61:
         f5:49:77:1e:02:80:9b:e1:33:59:70:c5:86:d9:31:83:73:7a:
         37:ed:3c:a8:0c:8a:b8:6d:f1:76:f9:6b:46:1e:e3:ab:d9:c5:
         d4:e4:c6:84:45:28:a8:fc:ad:80:74:f9:4c:32:1f:7a:df:d2:
         ec:f3:62:b8:7f:5f:3b:46:40:52:c3:12:9f:ab:68:dd:67:48:
         3b:b6:11:ba:3a:6c:34:b7:3a:1d:a2:cb:fd:0d:1a:10:e8:48:
         36:83:2c:4e:ac:5c:46:c5:e0:b0:08:e4:3d:6e:c6:a9:72:04:
         f2:b0:fb:14:24:ae:cc:34:64:57:df:be:4b:83:5f:fa:da:e4:
         e8:02:00:3e:8e:2c:32:45:1a:d0:1a:f6:f9:3f:40:db:54:87:
         20:53:9b:47:f4:04:f9:35:77:e9:fa:d7:3d:f8:47:29:85:60:
         9b:fe:b2:ee:b1:e4:67:c2:24:21:f2:d6:69:33:e6:05:cc:d8:
         f1:cc:7b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWvL70B87SMrGs2bdh/A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwMzAyMjEwMTE2WhcNMjYwMzAzMjEwMTE2WjAzMTEwLwYDVQQD
EygxMzE1OWRkMzVlMDcxZWMzMTNjYmY2ZTZlMWRjMjM0YTgxOGVlNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5qMZ3k299dQtwTHuEM2BpEugWr9
HqjRGldUcKPVOYVzwwlUTv2u55W759+9DDFO5QAwQ4XZyKuTNEY2NQ2SYQSYdPBN
4TPd2RZVsz6OB1lUdHpG4iQq2zAQcVtY1FhWwI9I7l9+V70lbq6BTK+X0DOfSeYx
ZGrLNWxMn+cdr+8T06Ns8VtknUgpG71BYOql3mDhBzvSsHNO5eeljgNObjLoBza+
3GQRptimUzqaTQkT7M0p+n1dRlSs57gY4Oai4dtWcBHErJ32pY6AnoWN3cMFYrh+
ALW9+socVt9KwbqSWcJPiyMCSHMfRFNiVJevjZAAyZRIezD4/oCXjgN/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMVndNeBx7DE8v25uHcI0qBjuZ4MB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4dEhTu8
WlVBc6hREOPYCSqLNQEKGmmWlngqEVkjHo1A+dApr14Bv82evAaZ7kpIEoyttVMc
LNIpLNMCLFXtxe95yqG28kph9Ul3HgKAm+EzWXDFhtkxg3N6N+08qAyKuG3xdvlr
Rh7jq9nF1OTGhEUoqPytgHT5TDIfet/S7PNiuH9fO0ZAUsMSn6to3WdIO7YRujps
NLc6HaLL/Q0aEOhINoMsTqxcRsXgsAjkPW7GqXIE8rD7FCSuzDRkV9++S4Nf+trk
6AIAPo4sMkUa0Br2+T9A21SHIFObR/QE+TV36frXPfhHKYVgm/6y7rHkZ8IkIfLW
aTPmBczY8cx7mg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:39 2026 by rpki-client