Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          7nhhQTlsZitnfFFfYsXdP62Ut6/d/twrGMF9jjcnJmI=
Subject key identifier:   60:61:98:B0:84:3F:65:FB:88:B4:BD:8D:00:ED:C0:1D:0E:78:10:13
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       019CAD59CC7F3B03BFE08C1A24C75E7971BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0BEE
Signing time:             Mon 02 Mar 2026 07:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:09 +0000
Files and hashes:         1: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
                          2: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
                          3: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
                          4: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
                          5: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
                          6: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: qdkXrWPm/PSP1qNB1kSe4FSjPTGJwRABxroVaCCdbEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:cc:7f:3b:03:bf:e0:8c:1a:24:c7:5e:79:71:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Mar  2 07:01:09 2026 GMT
            Not After : Mar  3 07:01:09 2026 GMT
        Subject: CN=606198b0843f65fb88b4bd8d00edc01d0e781013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:1d:71:f1:0b:6e:51:f4:0e:0c:db:19:85:
                    84:74:6f:62:97:3a:6c:e8:0d:71:97:b2:46:80:8f:
                    4c:ce:01:89:c0:a5:44:99:4e:7d:fc:f2:7f:a9:c4:
                    38:5d:61:9e:f5:53:00:0e:e8:96:f5:75:2e:f2:83:
                    4a:01:30:f2:69:7e:a0:da:ff:3e:16:0c:67:8b:f2:
                    70:97:b5:7d:19:19:16:6d:7e:c6:c6:ea:20:c2:cd:
                    a7:6e:5f:ef:4d:b0:87:a7:47:db:3d:39:2f:eb:b8:
                    cd:fc:8c:ff:ca:59:6d:e9:59:08:d9:ae:bf:90:d5:
                    c6:aa:16:90:49:a4:39:3e:50:5e:96:fc:98:b3:e8:
                    b3:c6:32:ce:e9:6b:21:62:28:23:59:11:05:16:a8:
                    5d:18:f1:78:99:43:77:74:7d:13:d6:ba:69:23:5d:
                    a4:4e:0e:03:6b:c9:5f:f4:97:1f:61:a5:c2:62:35:
                    87:55:7b:72:dd:eb:b2:66:91:97:f0:70:42:c8:83:
                    02:18:92:d1:c3:12:65:18:6f:ff:09:da:42:93:03:
                    cd:a6:de:1d:c4:32:e6:8a:3f:8a:f3:16:56:fa:90:
                    67:d1:e6:69:07:3f:cf:cf:a2:49:a4:2d:ec:11:56:
                    0d:c7:cc:95:75:17:5e:7f:22:e3:86:43:f0:88:75:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:98:B0:84:3F:65:FB:88:B4:BD:8D:00:ED:C0:1D:0E:78:10:13
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:14:ab:cc:c9:03:55:4b:6b:09:a8:67:8c:93:cd:58:41:6c:
         6a:55:f3:e3:6c:04:59:5b:73:4d:24:b8:52:b6:6b:f0:34:29:
         26:41:3f:7f:74:0e:f4:3b:62:1e:7b:f0:e4:2e:1e:8f:b2:45:
         b4:fa:92:84:4a:f5:6f:42:15:95:d8:55:42:06:68:b6:ea:e0:
         1e:59:a3:b0:00:0c:10:8b:dc:42:0e:c4:cd:74:64:9f:5b:b5:
         87:c0:a1:e3:96:e5:8b:c7:a2:d3:ae:75:e3:d8:1a:c1:5c:10:
         6c:8c:2b:7f:f5:41:79:66:9f:88:c5:51:67:d0:5c:fd:09:71:
         ec:6f:1c:bb:9b:34:4e:0a:66:d9:eb:1c:a3:ef:1e:e1:5b:14:
         0a:8b:b7:34:19:b2:b7:9f:4a:21:5e:a6:ba:a7:8d:5e:b1:93:
         3c:27:dd:b0:58:0a:6a:27:54:71:8d:f4:24:1e:c2:eb:b5:2c:
         57:48:1f:9f:b8:0b:74:21:0f:08:fe:c9:b2:13:62:e9:bf:0a:
         51:a5:8a:9b:4a:aa:99:34:03:08:af:4e:4e:53:f1:0f:c8:db:
         f7:81:ed:83:30:79:ec:ba:bd:3a:27:d6:80:f3:45:6a:17:7c:
         ad:62:69:1f:de:77:4f:d7:0e:63:1b:9a:ce:3b:a5:43:05:a6:
         05:7a:9b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWcx/OwO/4IwaJMdeeXG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3
NGFkODkwHhcNMjYwMzAyMDcwMTA5WhcNMjYwMzAzMDcwMTA5WjAzMTEwLwYDVQQD
Eyg2MDYxOThiMDg0M2Y2NWZiODhiNGJkOGQwMGVkYzAxZDBlNzgxMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24gdcfELblH0DgzbGYWEdG9ilzps
6A1xl7JGgI9MzgGJwKVEmU59/PJ/qcQ4XWGe9VMADuiW9XUu8oNKATDyaX6g2v8+
Fgxni/Jwl7V9GRkWbX7Gxuogws2nbl/vTbCHp0fbPTkv67jN/Iz/yllt6VkI2a6/
kNXGqhaQSaQ5PlBelvyYs+izxjLO6WshYigjWREFFqhdGPF4mUN3dH0T1rppI12k
Tg4Da8lf9JcfYaXCYjWHVXty3euyZpGX8HBCyIMCGJLRwxJlGG//CdpCkwPNpt4d
xDLmij+K8xZW+pBn0eZpBz/Pz6JJpC3sEVYNx8yVdRdefyLjhkPwiHWzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBhmLCEP2X7iLS9jQDtwB0OeBATMB8GA1UdIwQY
MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt
NGMyMWE1MDVmMzQ2LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2
LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRSrzMkD
VUtrCahnjJPNWEFsalXz42wEWVtzTSS4UrZr8DQpJkE/f3QO9DtiHnvw5C4ej7JF
tPqShEr1b0IVldhVQgZoturgHlmjsAAMEIvcQg7EzXRkn1u1h8Ch45bli8ei0651
49gawVwQbIwrf/VBeWafiMVRZ9Bc/Qlx7G8cu5s0Tgpm2esco+8e4VsUCou3NBmy
t59KIV6muqeNXrGTPCfdsFgKaidUcY30JB7C67UsV0gfn7gLdCEPCP7JshNi6b8K
UaWKm0qqmTQDCK9OTlPxD8jb94HtgzB57Lq9OifWgPNFahd8rWJpH953T9cOYxua
zjulQwWmBXqbkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:48 2026 by rpki-client