Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File:                     9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier:          AWGKEcZdXpNKDqFsZnzkGhYuyjZFN2Smwk6e7tFk8Rw=
Subject key identifier:   1F:76:04:28:7C:FE:D2:AE:C2:0C:79:20:8E:DA:49:1A:87:88:20:59
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       019CA945D375E92991767CE75848181EBCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number:          10EF
Signing time:             Sun 01 Mar 2026 12:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:51 +0000
Files and hashes:         1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
                          2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: KVK1ktOqrNcbMRXYdGkClYiWK2PmwjJkLFx0s9++FM4=)
                          3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=)
                          4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=)
                          5: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
                          6: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=)
                          7: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:d3:75:e9:29:91:76:7c:e7:58:48:18:1e:bc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Mar  1 12:00:51 2026 GMT
            Not After : Mar  2 12:00:51 2026 GMT
        Subject: CN=1f7604287cfed2aec20c79208eda491a87882059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:eb:a5:00:53:9d:2b:5d:ac:4b:0f:90:61:
                    58:db:68:2d:61:8d:53:cc:ae:c7:70:7e:cd:b9:75:
                    1c:65:19:fa:40:22:86:4e:9f:8f:b2:2b:a0:c9:cb:
                    7b:10:31:14:93:0c:06:5f:12:33:78:86:5a:35:12:
                    43:77:ea:44:1b:cd:92:05:ef:d9:b4:86:c6:52:ef:
                    af:ac:f4:10:3d:88:a2:59:40:a1:b1:e0:13:3b:59:
                    c2:1c:62:5e:b8:94:71:4b:21:8b:21:d7:7d:14:42:
                    cd:a4:ee:93:a5:66:c9:c3:60:34:3e:cc:a1:9b:59:
                    52:ec:e7:12:7f:56:dc:ab:67:29:5d:a6:5d:c8:26:
                    f6:02:3f:e8:9b:3e:c7:92:c7:87:0d:ee:61:07:24:
                    6f:14:f6:c7:8b:cf:a5:6a:a5:73:38:79:57:66:0b:
                    43:39:79:17:79:ad:4d:99:02:fd:ba:f5:dd:fd:f7:
                    b8:97:25:13:00:c9:ca:77:25:4c:48:c6:0a:52:37:
                    4f:98:42:d6:a0:9e:65:86:2c:e3:72:ce:d7:00:45:
                    6a:f4:f7:b4:37:53:84:d2:03:21:73:07:1e:51:0b:
                    90:cc:ea:57:36:4e:24:a6:c7:9c:b5:93:e9:06:41:
                    2d:7b:50:06:ff:4b:92:75:5a:dd:a5:85:b5:53:00:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:76:04:28:7C:FE:D2:AE:C2:0C:79:20:8E:DA:49:1A:87:88:20:59
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:f5:ee:1f:35:1e:f6:e9:e1:a3:aa:83:60:39:14:ab:e9:
         9a:bd:a0:75:95:ac:5e:74:db:1f:21:71:73:24:5d:8d:3e:3f:
         65:cd:d7:0d:3d:ae:ca:57:b0:6d:e5:74:5e:8c:0e:f6:b7:6c:
         c3:5e:92:0e:84:f8:22:2f:56:a9:ea:f9:c3:36:ec:b2:b8:07:
         a1:0c:49:1d:b2:5f:dd:c3:c6:1b:39:31:fc:83:a8:ab:43:fb:
         a4:ce:57:9c:c8:ce:0f:29:a0:18:4a:d3:f5:a8:76:f8:90:a8:
         49:1c:51:43:49:97:c9:12:a1:30:66:68:09:19:cc:16:84:60:
         d7:e6:00:b7:c2:11:07:67:e0:eb:49:86:59:21:4f:9f:81:8a:
         b8:00:c1:40:02:bf:ce:6b:70:54:11:22:a2:43:7a:0f:92:24:
         4e:c2:8e:8d:e6:b8:a0:16:c7:c4:a8:e3:7c:3c:04:29:ef:0f:
         0a:d2:ea:8b:dc:7a:c8:a8:a1:6c:0b:60:e8:98:a5:8b:f1:69:
         7b:e3:af:d0:69:41:2a:3f:51:86:b5:e5:a9:e8:8c:72:6e:98:
         28:21:c0:4b:f7:69:df:1b:04:2d:07:33:ef:08:da:ed:9c:32:
         e8:de:a4:e3:93:85:40:a9:34:f3:04:38:16:f4:0a:70:af:4c:
         63:2d:b7:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRdN16SmRdnznWEgYHrz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjYwMzAxMTIwMDUxWhcNMjYwMzAyMTIwMDUxWjAzMTEwLwYDVQQD
EygxZjc2MDQyODdjZmVkMmFlYzIwYzc5MjA4ZWRhNDkxYTg3ODgyMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LDrpQBTnStdrEsPkGFY22gtYY1T
zK7HcH7NuXUcZRn6QCKGTp+Psiugyct7EDEUkwwGXxIzeIZaNRJDd+pEG82SBe/Z
tIbGUu+vrPQQPYiiWUChseATO1nCHGJeuJRxSyGLIdd9FELNpO6TpWbJw2A0Psyh
m1lS7OcSf1bcq2cpXaZdyCb2Aj/omz7HkseHDe5hByRvFPbHi8+laqVzOHlXZgtD
OXkXea1NmQL9uvXd/fe4lyUTAMnKdyVMSMYKUjdPmELWoJ5lhizjcs7XAEVq9Pe0
N1OE0gMhcwceUQuQzOpXNk4kpsectZPpBkEte1AG/0uSdVrdpYW1UwAiowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB92BCh8/tKuwgx5II7aSRqHiCBZMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvj17h81
Hvbp4aOqg2A5FKvpmr2gdZWsXnTbHyFxcyRdjT4/Zc3XDT2uylewbeV0XowO9rds
w16SDoT4Ii9Wqer5wzbssrgHoQxJHbJf3cPGGzkx/IOoq0P7pM5XnMjODymgGErT
9ah2+JCoSRxRQ0mXyRKhMGZoCRnMFoRg1+YAt8IRB2fg60mGWSFPn4GKuADBQAK/
zmtwVBEiokN6D5IkTsKOjea4oBbHxKjjfDwEKe8PCtLqi9x6yKihbAtg6Jili/Fp
e+Ov0GlBKj9RhrXlqeiMcm6YKCHAS/dp3xsELQcz7wja7Zwy6N6k45OFQKk08wQ4
FvQKcK9MYy23Dw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:22 2026 by rpki-client