Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          hvSLR7PeLCale6aUoa9MQIPubOiXuVHwWKMUqPdH4Jw=
Subject key identifier:   02:A3:FD:83:13:43:AC:70:7E:26:A3:AD:19:BB:ED:FF:F7:D5:CC:81
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       019CAE6C871351935443FE769FB68395122C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 12:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:13 +0000
Files and hashes:         1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 7mJIkEVJcFwvEHuBrEenuIYAOarhqgiuIs4rWH/RMi0=)
                          2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:87:13:51:93:54:43:fe:76:9f:b6:83:95:12:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: Mar  2 12:01:13 2026 GMT
            Not After : Mar  3 12:01:13 2026 GMT
        Subject: CN=02a3fd831343ac707e26a3ad19bbedfff7d5cc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:b6:4b:39:47:a5:fc:b2:d6:09:c8:72:18:
                    a5:fd:e4:74:fd:15:47:c0:3d:98:11:84:3d:c0:b4:
                    7a:b8:15:c9:61:15:c2:56:f0:fb:03:e2:5e:c3:9f:
                    2d:2c:ea:a8:f4:24:23:df:cf:60:8e:c9:16:ac:f8:
                    a7:1f:b5:34:c2:50:49:67:34:13:de:93:d6:87:c0:
                    6f:56:8d:73:a4:7e:4d:33:24:2b:e5:7e:06:04:e3:
                    60:e2:93:75:8e:77:58:37:d8:cc:b7:d0:46:38:fa:
                    b7:df:91:3f:be:78:a1:64:d8:51:08:9c:96:df:9d:
                    f7:02:7a:07:6e:ab:45:35:af:2d:d8:21:fe:4d:27:
                    3b:d0:3b:95:6f:5e:8d:c8:bb:1b:93:1c:6f:ab:46:
                    39:8c:90:5b:25:38:3f:94:cf:b4:4d:fc:de:47:a3:
                    e6:5b:7d:b5:3a:fb:f1:dc:66:97:40:e2:e6:01:3b:
                    46:22:eb:34:27:27:4d:c5:b8:01:f3:e5:b1:77:90:
                    c4:50:df:56:61:79:10:26:0c:e9:37:96:32:e6:b7:
                    69:75:a7:a1:69:9a:4c:3f:f6:52:6e:8d:ae:7d:c4:
                    97:55:af:8e:bf:06:52:0d:37:8f:eb:8f:b3:d5:37:
                    eb:2c:27:3e:76:5d:37:e8:82:ab:77:35:49:ee:20:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A3:FD:83:13:43:AC:70:7E:26:A3:AD:19:BB:ED:FF:F7:D5:CC:81
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:55:37:1c:0a:ac:a8:33:bb:0a:50:de:0e:8e:0d:10:38:00:
         a2:53:33:59:3f:49:00:f2:38:78:b7:a3:d1:0f:6f:f4:cb:73:
         17:76:d1:1e:46:2e:1a:dc:92:de:0e:9e:66:a9:fc:e5:f4:07:
         08:eb:31:26:64:ee:d1:27:67:e9:74:87:a4:1e:b9:51:32:1d:
         5f:2c:6d:53:f6:0c:4c:d9:3b:80:5c:95:e5:bc:38:47:29:01:
         96:1e:11:bb:48:9c:7b:79:dd:7e:d1:59:45:48:c8:83:34:b8:
         d5:0a:d4:46:14:f9:77:a8:c8:5f:59:25:7b:d3:a0:cf:2b:00:
         f1:85:de:04:a0:11:5b:2d:13:f1:e5:8d:48:cb:08:46:a9:cd:
         c4:88:93:3a:e9:97:ab:ef:93:37:82:d1:8d:66:34:25:72:f4:
         98:57:cd:42:c2:a4:8e:39:7f:a5:59:89:c5:ac:d2:bb:63:84:
         cc:61:29:fa:dc:b5:f7:94:8f:86:b0:e8:50:7d:e2:a1:a6:fd:
         3d:3b:60:de:6e:a3:0d:3a:0b:22:8e:5d:bd:8a:55:da:9a:99:
         6f:33:0c:bb:5b:e5:43:a6:1e:80:01:55:09:83:73:be:63:d2:
         72:a2:da:69:6a:25:43:67:66:b5:e6:97:9f:29:8f:cd:3c:95:
         08:16:dd:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubIcTUZNUQ/52n7aDlRIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwMzAyMTIwMTEzWhcNMjYwMzAzMTIwMTEzWjAzMTEwLwYDVQQD
EygwMmEzZmQ4MzEzNDNhYzcwN2UyNmEzYWQxOWJiZWRmZmY3ZDVjYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9u2SzlHpfyy1gnIchil/eR0/RVH
wD2YEYQ9wLR6uBXJYRXCVvD7A+Jew58tLOqo9CQj389gjskWrPinH7U0wlBJZzQT
3pPWh8BvVo1zpH5NMyQr5X4GBONg4pN1jndYN9jMt9BGOPq335E/vnihZNhRCJyW
3533AnoHbqtFNa8t2CH+TSc70DuVb16NyLsbkxxvq0Y5jJBbJTg/lM+0TfzeR6Pm
W321Ovvx3GaXQOLmATtGIus0JydNxbgB8+Wxd5DEUN9WYXkQJgzpN5Yy5rdpdaeh
aZpMP/ZSbo2ufcSXVa+OvwZSDTeP64+z1TfrLCc+dl036IKrdzVJ7iDxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKj/YMTQ6xwfiajrRm77f/31cyBMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVU3HAqs
qDO7ClDeDo4NEDgAolMzWT9JAPI4eLej0Q9v9MtzF3bRHkYuGtyS3g6eZqn85fQH
COsxJmTu0Sdn6XSHpB65UTIdXyxtU/YMTNk7gFyV5bw4RykBlh4Ru0ice3ndftFZ
RUjIgzS41QrURhT5d6jIX1kle9OgzysA8YXeBKARWy0T8eWNSMsIRqnNxIiTOumX
q++TN4LRjWY0JXL0mFfNQsKkjjl/pVmJxazSu2OEzGEp+ty195SPhrDoUH3ioab9
PTtg3m6jDToLIo5dvYpV2pqZbzMMu1vlQ6YegAFVCYNzvmPScqLaaWolQ2dmteaX
nymPzTyVCBbd3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:24 2026 by rpki-client