Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          IjEYnkletAq3PfavUwA7snIY5I9SK/T76zwEW1OeH/E=
Subject key identifier:   B9:49:DB:64:9C:7A:01:8A:AA:59:E0:93:28:7E:97:F5:7E:17:6B:03
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019CAB345AE994A4FE1D7DEB86E0764B3621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          17FD
Signing time:             Sun 01 Mar 2026 21:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:00 +0000
Files and hashes:         1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=)
                          2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=)
                          3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=)
                          4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: YgMOjJCXJ1VpQGhjzy7bukfPXcEQMI5LHc6y8WzRnBY=)
                          5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=)
                          6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=)
                          7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=)
                          8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=)
                          9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=)
                          10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=)
                          11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:5a:e9:94:a4:fe:1d:7d:eb:86:e0:76:4b:36:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Mar  1 21:01:00 2026 GMT
            Not After : Mar  2 21:01:00 2026 GMT
        Subject: CN=b949db649c7a018aaa59e093287e97f57e176b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:a0:ed:6b:49:bd:b5:10:9c:01:93:89:88:
                    70:92:f5:29:d7:10:40:46:d3:f8:f1:a9:c5:68:8b:
                    e9:ed:dd:41:9b:03:fd:3e:e5:eb:57:d3:00:d8:96:
                    42:34:57:b0:3f:e1:5a:fd:db:d9:db:b8:fc:82:68:
                    32:92:4b:7f:0c:38:1e:d4:40:7c:f7:52:2d:90:5e:
                    b4:18:5c:47:f8:6f:1f:55:49:13:8d:23:96:bd:4a:
                    f1:c6:65:f7:20:9d:5e:3e:d3:83:e8:03:49:a6:ab:
                    16:69:f7:79:3b:18:08:d9:cb:83:4c:c7:f6:4a:18:
                    5f:91:27:55:e8:e6:99:a9:1f:6b:65:a4:bf:48:81:
                    4b:ac:ce:9f:e7:cd:25:7b:ac:8c:5b:96:8e:f3:9e:
                    c7:a4:f7:64:4f:69:bb:1d:d9:7c:40:fd:39:28:ea:
                    39:ce:b1:78:56:32:9e:55:0f:c0:9f:20:41:d9:62:
                    d1:dd:f2:e6:b9:fc:97:9d:1b:2a:8a:5c:cf:3d:79:
                    cf:81:18:4b:6c:0a:59:bc:53:0d:57:fe:f3:07:51:
                    26:ba:3a:f9:2f:97:f8:15:b7:31:c4:26:83:54:d2:
                    ee:97:3d:17:9e:bf:76:ba:02:2b:3a:78:35:47:ea:
                    ac:47:27:c4:7a:32:ba:16:4c:bf:bb:81:8a:88:07:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:DB:64:9C:7A:01:8A:AA:59:E0:93:28:7E:97:F5:7E:17:6B:03
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:f7:3e:ed:46:b2:c1:53:e4:17:d4:c4:1d:f2:8d:6e:98:
         3f:91:af:8b:91:9f:c8:5b:2e:cb:aa:37:f2:d2:eb:90:79:4e:
         3a:a5:29:f9:c7:bc:17:6d:d2:c3:bc:43:a9:17:3a:cc:ff:9d:
         77:a9:51:85:58:c3:98:17:1b:8b:b2:12:a8:b6:45:7b:28:5a:
         1d:ac:a5:d1:e1:20:be:dc:c8:03:4e:b9:f7:27:0a:00:b6:ad:
         d3:c3:c1:07:bd:69:c1:64:11:55:9b:b7:82:8b:64:ed:2b:46:
         e9:6d:28:f9:af:b9:a3:86:1b:c1:25:cc:cc:f8:c7:45:86:b1:
         c2:85:af:3c:cb:f9:8b:ca:b4:ea:cb:a4:7c:a8:17:dd:b8:c5:
         4b:f4:86:1d:c7:89:50:c5:0b:55:17:66:9e:ee:42:fc:06:c3:
         e1:dd:5d:ad:e6:a0:eb:7c:0f:8f:4a:ea:b6:c6:e0:b3:7d:28:
         79:47:64:b4:fe:d0:a7:d8:52:07:2b:f6:6b:c4:91:98:93:9a:
         0c:23:cd:52:9e:90:c6:27:7b:ed:ea:11:c9:b2:d1:12:81:a9:
         ca:b4:5a:be:d2:ef:1a:b0:6a:1c:8d:af:cf:90:91:db:2f:df:
         e0:15:e8:d8:e4:32:18:34:31:d5:95:24:a4:5a:ad:ed:4f:ae:
         88:7a:c9:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFrplKT+HX3rhuB2SzYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjYwMzAxMjEwMTAwWhcNMjYwMzAyMjEwMTAwWjAzMTEwLwYDVQQD
EyhiOTQ5ZGI2NDljN2EwMThhYWE1OWUwOTMyODdlOTdmNTdlMTc2YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkyg7WtJvbUQnAGTiYhwkvUp1xBA
RtP48anFaIvp7d1BmwP9PuXrV9MA2JZCNFewP+Fa/dvZ27j8gmgykkt/DDge1EB8
91ItkF60GFxH+G8fVUkTjSOWvUrxxmX3IJ1ePtOD6ANJpqsWafd5OxgI2cuDTMf2
ShhfkSdV6OaZqR9rZaS/SIFLrM6f580le6yMW5aO857HpPdkT2m7Hdl8QP05KOo5
zrF4VjKeVQ/AnyBB2WLR3fLmufyXnRsqilzPPXnPgRhLbApZvFMNV/7zB1Emujr5
L5f4FbcxxCaDVNLulz0Xnr92ugIrOng1R+qsRyfEejK6Fky/u4GKiAdA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlJ22ScegGKqlngkyh+l/V+F2sDMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUr3Pu1G
ssFT5BfUxB3yjW6YP5Gvi5GfyFsuy6o38tLrkHlOOqUp+ce8F23Sw7xDqRc6zP+d
d6lRhVjDmBcbi7ISqLZFeyhaHayl0eEgvtzIA0659ycKALat08PBB71pwWQRVZu3
gotk7StG6W0o+a+5o4YbwSXMzPjHRYaxwoWvPMv5i8q06sukfKgX3bjFS/SGHceJ
UMULVRdmnu5C/AbD4d1dreag63wPj0rqtsbgs30oeUdktP7Qp9hSByv2a8SRmJOa
DCPNUp6Qxid77eoRybLREoGpyrRavtLvGrBqHI2vz5CR2y/f4BXo2OQyGDQx1ZUk
pFqt7U+uiHrJsg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:05 2026 by rpki-client