Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File:                     ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier:          M4pygF8zqKlGf9O4Gh29p3ffXsauDKyID1FjK98+oyo=
Subject key identifier:   7C:74:7A:12:83:96:BA:C5:EA:E5:A0:18:A2:81:D9:A2:B8:78:D3:59
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer:       /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial:       019CA9EB4E6B3F6AD222E5D1BD3D8165B226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number:          0785
Signing time:             Sun 01 Mar 2026 15:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:36 +0000
Files and hashes:         1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
                          2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
                          3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: xAaEQPj87zqbkJS9CubSVP2gcRQa2NkujypFlMkt4XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:4e:6b:3f:6a:d2:22:e5:d1:bd:3d:81:65:b2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
        Validity
            Not Before: Mar  1 15:01:36 2026 GMT
            Not After : Mar  2 15:01:36 2026 GMT
        Subject: CN=7c747a128396bac5eae5a018a281d9a2b878d359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:6a:bf:91:80:37:c7:b2:3e:48:46:c8:5f:
                    f1:9b:61:27:9f:26:0d:6e:ad:f4:54:a3:28:4f:54:
                    52:f7:a2:c8:e3:54:e9:d7:68:ad:2d:5a:08:78:fe:
                    7a:66:57:a8:a8:1e:3d:2c:ca:1a:f9:9e:02:55:99:
                    25:4e:b9:9c:72:ee:65:a7:6b:6f:57:b9:7c:36:0c:
                    73:4e:5f:78:13:e5:c2:a5:98:7d:6f:4a:cd:3b:a2:
                    c9:89:f5:a1:82:2c:92:23:40:2e:9d:24:a4:c0:ac:
                    50:a3:28:b4:09:8f:fe:02:b2:f7:ff:fd:01:bb:56:
                    01:47:2a:e8:8a:db:b2:a4:be:7f:00:bf:8a:43:93:
                    6f:b7:88:c9:9c:54:d3:be:01:d2:41:7e:c4:02:7d:
                    29:bc:a8:1a:47:8c:2f:57:04:1a:f7:5b:63:a3:4f:
                    52:2a:26:6b:d7:73:01:83:1b:f2:89:ea:d8:cf:69:
                    51:fe:d6:a2:97:c7:04:3f:08:f0:ae:23:f2:b2:cb:
                    d1:aa:e8:af:67:a5:7a:bf:43:55:92:33:99:d0:c6:
                    92:91:65:e2:f3:f7:53:33:72:6b:23:94:33:de:2e:
                    5e:4d:14:3d:73:2b:af:76:44:9b:15:15:83:e5:79:
                    78:93:fb:15:7e:b0:13:c9:b2:5b:79:a7:98:ce:ee:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:7A:12:83:96:BA:C5:EA:E5:A0:18:A2:81:D9:A2:B8:78:D3:59
            X509v3 Authority Key Identifier:
                keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:95:c5:c8:22:c6:62:24:63:4c:16:c3:4a:01:93:4b:1b:28:
         a0:ab:31:a7:e5:aa:83:b3:f0:94:11:a9:d5:41:ca:ec:4e:22:
         2d:33:e4:da:a3:d1:81:2c:28:ab:5e:aa:31:91:6c:b1:c3:03:
         d4:eb:22:30:32:71:c3:db:1d:07:07:f2:46:01:3f:c4:12:8c:
         9f:42:ae:95:e4:ca:f9:b8:1a:04:70:56:21:b5:7b:51:f3:89:
         cc:25:9e:d7:ef:9e:01:0c:e2:bd:33:8f:4e:fc:fc:bc:7b:0b:
         77:1d:fd:b3:80:99:d2:c5:d6:65:9b:0e:8b:db:4b:9a:1d:5c:
         03:25:8f:9c:9a:0b:d6:77:fe:4b:d0:e9:db:62:28:d1:8f:bc:
         f2:85:4b:1b:4b:17:81:5f:fd:1c:8c:ec:25:eb:f1:68:0f:91:
         4a:0b:e5:11:f0:90:32:65:63:ce:51:8c:60:1f:e7:c1:e0:5d:
         95:8b:30:6d:b3:26:d8:27:55:34:d2:fc:4b:8b:41:ac:13:16:
         f4:46:0b:da:f9:eb:1d:e0:dc:8e:c6:5c:03:ba:43:eb:11:f0:
         2a:56:e2:a2:5a:00:0a:5d:d3:d0:62:1c:2a:8e:d2:7f:6d:06:
         4f:ca:ba:2e:46:f1:97:8f:4b:87:40:95:79:bd:3b:3c:ed:81:
         d0:c3:f9:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp605rP2rSIuXRvT2BZbImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4
NWVlYTcwHhcNMjYwMzAxMTUwMTM2WhcNMjYwMzAyMTUwMTM2WjAzMTEwLwYDVQQD
Eyg3Yzc0N2ExMjgzOTZiYWM1ZWFlNWEwMThhMjgxZDlhMmI4NzhkMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZqv5GAN8eyPkhGyF/xm2EnnyYN
bq30VKMoT1RS96LI41Tp12itLVoIeP56ZleoqB49LMoa+Z4CVZklTrmccu5lp2tv
V7l8NgxzTl94E+XCpZh9b0rNO6LJifWhgiySI0AunSSkwKxQoyi0CY/+ArL3//0B
u1YBRyroituypL5/AL+KQ5Nvt4jJnFTTvgHSQX7EAn0pvKgaR4wvVwQa91tjo09S
KiZr13MBgxvyierYz2lR/tail8cEPwjwriPyssvRquivZ6V6v0NVkjOZ0MaSkWXi
8/dTM3JrI5Qz3i5eTRQ9cyuvdkSbFRWD5Xl4k/sVfrATybJbeaeYzu5WNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx0ehKDlrrF6uWgGKKB2aK4eNNZMB8GA1UdIwQY
MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJXFyCLG
YiRjTBbDSgGTSxsooKsxp+Wqg7PwlBGp1UHK7E4iLTPk2qPRgSwoq16qMZFsscMD
1OsiMDJxw9sdBwfyRgE/xBKMn0KuleTK+bgaBHBWIbV7UfOJzCWe1++eAQzivTOP
Tvz8vHsLdx39s4CZ0sXWZZsOi9tLmh1cAyWPnJoL1nf+S9Dp22Io0Y+88oVLG0sX
gV/9HIzsJevxaA+RSgvlEfCQMmVjzlGMYB/nweBdlYswbbMm2CdVNNL8S4tBrBMW
9EYL2vnrHeDcjsZcA7pD6xHwKlbioloACl3T0GIcKo7Sf20GT8q6Lkbxl49Lh0CV
eb07PO2B0MP5lQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:35 2026 by rpki-client