Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File:                     tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier:          sU+aDpjYWVudk2yzaUgdjvHTUwziEbQ8owcr1g+SRSE=
Subject key identifier:   F8:F9:22:5F:98:37:B3:FB:5E:FB:0C:B8:A5:2E:23:DD:54:47:77:76
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer:       /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial:       019CAAFD8C65FD0E7D398C1F4CE01B906946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number:          05C1
Signing time:             Sun 01 Mar 2026 20:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:09 +0000
Files and hashes:         1: KtKgrqLsZRkrGS4es-oGTIqwVlw.roa (hash: UPj/hJOC1lHG60eBQqDh4t+3G4IYr9OwL7yonWIDfi0=)
                          2: aawE-pz8srrT5MJYzHNLBXRsTIo.roa (hash: q6aO+UEvoLi+uji805zaER2sJ0t42VLw5m+o0+yFdgw=)
                          3: qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa (hash: bK/ZSD9IopAichABUi1qk65QlYFISbXCl3LiF+vq1SQ=)
                          4: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: fC6Fo6sKAQ4qxzka2fyGqHZrK4Tlitav9JVzduX5Kg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:8c:65:fd:0e:7d:39:8c:1f:4c:e0:1b:90:69:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
        Validity
            Not Before: Mar  1 20:01:09 2026 GMT
            Not After : Mar  2 20:01:09 2026 GMT
        Subject: CN=f8f9225f9837b3fb5efb0cb8a52e23dd54477776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:09:37:1d:13:57:10:ba:73:7a:e1:0a:80:
                    90:0d:3f:f4:7b:ee:41:53:be:5e:02:b7:cc:21:aa:
                    f4:c3:80:0f:3d:53:65:9e:12:5b:73:3d:50:ca:d9:
                    80:c5:0a:a8:3e:5b:59:ac:29:34:b3:70:5c:1b:94:
                    15:9e:a6:08:c2:09:26:2d:a6:b8:07:0e:42:d7:67:
                    fb:20:6f:2d:11:5f:20:08:b7:19:75:78:fd:6b:52:
                    c3:9e:c2:37:86:1b:d1:3e:cc:75:af:f1:26:0e:7b:
                    ae:63:3e:21:1f:8f:94:15:41:ba:c8:fa:6a:f8:1c:
                    7c:6e:4c:70:76:16:ae:d3:98:da:9a:12:25:9e:18:
                    57:a2:e2:9c:ac:21:da:aa:c0:93:28:32:25:0a:8a:
                    bf:c6:4e:e3:d6:e3:3f:10:85:98:e4:b3:55:f9:94:
                    c2:79:ef:c3:e1:fe:0c:38:3e:b5:ec:ac:e1:fb:b7:
                    b6:2f:86:75:e2:10:b6:1d:6d:d9:a3:b2:e7:2c:60:
                    48:12:5c:f7:47:e2:b9:6c:63:83:06:cd:74:c4:ef:
                    2a:93:29:66:eb:a7:8a:a4:34:35:81:de:b8:55:a6:
                    94:5e:f8:d5:4e:22:b6:44:0c:46:50:ac:1a:a6:49:
                    1a:69:59:2a:31:07:98:e0:5e:9b:b2:67:ad:9d:db:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:22:5F:98:37:B3:FB:5E:FB:0C:B8:A5:2E:23:DD:54:47:77:76
            X509v3 Authority Key Identifier:
                keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:b4:2e:53:2b:0d:ae:e4:c0:68:56:3c:73:99:37:8a:dd:
         f8:86:80:28:74:d2:60:06:40:8d:bd:36:18:3e:a8:47:78:59:
         24:18:35:e4:f3:55:ce:1b:72:6b:33:1b:99:6e:42:b9:bc:eb:
         fa:7e:4a:b7:28:5d:1f:aa:a8:9f:68:0b:dc:d7:81:39:a4:e3:
         4f:15:07:0f:e7:f7:aa:7c:5f:1a:9a:3f:df:99:f2:90:34:c9:
         0b:40:b0:1b:a0:cf:ec:d7:ab:66:82:0f:b0:e2:25:a1:16:bf:
         09:6f:8f:ef:ec:4c:86:cd:cc:4e:91:b7:30:fa:db:8c:7a:76:
         20:fe:b2:9e:9d:73:8d:5d:97:59:3f:a7:96:c8:bd:8f:39:4f:
         f9:20:01:cd:55:6e:f2:60:12:99:db:9f:05:85:14:f4:09:94:
         69:58:4d:42:96:67:a0:f7:a6:7b:3e:f6:2c:45:49:cc:ad:df:
         ea:57:3b:e1:67:74:06:7d:2d:ba:52:95:ec:86:fc:82:95:b9:
         c9:7f:8d:9e:72:12:07:de:e2:01:90:f5:bb:09:ba:76:11:ee:
         e2:67:96:4d:3d:13:dc:56:31:d7:f7:26:50:e3:96:5a:6d:f7:
         d1:a3:74:f1:3e:67:fb:5a:5d:a1:bc:17:ef:3f:e5:24:d2:1a:
         4f:cc:c8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Yxl/Q59OYwfTOAbkGlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3
ZjAxOGMwHhcNMjYwMzAxMjAwMTA5WhcNMjYwMzAyMjAwMTA5WjAzMTEwLwYDVQQD
EyhmOGY5MjI1Zjk4MzdiM2ZiNWVmYjBjYjhhNTJlMjNkZDU0NDc3Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32EJNx0TVxC6c3rhCoCQDT/0e+5B
U75eArfMIar0w4APPVNlnhJbcz1QytmAxQqoPltZrCk0s3BcG5QVnqYIwgkmLaa4
Bw5C12f7IG8tEV8gCLcZdXj9a1LDnsI3hhvRPsx1r/EmDnuuYz4hH4+UFUG6yPpq
+Bx8bkxwdhau05jamhIlnhhXouKcrCHaqsCTKDIlCoq/xk7j1uM/EIWY5LNV+ZTC
ee/D4f4MOD617Kzh+7e2L4Z14hC2HW3Zo7LnLGBIElz3R+K5bGODBs10xO8qkylm
66eKpDQ1gd64VaaUXvjVTiK2RAxGUKwapkkaaVkqMQeY4F6bsmetndsssQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj5Il+YN7P7XvsMuKUuI91UR3d2MB8GA1UdIwQY
MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt
YWY2MGZkNWYwNmIxLzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx
LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHq0LlMr
Da7kwGhWPHOZN4rd+IaAKHTSYAZAjb02GD6oR3hZJBg15PNVzhtyazMbmW5Cubzr
+n5KtyhdH6qon2gL3NeBOaTjTxUHD+f3qnxfGpo/35nykDTJC0CwG6DP7NerZoIP
sOIloRa/CW+P7+xMhs3MTpG3MPrbjHp2IP6ynp1zjV2XWT+nlsi9jzlP+SABzVVu
8mASmdufBYUU9AmUaVhNQpZnoPemez72LEVJzK3f6lc74Wd0Bn0tulKV7Ib8gpW5
yX+NnnISB97iAZD1uwm6dhHu4meWTT0T3FYx1/cmUOOWWm330aN08T5n+1pdobwX
7z/lJNIaT8zI2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:39 2026 by rpki-client