Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File:                     t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier:          ZdPEy9bIThL8l2iyeSxkCafTHACGMj0vOXWugbddrlY=
Subject key identifier:   14:51:90:4D:0C:16:40:C1:8B:46:5D:B7:C4:EC:F2:78:91:BA:AC:92
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer:       /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial:       019CAB6B18EF58C69BFFF5FAE61F63E0878D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 22:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:48 +0000
Files and hashes:         1: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (hash: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4=)
                          2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: tNhbwKJWrufMODzMrr8ioE3CrzWNy63POCRFcKqxlWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:18:ef:58:c6:9b:ff:f5:fa:e6:1f:63:e0:87:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
        Validity
            Not Before: Mar  1 22:00:48 2026 GMT
            Not After : Mar  2 22:00:48 2026 GMT
        Subject: CN=1451904d0c1640c18b465db7c4ecf27891baac92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:18:ee:ee:98:51:26:57:f4:a4:91:2f:eb:
                    08:cc:37:e9:61:83:fc:2c:90:b5:54:ef:99:45:52:
                    86:aa:8b:87:7b:c9:6c:83:22:2c:ef:3d:81:c9:cd:
                    0d:08:07:98:19:bd:0b:a2:60:8b:86:81:70:2c:45:
                    a8:01:86:f8:04:a1:75:d1:21:a3:da:0b:29:dd:48:
                    27:51:4a:58:20:7c:9c:dd:4e:23:a3:26:64:52:ad:
                    50:d8:79:ba:19:15:56:fb:ad:29:93:e2:54:0f:2d:
                    5d:96:7b:15:01:a0:cb:f6:15:95:4f:93:95:49:1a:
                    08:eb:a0:e2:34:e9:11:a6:ae:4c:49:1a:6b:ec:7c:
                    fd:9c:54:9f:68:60:1d:58:e6:fd:09:ff:b9:5f:e5:
                    25:a7:4d:e9:85:3f:38:91:ed:da:06:82:4a:d6:e1:
                    a5:63:4a:44:45:de:e4:66:6d:8e:57:8e:e8:76:84:
                    d9:b0:16:78:b2:f7:8b:99:58:5e:e7:fc:91:37:2b:
                    41:a3:4d:9e:ed:e8:e3:03:20:8d:21:29:65:00:21:
                    db:87:53:62:d5:f5:29:31:54:f6:cd:38:4a:08:b9:
                    28:d0:b7:e5:12:b5:dc:ac:af:13:9a:78:09:94:b4:
                    19:ec:c2:3b:14:8a:dd:7f:04:34:29:c2:09:33:d8:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:90:4D:0C:16:40:C1:8B:46:5D:B7:C4:EC:F2:78:91:BA:AC:92
            X509v3 Authority Key Identifier:
                keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:db:43:73:7c:ae:a1:b7:99:13:1c:d8:a6:9d:96:37:c8:af:
         56:02:c1:83:33:e4:80:08:b0:8e:16:4f:d6:98:55:eb:28:37:
         a7:a8:83:08:c8:fc:d2:47:ad:75:09:19:35:1f:0b:06:d4:64:
         6e:05:04:17:8e:cb:91:a3:45:a9:d3:25:44:a7:08:37:be:77:
         3c:6b:70:94:2e:9c:60:66:79:8f:a8:09:e5:22:e6:5d:e3:f7:
         a9:dd:91:98:91:e0:9a:3f:ed:b7:a8:db:ce:ad:91:6a:cd:cb:
         29:e5:4d:55:cd:dc:ba:dd:59:cb:5e:8e:92:2f:9f:a7:88:8b:
         8c:b8:f0:ab:69:93:ae:8e:75:9d:48:58:df:14:0e:ba:9b:64:
         9f:29:81:bc:f2:43:ab:93:66:87:6e:42:47:1b:49:42:95:e0:
         74:9c:28:fe:33:81:21:3a:45:89:77:a6:d6:18:1f:47:0d:9c:
         93:1d:0a:ef:07:2a:cc:c1:33:48:dc:36:30:66:56:71:c6:84:
         80:4d:65:06:d2:52:c0:73:40:2e:2a:2f:b9:1f:64:61:a0:51:
         5e:a5:2b:7f:fc:46:10:e9:c9:6a:45:a5:be:0a:27:84:0e:d1:
         d7:8d:a6:e2:0e:cb:32:29:ab:7a:85:77:2b:de:25:5b:cb:71:
         bc:57:19:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxjvWMab//X65h9j4IeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh
NzBiOWQwHhcNMjYwMzAxMjIwMDQ4WhcNMjYwMzAyMjIwMDQ4WjAzMTEwLwYDVQQD
EygxNDUxOTA0ZDBjMTY0MGMxOGI0NjVkYjdjNGVjZjI3ODkxYmFhYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyroY7u6YUSZX9KSRL+sIzDfpYYP8
LJC1VO+ZRVKGqouHe8lsgyIs7z2Byc0NCAeYGb0LomCLhoFwLEWoAYb4BKF10SGj
2gsp3UgnUUpYIHyc3U4joyZkUq1Q2Hm6GRVW+60pk+JUDy1dlnsVAaDL9hWVT5OV
SRoI66DiNOkRpq5MSRpr7Hz9nFSfaGAdWOb9Cf+5X+Ulp03phT84ke3aBoJK1uGl
Y0pERd7kZm2OV47odoTZsBZ4sveLmVhe5/yRNytBo02e7ejjAyCNISllACHbh1Ni
1fUpMVT2zThKCLko0LflErXcrK8TmngJlLQZ7MI7FIrdfwQ0KcIJM9gwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRRkE0MFkDBi0Zdt8Ts8niRuqySMB8GA1UdIwQY
MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt
ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl
LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdtDc3yu
obeZExzYpp2WN8ivVgLBgzPkgAiwjhZP1phV6yg3p6iDCMj80ketdQkZNR8LBtRk
bgUEF47LkaNFqdMlRKcIN753PGtwlC6cYGZ5j6gJ5SLmXeP3qd2RmJHgmj/tt6jb
zq2Ras3LKeVNVc3cut1Zy16Oki+fp4iLjLjwq2mTro51nUhY3xQOuptknymBvPJD
q5Nmh25CRxtJQpXgdJwo/jOBITpFiXem1hgfRw2ckx0K7wcqzMEzSNw2MGZWccaE
gE1lBtJSwHNALiovuR9kYaBRXqUrf/xGEOnJakWlvgonhA7R142m4g7LMimreoV3
K94lW8txvFcZgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:08 2026 by rpki-client