Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File:                     19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier:          T4Q1RicUHAIhwstCF/PfgfZspRGPFgBjPWsQJ6X4U2I=
Subject key identifier:   1D:48:CE:3F:DE:F5:82:4C:F9:BD:E6:C7:0E:8A:BE:C6:15:B1:4F:FE
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       019CAB3490F5E95427BD96AD3AB77FE35BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number:          0983
Signing time:             Sun 01 Mar 2026 21:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:14 +0000
Files and hashes:         1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: /yWprNMXr5CqZZPzzayFcEIQ5xqwfBkXKS5osYMQ0kw=)
                          2: Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa (hash: zmUzBEXw7msOBYr3VGkxq3D1/a+XrxaT8Frd+PDSbhs=)
                          3: b5B5fVg5JQFI93o_bkGxYqBgTcA.roa (hash: KxD2Oza9P8EtKAvqi17xlL2B0ma0zo5mB3KiOChLdyg=)
                          4: oE6r51K-Hn36jEQK9rwYznVcluY.roa (hash: ktgHZDZ0XBs6bzgGz/KVT3sjiszOsWQkRn5c+F0Z0G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:90:f5:e9:54:27:bd:96:ad:3a:b7:7f:e3:5b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Mar  1 21:01:14 2026 GMT
            Not After : Mar  2 21:01:14 2026 GMT
        Subject: CN=1d48ce3fdef5824cf9bde6c70e8abec615b14ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:81:53:67:3a:f1:2d:5d:40:39:c8:15:15:
                    40:e7:cc:74:d4:f7:2e:0e:89:c7:12:51:e6:53:34:
                    94:59:cd:ea:c9:b9:6e:24:ca:0d:11:4e:73:48:75:
                    d3:5d:f4:e4:ee:0d:63:0d:1a:2a:3f:c5:b8:a9:4b:
                    29:08:41:83:64:a7:e4:b0:36:7a:5c:53:00:a9:46:
                    c3:3e:3c:9e:9f:37:bb:79:61:4f:75:09:a8:f3:31:
                    68:e5:ef:96:62:72:81:cd:36:62:72:c0:77:dd:88:
                    56:8f:09:36:37:ca:d0:dc:bf:cd:c2:ec:ef:30:35:
                    d9:9a:d5:75:c1:df:a4:4e:7f:17:39:97:e9:06:83:
                    cb:fc:54:33:67:59:d4:f4:c5:98:79:f7:89:5c:ca:
                    7e:4a:ce:12:af:3c:94:f8:6e:1b:10:64:fa:be:db:
                    77:ac:c8:7a:ec:47:f3:9b:63:91:87:38:f8:58:d1:
                    55:dc:d4:92:67:b9:53:60:2e:4c:c0:2e:90:b7:73:
                    76:c2:74:8e:c1:c5:55:bf:2c:b5:32:c0:89:7c:cf:
                    ed:58:7b:3c:7f:e9:05:79:27:3a:98:34:e3:b7:58:
                    9c:ad:a1:e5:59:5d:f2:2c:ad:2f:e2:3e:8f:10:6a:
                    9b:0f:cb:ff:91:01:25:c3:c8:25:ba:1b:4c:fc:ab:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:CE:3F:DE:F5:82:4C:F9:BD:E6:C7:0E:8A:BE:C6:15:B1:4F:FE
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:05:95:d0:29:69:1b:48:98:84:ac:ff:d3:9c:8e:f2:57:0b:
         f3:c3:bf:a5:65:b8:3d:c7:b1:7e:ac:d9:f7:28:d6:83:75:4f:
         73:49:a6:f6:2e:c8:84:67:f9:f9:4c:ef:d7:f6:07:f9:1f:8f:
         08:70:e0:08:0e:d5:1f:45:6c:fa:12:a2:21:09:3e:d9:92:9f:
         d0:77:d8:d5:31:75:b8:7c:8c:bd:93:db:34:50:cf:15:8c:df:
         95:db:e3:9f:05:8a:f6:d0:06:90:a4:8e:d7:23:aa:13:ce:92:
         df:53:7a:05:9a:39:db:06:1f:68:a0:a6:fc:38:6c:b6:4f:30:
         d8:44:e0:ac:70:e0:fc:6d:7f:5d:74:f8:1d:0d:b7:58:f6:b8:
         6f:03:1b:e8:78:0a:2f:38:4a:b7:5e:67:a7:71:28:00:02:b2:
         af:cf:97:f0:fa:b4:6a:0a:a6:ed:9c:e6:a1:0c:7b:6a:27:55:
         e2:2a:cc:be:b9:7e:46:62:e7:77:65:bf:20:1a:f0:d8:20:44:
         c1:72:68:fc:ae:3a:de:60:95:a7:f3:67:e6:91:a9:cc:2e:a9:
         21:2e:15:a5:47:3a:bd:9e:3d:35:ba:73:82:01:b4:c1:4d:a1:
         f4:9b:90:b8:3e:a5:f5:14:63:1a:d3:b6:23:e2:8c:17:3e:9e:
         43:20:68:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJD16VQnvZatOrd/41v5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm
NmMwYWYwHhcNMjYwMzAxMjEwMTE0WhcNMjYwMzAyMjEwMTE0WjAzMTEwLwYDVQQD
EygxZDQ4Y2UzZmRlZjU4MjRjZjliZGU2YzcwZThhYmVjNjE1YjE0ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDuBU2c68S1dQDnIFRVA58x01Pcu
DonHElHmUzSUWc3qybluJMoNEU5zSHXTXfTk7g1jDRoqP8W4qUspCEGDZKfksDZ6
XFMAqUbDPjyenze7eWFPdQmo8zFo5e+WYnKBzTZicsB33YhWjwk2N8rQ3L/Nwuzv
MDXZmtV1wd+kTn8XOZfpBoPL/FQzZ1nU9MWYefeJXMp+Ss4SrzyU+G4bEGT6vtt3
rMh67Efzm2ORhzj4WNFV3NSSZ7lTYC5MwC6Qt3N2wnSOwcVVvyy1MsCJfM/tWHs8
f+kFeSc6mDTjt1icraHlWV3yLK0v4j6PEGqbD8v/kQElw8gluhtM/KuEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1Izj/e9YJM+b3mxw6KvsYVsU/+MB8GA1UdIwQY
MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It
ODIzMmZhM2U2MjlkLzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk
LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAWV0Clp
G0iYhKz/05yO8lcL88O/pWW4PcexfqzZ9yjWg3VPc0mm9i7IhGf5+Uzv1/YH+R+P
CHDgCA7VH0Vs+hKiIQk+2ZKf0HfY1TF1uHyMvZPbNFDPFYzfldvjnwWK9tAGkKSO
1yOqE86S31N6BZo52wYfaKCm/Dhstk8w2ETgrHDg/G1/XXT4HQ23WPa4bwMb6HgK
LzhKt15np3EoAAKyr8+X8Pq0agqm7ZzmoQx7aidV4irMvrl+RmLnd2W/IBrw2CBE
wXJo/K463mCVp/Nn5pGpzC6pIS4VpUc6vZ49NbpzggG0wU2h9JuQuD6l9RRjGtO2
I+KMFz6eQyBoog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:21 2026 by rpki-client