Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          wb1y7a27TXOhC9Lcw9D1jYfmQ/DAeKLGdG4x0paCcOw=
Subject key identifier:   68:41:17:77:F2:F5:D3:92:64:DE:B9:40:BD:10:C3:CE:AD:16:D5:19
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       019CAB6ADDD99366C5F5EB30126C9C174D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          042F
Signing time:             Sun 01 Mar 2026 22:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:33 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: yz4Ae+aous3ktYPWCceftKbWJiTwVg4sMED7rVrj/64=)
                          2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:dd:d9:93:66:c5:f5:eb:30:12:6c:9c:17:4d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Mar  1 22:00:33 2026 GMT
            Not After : Mar  2 22:00:33 2026 GMT
        Subject: CN=68411777f2f5d39264deb940bd10c3cead16d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:b9:d4:75:a8:93:15:51:8c:b8:3b:6d:e9:
                    2a:9b:50:50:8a:20:f7:04:53:56:a5:61:91:52:72:
                    79:90:00:ab:27:f0:4e:90:3b:74:a3:08:b1:34:eb:
                    44:f6:34:fb:72:4d:fb:8c:af:9e:df:4e:a8:5b:99:
                    e8:71:39:11:f2:df:4c:2a:d8:2f:a2:b4:93:e1:b8:
                    6c:ac:0a:97:94:7f:16:ba:97:ea:25:5d:6b:66:b3:
                    02:93:db:d3:3c:92:e0:ab:80:6d:f8:b1:ae:3d:b4:
                    fb:5e:ad:7d:c2:bc:53:9f:2d:88:6d:e9:e6:76:3e:
                    ef:ab:8a:e8:7a:80:35:3a:bd:95:18:57:83:64:3b:
                    bb:14:59:99:9a:58:e0:75:ac:b3:f2:5c:e2:1e:71:
                    ee:4d:13:0e:d5:ef:75:34:f1:4c:28:b9:3e:61:1f:
                    57:ee:26:18:2c:0d:79:7c:0a:7d:f0:3b:55:55:7e:
                    7a:18:74:3a:a9:1e:88:f4:32:31:0d:81:15:59:0b:
                    a7:6c:85:08:6f:73:80:36:df:be:2d:e0:b5:f4:42:
                    6a:49:8b:d3:61:a1:6c:19:a4:74:15:06:e1:f8:32:
                    db:0e:91:00:36:3c:e1:b8:a3:2e:5c:76:34:53:c3:
                    97:02:9d:27:bf:f8:56:e6:f5:ba:42:02:08:93:3e:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:17:77:F2:F5:D3:92:64:DE:B9:40:BD:10:C3:CE:AD:16:D5:19
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:fe:3b:32:4d:e6:96:ff:30:1d:46:b3:3a:c7:f8:49:f2:
         72:58:0c:88:48:1b:78:21:5c:b0:68:31:a3:13:8a:0a:b2:1c:
         24:21:29:96:64:79:db:36:61:37:9b:68:c3:fc:9e:0e:6d:e5:
         76:94:8e:72:8e:8c:e3:45:82:e3:22:f7:ce:88:46:9f:47:ab:
         b5:a5:47:be:05:7b:09:08:6e:d8:4b:34:90:8b:db:49:15:92:
         99:5f:0e:c8:5c:5b:8c:7a:01:e1:d0:07:14:6e:af:b6:88:30:
         8a:7e:f1:8c:bf:6a:66:64:81:03:d6:4b:fe:2b:dd:85:ee:72:
         d7:20:57:66:6a:6c:ef:c9:53:54:73:78:48:38:2b:9f:da:d8:
         f0:1a:8e:f1:aa:df:52:da:ef:44:e9:89:b3:12:06:64:85:db:
         eb:33:77:e6:bb:74:db:b0:97:d4:44:4e:d9:23:cf:be:fb:bb:
         2d:ef:4c:c7:8a:62:c5:03:5c:5e:d4:9d:e9:31:21:16:70:63:
         f4:d2:b6:bd:4c:de:ea:c6:7f:03:25:9e:03:83:d8:74:34:92:
         43:2f:6a:3f:a7:5a:56:a1:38:8a:13:8c:c1:ec:d5:ce:21:0c:
         6e:a0:40:2b:66:07:01:58:bc:66:72:6e:19:dc:06:d6:17:55:
         13:6c:ab:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrat3Zk2bF9eswEmycF00YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4
ZDZmMjUwHhcNMjYwMzAxMjIwMDMzWhcNMjYwMzAyMjIwMDMzWjAzMTEwLwYDVQQD
Eyg2ODQxMTc3N2YyZjVkMzkyNjRkZWI5NDBiZDEwYzNjZWFkMTZkNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQa51HWokxVRjLg7bekqm1BQiiD3
BFNWpWGRUnJ5kACrJ/BOkDt0owixNOtE9jT7ck37jK+e306oW5nocTkR8t9MKtgv
orST4bhsrAqXlH8WupfqJV1rZrMCk9vTPJLgq4Bt+LGuPbT7Xq19wrxTny2Ibenm
dj7vq4roeoA1Or2VGFeDZDu7FFmZmljgdayz8lziHnHuTRMO1e91NPFMKLk+YR9X
7iYYLA15fAp98DtVVX56GHQ6qR6I9DIxDYEVWQunbIUIb3OANt++LeC19EJqSYvT
YaFsGaR0FQbh+DLbDpEANjzhuKMuXHY0U8OXAp0nv/hW5vW6QgIIkz68OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhBF3fy9dOSZN65QL0Qw86tFtUZMB8GA1UdIwQY
MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt
Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy
LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7b+OzJN
5pb/MB1GszrH+EnyclgMiEgbeCFcsGgxoxOKCrIcJCEplmR52zZhN5tow/yeDm3l
dpSOco6M40WC4yL3zohGn0ertaVHvgV7CQhu2Es0kIvbSRWSmV8OyFxbjHoB4dAH
FG6vtogwin7xjL9qZmSBA9ZL/ivdhe5y1yBXZmps78lTVHN4SDgrn9rY8BqO8arf
UtrvROmJsxIGZIXb6zN35rt027CX1ERO2SPPvvu7Le9Mx4pixQNcXtSd6TEhFnBj
9NK2vUze6sZ/AyWeA4PYdDSSQy9qP6daVqE4ihOMwezVziEMbqBAK2YHAVi8ZnJu
GdwG1hdVE2yrRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:50 2026 by rpki-client