Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          avZizlGL4Z37rRVi2p2lrXHfPbGV7D+vZOU+i/YTnZo=
Subject key identifier:   81:D6:DD:E3:3F:A4:D5:BB:79:2B:79:8D:FF:B3:95:94:E6:B0:A5:ED
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       019CAB34397CD1297BEA324068222E758F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0FA6
Signing time:             Sun 01 Mar 2026 21:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:52 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: MxmENOSlowwassa1hYsNpAlhNREgHgB7514K1iJ0yok=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:39:7c:d1:29:7b:ea:32:40:68:22:2e:75:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Mar  1 21:00:52 2026 GMT
            Not After : Mar  2 21:00:52 2026 GMT
        Subject: CN=81d6dde33fa4d5bb792b798dffb39594e6b0a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:28:da:3c:02:24:6d:70:3c:36:12:d8:b4:
                    41:09:5a:3f:fa:28:b7:71:01:45:d3:1c:16:64:d3:
                    8a:9d:7d:a1:8a:3c:ac:e0:ed:c3:98:81:fb:47:e9:
                    eb:4c:4f:0c:47:68:95:06:db:3c:cb:29:f4:04:78:
                    f0:7b:a4:7b:38:06:04:c7:92:53:d8:b4:bb:83:26:
                    b1:8f:2e:a0:6f:62:03:3b:0d:41:05:da:9a:78:f4:
                    7b:4e:e7:e7:73:f2:d5:32:88:06:59:61:7d:31:62:
                    c9:a1:94:a4:7f:b9:0c:1c:a5:08:64:2e:bf:94:40:
                    f3:d4:3d:9c:b5:d9:61:d4:b9:c6:d4:a9:05:1e:6a:
                    c9:e2:26:e1:a0:cf:f2:a6:d4:bb:60:6b:0e:e2:88:
                    11:76:a6:5e:10:38:7e:d8:0e:e0:01:4d:12:13:ff:
                    32:bc:a7:fd:fa:69:ca:9b:91:b6:35:11:4b:af:74:
                    85:29:ca:4c:69:61:4e:5c:68:ed:df:06:86:9a:77:
                    85:f1:35:cb:f6:92:94:af:73:a5:25:e6:7e:84:47:
                    0a:6b:c7:28:6f:b9:a0:03:63:25:4d:c1:32:0a:15:
                    cf:f9:08:d4:21:64:67:bb:23:3e:27:12:55:a6:fa:
                    ee:7d:ff:f6:f1:e1:5b:25:86:7d:1c:e6:06:8b:e3:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:DD:E3:3F:A4:D5:BB:79:2B:79:8D:FF:B3:95:94:E6:B0:A5:ED
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:34:a6:b2:88:7c:28:27:39:aa:e5:93:2a:37:2c:c6:0e:54:
         b0:40:c2:d2:16:33:a8:03:a3:76:b4:8d:05:8d:1b:ca:f6:c2:
         e6:4a:33:1b:2c:ce:13:04:89:52:e2:9b:4e:02:b0:48:90:4d:
         4a:d2:0f:dd:3f:b8:68:e8:86:4f:7e:68:f8:bc:b9:1e:ad:b0:
         67:5d:b0:3b:cc:12:8d:46:8b:fe:b8:ec:4f:72:96:8a:97:61:
         39:b4:82:85:31:2d:01:c4:00:7a:a6:6b:f1:5a:b6:ec:8c:26:
         9b:1b:ee:90:1b:fa:17:75:e3:d9:32:45:d7:3e:da:af:fc:c2:
         13:79:b3:68:28:59:e7:61:44:51:12:cc:8a:ec:b1:07:4c:d6:
         a6:3c:d6:b8:b3:87:6a:4b:df:6d:89:0b:89:00:c0:a8:9b:80:
         a1:6d:ba:f9:8c:24:80:7f:16:8a:86:1b:67:d6:41:66:4d:91:
         2b:b0:62:5b:e7:aa:35:0e:67:c7:66:37:00:d5:23:4a:3f:7d:
         62:9a:25:ba:d9:c0:87:fe:53:22:94:2b:0f:e6:63:13:96:39:
         54:79:be:95:0f:fb:4f:12:fb:b1:3e:64:9a:04:8a:8c:48:96:
         82:d5:8f:21:5b:34:51:d0:22:82:ef:42:a2:43:3d:5f:bf:fc:
         6d:d3:74:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDl80Sl76jJAaCIudY8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjYwMzAxMjEwMDUyWhcNMjYwMzAyMjEwMDUyWjAzMTEwLwYDVQQD
Eyg4MWQ2ZGRlMzNmYTRkNWJiNzkyYjc5OGRmZmIzOTU5NGU2YjBhNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd0o2jwCJG1wPDYS2LRBCVo/+ii3
cQFF0xwWZNOKnX2hijys4O3DmIH7R+nrTE8MR2iVBts8yyn0BHjwe6R7OAYEx5JT
2LS7gyaxjy6gb2IDOw1BBdqaePR7Tufnc/LVMogGWWF9MWLJoZSkf7kMHKUIZC6/
lEDz1D2ctdlh1LnG1KkFHmrJ4ibhoM/yptS7YGsO4ogRdqZeEDh+2A7gAU0SE/8y
vKf9+mnKm5G2NRFLr3SFKcpMaWFOXGjt3waGmneF8TXL9pKUr3OlJeZ+hEcKa8co
b7mgA2MlTcEyChXP+QjUIWRnuyM+JxJVpvruff/28eFbJYZ9HOYGi+N06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHW3eM/pNW7eSt5jf+zlZTmsKXtMB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzSmsoh8
KCc5quWTKjcsxg5UsEDC0hYzqAOjdrSNBY0byvbC5kozGyzOEwSJUuKbTgKwSJBN
StIP3T+4aOiGT35o+Ly5Hq2wZ12wO8wSjUaL/rjsT3KWipdhObSChTEtAcQAeqZr
8Vq27IwmmxvukBv6F3Xj2TJF1z7ar/zCE3mzaChZ52FEURLMiuyxB0zWpjzWuLOH
akvfbYkLiQDAqJuAoW26+YwkgH8WioYbZ9ZBZk2RK7BiW+eqNQ5nx2Y3ANUjSj99
YpolutnAh/5TIpQrD+ZjE5Y5VHm+lQ/7TxL7sT5kmgSKjEiWgtWPIVs0UdAigu9C
okM9X7/8bdN0KA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:41 2026 by rpki-client