Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          BI9jdituOP+XR3u7slc6ACbpLCNNTAkWHMb1N4YK7K4=
Subject key identifier:   E0:74:12:C0:26:D7:4D:3D:A7:F6:AD:30:6B:72:6D:D1:F8:DC:B1:D4
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       019CAB342C777D6FAB559E63E153D1A79493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 21:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:48 +0000
Files and hashes:         1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: o33zVBqTajeYOF6pcRQJ/IN8yIVCv2yOGvJQZtqkR3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:2c:77:7d:6f:ab:55:9e:63:e1:53:d1:a7:94:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: Mar  1 21:00:48 2026 GMT
            Not After : Mar  2 21:00:48 2026 GMT
        Subject: CN=e07412c026d74d3da7f6ad306b726dd1f8dcb1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:10:7d:14:dc:b6:a9:d3:5b:20:58:15:43:
                    c6:f4:db:5d:8c:1c:d2:d5:f6:de:7c:c9:45:1b:91:
                    d4:39:3f:43:4b:c1:b8:d5:ca:9c:4d:06:9d:a1:e8:
                    44:63:d9:c8:48:d0:33:88:78:a7:21:24:27:82:af:
                    0c:09:4f:c1:5d:19:5f:af:e2:42:7b:d0:b7:f0:38:
                    e7:e3:80:71:f5:cd:4f:3b:e1:f0:dd:6a:c5:61:8b:
                    c6:c4:b2:a9:14:57:97:c8:e3:6a:5c:c3:ee:47:08:
                    68:94:ef:be:72:cd:b3:97:56:fe:ad:c9:7c:fb:ab:
                    ab:42:aa:a9:71:5a:b2:db:fc:e4:e4:d2:57:16:77:
                    80:92:43:07:ea:ea:73:6f:8e:a8:ca:bd:37:30:cc:
                    ed:5d:5d:6f:9b:96:0b:03:03:e3:ea:92:c4:1b:0c:
                    d3:18:57:1f:4a:3e:0d:62:0d:0e:5c:18:57:8f:51:
                    32:7d:47:ec:5f:af:f8:8f:c1:07:65:b9:51:b2:55:
                    82:96:9f:b1:dc:57:b3:b5:1f:f2:06:34:00:d0:da:
                    cb:76:7d:5e:ea:eb:55:de:b4:f7:a3:d6:dc:d0:dc:
                    b2:f3:dd:8b:dd:b2:72:81:d7:d1:13:41:68:70:7b:
                    62:6f:59:96:d2:d6:74:92:22:e1:55:c6:16:18:a8:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:74:12:C0:26:D7:4D:3D:A7:F6:AD:30:6B:72:6D:D1:F8:DC:B1:D4
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:d6:28:b5:db:ba:30:0c:d1:dd:16:85:6a:62:62:9b:eb:
         dc:5f:f2:af:82:40:ef:0b:48:c3:f3:c8:00:a7:3a:ff:7f:cf:
         a3:17:4b:09:01:f5:65:39:80:d2:09:4c:d6:18:b9:ae:20:4a:
         62:c5:c9:96:77:da:53:33:42:da:85:ee:1a:67:3e:d7:b3:b8:
         47:f2:22:3f:e8:34:42:a1:a6:ed:be:d1:34:22:05:44:9a:da:
         19:da:bd:c7:24:50:88:58:75:b8:cd:7a:d8:82:b2:68:a3:4a:
         f2:d8:a4:a0:7e:2a:72:b3:6f:69:77:f9:60:6d:3a:d6:a5:17:
         2b:de:6e:01:27:48:bc:cb:cf:23:80:c8:43:f7:24:6d:12:ce:
         6c:12:f5:36:4f:6d:d5:46:e5:fc:ab:bc:a1:9e:d6:49:2b:e0:
         a8:c5:68:16:3d:d4:d5:db:3a:63:f8:7f:59:18:1f:5c:65:b7:
         2c:95:c8:13:5d:52:64:53:e5:82:9f:24:f4:50:2f:bc:08:f4:
         01:8d:7c:13:62:e8:81:1c:3a:c8:89:93:4f:55:af:02:5b:63:
         ee:53:e8:fe:d4:42:74:33:ab:94:81:fc:8e:da:79:0a:0d:73:
         ec:f7:f1:e9:8f:42:ea:ba:63:44:bc:a9:05:c6:85:51:02:3a:
         07:d3:9b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCx3fW+rVZ5j4VPRp5STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3
Nzk3YWYwHhcNMjYwMzAxMjEwMDQ4WhcNMjYwMzAyMjEwMDQ4WjAzMTEwLwYDVQQD
EyhlMDc0MTJjMDI2ZDc0ZDNkYTdmNmFkMzA2YjcyNmRkMWY4ZGNiMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqUQfRTctqnTWyBYFUPG9NtdjBzS
1fbefMlFG5HUOT9DS8G41cqcTQadoehEY9nISNAziHinISQngq8MCU/BXRlfr+JC
e9C38Djn44Bx9c1PO+Hw3WrFYYvGxLKpFFeXyONqXMPuRwholO++cs2zl1b+rcl8
+6urQqqpcVqy2/zk5NJXFneAkkMH6upzb46oyr03MMztXV1vm5YLAwPj6pLEGwzT
GFcfSj4NYg0OXBhXj1EyfUfsX6/4j8EHZblRslWClp+x3FeztR/yBjQA0NrLdn1e
6utV3rT3o9bc0Nyy892L3bJygdfRE0FocHtib1mW0tZ0kiLhVcYWGKiKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB0EsAm1009p/atMGtybdH43LHUMB8GA1UdIwQY
MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt
OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj
LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/XWKLXb
ujAM0d0WhWpiYpvr3F/yr4JA7wtIw/PIAKc6/3/PoxdLCQH1ZTmA0glM1hi5riBK
YsXJlnfaUzNC2oXuGmc+17O4R/IiP+g0QqGm7b7RNCIFRJraGdq9xyRQiFh1uM16
2IKyaKNK8tikoH4qcrNvaXf5YG061qUXK95uASdIvMvPI4DIQ/ckbRLObBL1Nk9t
1Ubl/Ku8oZ7WSSvgqMVoFj3U1ds6Y/h/WRgfXGW3LJXIE11SZFPlgp8k9FAvvAj0
AY18E2LogRw6yImTT1WvAltj7lPo/tRCdDOrlIH8jtp5Cg1z7Pfx6Y9C6rpjRLyp
BcaFUQI6B9ObVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:18 2026 by rpki-client