Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File:                     AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier:          md54qA+/WLYH0adaLqk3nbxaB5D9C1Yo2nP4HiUFTlE=
Subject key identifier:   7B:C8:46:27:A9:27:06:80:D9:1D:58:01:0A:C4:A0:E8:DB:B9:2F:91
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer:       /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial:       019CAD2250C1313355C9344A9264C7122BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number:          0B65
Signing time:             Mon 02 Mar 2026 06:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:33 +0000
Files and hashes:         1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: HTiWi/aUPzEmLY7Uklq/m7+Y+YMliw7htRZ9164TS0U=)
                          2: K6q6EsM1CavuOYyARfp1XcUUEVQ.roa (hash: Xi5EDv6jv4B5PT+szJmGPSgtZ1Lgdt1o2yppeSgzgSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:50:c1:31:33:55:c9:34:4a:92:64:c7:12:2b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
        Validity
            Not Before: Mar  2 06:00:33 2026 GMT
            Not After : Mar  3 06:00:33 2026 GMT
        Subject: CN=7bc84627a9270680d91d58010ac4a0e8dbb92f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:68:d9:de:f1:13:84:9c:80:14:64:1f:88:
                    1d:e1:a2:21:7e:4d:23:53:dd:b0:87:1c:78:81:c1:
                    2f:74:6c:34:a3:78:44:36:e6:5a:b5:3d:23:d2:d0:
                    00:96:ad:bc:74:75:21:72:40:bf:ca:91:dc:9c:8b:
                    0a:71:c4:08:42:ee:ee:3a:e7:ac:bd:2c:1e:ae:eb:
                    f0:24:4e:d4:97:33:e2:79:3e:d7:d6:62:c0:2e:72:
                    1b:58:27:1e:5f:4a:90:bf:14:56:74:12:a3:f7:37:
                    d4:da:7e:32:24:76:53:6d:05:8f:c1:80:4d:a4:e5:
                    34:04:bb:37:33:51:a8:90:63:2b:49:67:54:19:33:
                    4a:e8:64:6c:e7:bd:84:27:b4:df:56:4a:d5:8e:51:
                    10:1e:3b:7c:a4:48:68:fb:4d:0d:19:cd:da:1b:55:
                    e7:7e:8b:7c:e1:55:03:46:e3:2d:02:0e:16:bc:d4:
                    a3:76:62:d7:53:52:e5:5a:00:d9:5c:7c:a6:fe:20:
                    d2:28:9a:8f:e1:c4:5a:0c:4f:4b:cd:16:80:96:d5:
                    89:e0:4c:a4:5d:3a:1b:e5:91:a4:c6:60:32:50:7b:
                    3c:71:03:c5:ee:cb:c8:e5:d9:3d:52:b6:25:3f:ef:
                    b0:6c:d2:a6:83:4a:7a:b2:83:07:49:ce:c2:02:96:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C8:46:27:A9:27:06:80:D9:1D:58:01:0A:C4:A0:E8:DB:B9:2F:91
            X509v3 Authority Key Identifier:
                keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a6:f7:fb:08:f1:63:23:ce:c1:c2:c2:9e:1f:7a:8b:69:db:
         99:b7:46:d6:3f:90:dd:d6:43:f1:a6:b8:22:51:6a:38:40:87:
         76:a6:1f:99:1b:35:4f:da:23:08:20:06:38:e7:6a:09:97:13:
         a2:95:db:f6:9f:22:e2:75:8e:44:55:f5:4f:42:33:b2:0b:a2:
         78:66:c9:18:42:bc:cc:9b:22:01:84:40:32:24:8b:fc:8b:f1:
         03:42:5f:79:3a:07:be:8a:40:ca:e0:af:2d:82:b8:24:3f:df:
         56:a3:e0:b7:88:0c:e3:57:1c:53:87:10:d4:97:79:9f:0c:1a:
         3f:52:ff:dd:bb:14:04:d6:39:6b:aa:2a:cf:5a:54:2b:70:1e:
         1e:cc:90:2c:e8:b7:d6:2f:b5:a2:73:57:b0:2c:62:31:67:76:
         e8:c1:54:3a:03:4c:70:cd:ef:43:3d:22:70:0c:e4:27:fa:6e:
         28:a4:29:89:2f:6b:0d:a7:d6:89:64:82:a4:86:63:01:5e:72:
         de:75:47:29:74:d5:4c:6f:9b:b8:82:3b:87:dd:90:c4:18:96:
         3b:d0:a0:fa:e1:64:dd:c3:38:93:11:b7:91:ec:1d:61:a3:75:
         03:59:b0:3c:7a:88:3b:60:12:70:af:a6:8a:9d:96:a2:fb:1b:
         23:65:9c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlDBMTNVyTRKkmTHEiu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjYwMzAyMDYwMDMzWhcNMjYwMzAzMDYwMDMzWjAzMTEwLwYDVQQD
Eyg3YmM4NDYyN2E5MjcwNjgwZDkxZDU4MDEwYWM0YTBlOGRiYjkyZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnJo2d7xE4ScgBRkH4gd4aIhfk0j
U92whxx4gcEvdGw0o3hENuZatT0j0tAAlq28dHUhckC/ypHcnIsKccQIQu7uOues
vSweruvwJE7UlzPieT7X1mLALnIbWCceX0qQvxRWdBKj9zfU2n4yJHZTbQWPwYBN
pOU0BLs3M1GokGMrSWdUGTNK6GRs572EJ7TfVkrVjlEQHjt8pEho+00NGc3aG1Xn
fot84VUDRuMtAg4WvNSjdmLXU1LlWgDZXHym/iDSKJqP4cRaDE9LzRaAltWJ4Eyk
XTob5ZGkxmAyUHs8cQPF7svI5dk9UrYlP++wbNKmg0p6soMHSc7CApZ8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvIRiepJwaA2R1YAQrEoOjbuS+RMB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIab3+wjx
YyPOwcLCnh96i2nbmbdG1j+Q3dZD8aa4IlFqOECHdqYfmRs1T9ojCCAGOOdqCZcT
opXb9p8i4nWORFX1T0IzsguieGbJGEK8zJsiAYRAMiSL/IvxA0JfeToHvopAyuCv
LYK4JD/fVqPgt4gM41ccU4cQ1Jd5nwwaP1L/3bsUBNY5a6oqz1pUK3AeHsyQLOi3
1i+1onNXsCxiMWd26MFUOgNMcM3vQz0icAzkJ/puKKQpiS9rDafWiWSCpIZjAV5y
3nVHKXTVTG+buII7h92QxBiWO9Cg+uFk3cM4kxG3kewdYaN1A1mwPHqIO2AScK+m
ip2WovsbI2Wcxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:46 2026 by rpki-client