Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          fTscMS2y/s7Y/Dnd/OUY3ls3SOChJBQsGERVVLAIpFk=
Subject key identifier:   84:77:08:86:8D:0D:1C:75:70:9A:36:02:E4:78:F4:2B:0B:79:28:BF
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       019CA86A5395135167B31FDDD0C24970B5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          0F52
Signing time:             Sun 01 Mar 2026 08:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:06 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: BvJlSMJ1SJ41f3JCFzsZnr0dGgiJkCEFtwAt4km27Hk=)
                          2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:53:95:13:51:67:b3:1f:dd:d0:c2:49:70:b5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Mar  1 08:01:06 2026 GMT
            Not After : Mar  2 08:01:06 2026 GMT
        Subject: CN=847708868d0d1c75709a3602e478f42b0b7928bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:b3:24:bf:ac:84:b3:8a:b5:8f:dc:7a:17:
                    7c:15:b7:c7:05:50:d3:b6:b9:18:1b:d7:ce:09:fd:
                    ce:62:40:19:0e:cb:6d:a9:de:e3:28:19:e5:db:e9:
                    d0:56:cf:4e:b2:20:4d:4e:ba:18:e3:59:10:e3:3f:
                    49:08:2f:52:f6:84:35:56:ed:fc:88:3e:d9:25:e1:
                    b6:e4:d0:ea:43:e3:03:e5:d1:01:4b:ac:19:45:d6:
                    e1:b6:1a:da:b4:8f:82:6a:ed:67:eb:80:8c:c9:f1:
                    de:d6:59:5e:02:16:4e:73:82:a7:b1:e8:fb:95:ac:
                    4b:c0:ea:e4:37:7b:40:47:19:7d:03:bd:7c:4a:19:
                    7a:5b:87:e1:fa:86:ce:df:6d:d3:23:f4:6d:38:8c:
                    b0:52:ff:1b:3c:f5:63:fc:96:24:fe:47:5c:cc:d3:
                    8a:4a:51:c7:0e:18:f4:d2:41:41:f9:02:ea:0d:97:
                    11:04:4e:d7:96:6f:a2:9b:5d:08:39:82:8d:fc:66:
                    ad:86:1c:27:91:67:1a:aa:ad:3f:c6:23:06:37:aa:
                    49:64:8e:77:6b:60:03:cb:64:3e:b4:62:3a:75:f0:
                    78:f5:1f:23:c9:3a:43:e8:d6:14:b9:94:cf:80:31:
                    47:de:dc:7f:77:fb:fc:a7:55:c0:f7:f9:a1:d9:ce:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:77:08:86:8D:0D:1C:75:70:9A:36:02:E4:78:F4:2B:0B:79:28:BF
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:70:34:32:64:71:8a:c2:29:15:c2:3f:7c:ca:3e:d5:2d:8e:
         e6:b0:85:ea:cd:fb:55:07:fe:b2:c7:55:58:98:a5:4f:fd:36:
         df:ac:95:4c:5d:8b:23:55:d8:d3:a8:18:84:b1:28:1a:57:79:
         66:04:54:b2:0c:5b:ec:5a:da:36:cf:92:77:71:3c:a9:02:15:
         d0:40:84:83:3c:d7:ff:ac:95:cc:6b:91:7b:7c:fa:62:48:0c:
         41:a8:93:a7:61:01:f4:85:37:f8:b5:df:cf:f2:34:e5:82:da:
         df:ee:eb:d6:43:f3:d4:7c:c8:96:f3:8c:40:29:cb:32:0a:39:
         c1:76:13:ae:59:58:54:dc:b7:1b:6d:8e:43:da:60:91:f8:f1:
         25:1f:b8:46:8a:5f:97:d8:e0:f1:cc:b1:cc:fe:70:1d:63:eb:
         bd:2f:4d:09:8d:fc:7c:bc:e5:03:e5:96:4b:29:77:55:65:30:
         36:67:2c:28:8b:ad:13:91:69:3d:95:34:d8:b3:ea:e2:a4:67:
         21:b5:fa:24:3b:99:d4:80:29:cc:b5:db:e0:a4:55:c8:15:91:
         28:a7:8e:c9:26:06:e2:ed:06:86:98:17:b9:7b:a8:52:6f:12:
         79:04:4b:cd:09:9c:9b:28:11:72:14:a5:ab:c5:03:b9:fc:e6:
         62:9c:b2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoalOVE1Fnsx/d0MJJcLXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli
MDM0MjkwHhcNMjYwMzAxMDgwMTA2WhcNMjYwMzAyMDgwMTA2WjAzMTEwLwYDVQQD
Eyg4NDc3MDg4NjhkMGQxYzc1NzA5YTM2MDJlNDc4ZjQyYjBiNzkyOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+zJL+shLOKtY/cehd8FbfHBVDT
trkYG9fOCf3OYkAZDsttqd7jKBnl2+nQVs9OsiBNTroY41kQ4z9JCC9S9oQ1Vu38
iD7ZJeG25NDqQ+MD5dEBS6wZRdbhthratI+Cau1n64CMyfHe1lleAhZOc4Knsej7
laxLwOrkN3tARxl9A718Shl6W4fh+obO323TI/RtOIywUv8bPPVj/JYk/kdczNOK
SlHHDhj00kFB+QLqDZcRBE7Xlm+im10IOYKN/GathhwnkWcaqq0/xiMGN6pJZI53
a2ADy2Q+tGI6dfB49R8jyTpD6NYUuZTPgDFH3tx/d/v8p1XA9/mh2c6nWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR3CIaNDRx1cJo2AuR49CsLeSi/MB8GA1UdIwQY
MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt
MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3
LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnA0MmRx
isIpFcI/fMo+1S2O5rCF6s37VQf+ssdVWJilT/0236yVTF2LI1XY06gYhLEoGld5
ZgRUsgxb7FraNs+Sd3E8qQIV0ECEgzzX/6yVzGuRe3z6YkgMQaiTp2EB9IU3+LXf
z/I05YLa3+7r1kPz1HzIlvOMQCnLMgo5wXYTrllYVNy3G22OQ9pgkfjxJR+4Ropf
l9jg8cyxzP5wHWPrvS9NCY38fLzlA+WWSyl3VWUwNmcsKIutE5FpPZU02LPq4qRn
IbX6JDuZ1IApzLXb4KRVyBWRKKeOySYG4u0GhpgXuXuoUm8SeQRLzQmcmygRchSl
q8UDufzmYpyysg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:06:56 2026 by rpki-client