Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          D/pIv40PFBOVHX3BIXvV82HcTpmj/EwWrCWEah+lpjk=
Subject key identifier:   D5:39:4B:D5:98:65:80:EB:A5:7B:DD:3B:9D:E8:04:EE:7D:00:E4:05
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019CAAFD4DDAD84F019ECBE96A6AC6DB3DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1856
Signing time:             Sun 01 Mar 2026 20:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:53 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: 08b4EA/4erG0gJfDtzTBD4Q2CZ67CtLe55Dlbi0N1FU=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:4d:da:d8:4f:01:9e:cb:e9:6a:6a:c6:db:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Mar  1 20:00:53 2026 GMT
            Not After : Mar  2 20:00:53 2026 GMT
        Subject: CN=d5394bd5986580eba57bdd3b9de804ee7d00e405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:97:1f:16:84:8e:f7:4d:2a:1e:f6:42:df:e3:
                    78:88:5a:f8:1c:09:67:d1:f1:29:06:78:ec:ee:5c:
                    c0:92:a3:fd:05:b2:d2:a0:21:40:9c:29:cc:d9:57:
                    b3:b7:c2:f0:96:52:60:60:3a:66:38:e9:77:9a:96:
                    72:d4:36:77:87:1d:48:a5:49:46:43:76:c3:12:9f:
                    5e:16:39:b8:a7:bf:31:cf:24:1b:eb:99:84:1c:aa:
                    84:31:5a:18:fe:42:5c:7c:0e:8b:9f:b2:97:0f:b3:
                    ed:bc:47:5d:ab:a5:d2:90:ad:d9:72:02:ff:b7:bd:
                    b4:a9:42:2f:b2:a8:58:43:32:55:5a:44:68:21:c3:
                    a3:90:ee:4e:98:59:7f:c1:4d:ac:0c:df:fb:57:e2:
                    5b:52:7c:c2:c1:98:b2:63:9a:46:3a:af:a3:a9:e3:
                    9a:f4:0b:6f:c2:11:2a:7a:1a:43:da:b6:b3:fc:72:
                    60:e9:c8:0d:20:ed:74:df:1e:6f:1e:93:4c:7e:5b:
                    12:d8:1f:c1:8d:97:cf:6f:26:c3:ab:46:50:c1:1f:
                    c5:9a:78:08:9c:d3:34:8a:86:7a:41:ba:fa:72:cd:
                    01:e6:63:3a:34:75:e7:e2:b7:ec:d7:49:ec:6c:d2:
                    2d:43:64:c3:1a:3c:e8:65:06:af:04:aa:b2:46:76:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:39:4B:D5:98:65:80:EB:A5:7B:DD:3B:9D:E8:04:EE:7D:00:E4:05
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:7e:51:15:33:8c:93:5a:2a:85:98:73:45:2b:c4:f8:12:
         4a:42:c4:1b:a8:b6:f3:f2:e9:8f:58:84:67:e8:8c:8d:fd:7e:
         ac:4e:a3:6f:28:fe:4e:8e:05:31:e3:93:10:01:d7:5c:54:63:
         f3:25:e4:0c:3b:27:bf:97:24:57:cb:7d:6d:82:c4:88:7e:eb:
         33:6c:29:f0:50:b9:39:17:3d:3f:19:90:87:39:15:f8:d2:64:
         79:c0:f5:31:d0:6c:36:92:7c:9d:ba:09:77:87:72:7c:bc:9d:
         d3:cd:c6:0c:51:17:d4:6e:c4:b8:47:c8:55:f7:a3:27:b8:2f:
         c6:cf:eb:4e:2b:ee:04:8b:0b:1b:51:d1:4d:62:3c:93:fa:17:
         a2:91:b3:e1:d3:ec:0c:af:d3:9a:5e:5d:bb:be:9f:df:fa:31:
         ca:ff:db:dc:77:dd:56:fe:31:dc:8d:3f:3b:67:76:67:39:db:
         8a:b9:c5:6d:55:49:45:cb:f9:d0:1b:bb:78:85:cf:19:79:63:
         ca:c1:85:1b:ad:41:62:f7:f7:ce:6f:88:e8:77:dd:9b:bf:80:
         1d:09:51:d8:e8:a4:17:6f:de:ba:bf:f4:32:55:38:14:fc:09:
         37:86:74:6a:1a:ba:74:db:f2:f6:94:52:eb:08:3a:a7:3a:8d:
         75:5a:bf:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/U3a2E8BnsvpamrG2z28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjYwMzAxMjAwMDUzWhcNMjYwMzAyMjAwMDUzWjAzMTEwLwYDVQQD
EyhkNTM5NGJkNTk4NjU4MGViYTU3YmRkM2I5ZGU4MDRlZTdkMDBlNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZcfFoSO900qHvZC3+N4iFr4HAln
0fEpBnjs7lzAkqP9BbLSoCFAnCnM2Vezt8LwllJgYDpmOOl3mpZy1DZ3hx1IpUlG
Q3bDEp9eFjm4p78xzyQb65mEHKqEMVoY/kJcfA6Ln7KXD7PtvEddq6XSkK3ZcgL/
t720qUIvsqhYQzJVWkRoIcOjkO5OmFl/wU2sDN/7V+JbUnzCwZiyY5pGOq+jqeOa
9AtvwhEqehpD2raz/HJg6cgNIO103x5vHpNMflsS2B/BjZfPbybDq0ZQwR/FmngI
nNM0ioZ6Qbr6cs0B5mM6NHXn4rfs10nsbNItQ2TDGjzoZQavBKqyRnYulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU5S9WYZYDrpXvdO53oBO59AOQFMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1
LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfl+URUz
jJNaKoWYc0UrxPgSSkLEG6i28/Lpj1iEZ+iMjf1+rE6jbyj+To4FMeOTEAHXXFRj
8yXkDDsnv5ckV8t9bYLEiH7rM2wp8FC5ORc9PxmQhzkV+NJkecD1MdBsNpJ8nboJ
d4dyfLyd083GDFEX1G7EuEfIVfejJ7gvxs/rTivuBIsLG1HRTWI8k/oXopGz4dPs
DK/Tml5du76f3/oxyv/b3HfdVv4x3I0/O2d2ZznbirnFbVVJRcv50Bu7eIXPGXlj
ysGFG61BYvf3zm+I6Hfdm7+AHQlR2OikF2/eur/0MlU4FPwJN4Z0ahq6dNvy9pRS
6wg6pzqNdVq/HA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:29 2026 by rpki-client