Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          UyS0qq2yD4Tk/b4c+yd/3xQSqz/mXRcsfJ1B/zAgXIE=
Subject key identifier:   FB:0C:81:C4:82:54:36:CE:AA:26:AF:1A:E6:64:57:87:61:C0:B3:FA
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       019CABD8F30CCEA251D288EF3AECB4B3E1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          088B
Signing time:             Mon 02 Mar 2026 00:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:47 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: BQsyT+7C6SDKlPoUJTmG8sLnPe8rL2Aq/pWWY5kf9cI=)
                          2: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (hash: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f3:0c:ce:a2:51:d2:88:ef:3a:ec:b4:b3:e1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Mar  2 00:00:47 2026 GMT
            Not After : Mar  3 00:00:47 2026 GMT
        Subject: CN=fb0c81c4825436ceaa26af1ae664578761c0b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:65:73:67:43:6c:03:29:9b:b6:17:6f:4c:
                    85:72:0c:90:d7:c4:81:b6:d0:42:28:77:fc:bb:00:
                    fe:9b:e7:1d:32:be:ab:38:3e:4d:64:53:d0:41:4c:
                    9d:0a:17:db:6f:31:00:cf:c5:a5:e7:4e:33:85:28:
                    74:74:a0:a8:14:1a:f9:8a:45:95:5b:3e:b1:2d:7b:
                    7d:db:31:ce:9f:8e:49:a2:7f:b9:a5:f4:d3:4c:5c:
                    9c:11:ed:52:df:fa:a4:01:f9:9b:d6:69:6a:f7:97:
                    b5:77:2d:e6:df:ac:5c:03:c4:1e:ad:24:78:2f:04:
                    66:53:38:31:fb:ef:51:0d:99:a3:1b:1f:e9:5f:c3:
                    0b:60:2e:b9:a1:24:9a:97:65:b2:2e:b1:fc:1d:70:
                    28:4c:f1:c6:d8:8a:d2:18:34:55:b2:5a:eb:9e:c5:
                    0b:f2:45:be:51:f6:8e:38:8a:1f:0e:88:46:65:18:
                    ce:5f:e1:7e:d7:7c:ad:86:e6:c0:8e:1a:cd:68:0d:
                    61:b1:f8:a0:e0:3e:18:ed:b0:05:d7:07:78:c2:0c:
                    c0:9b:be:8b:dc:60:e2:74:4a:08:dd:c4:71:0d:8d:
                    dd:eb:f6:10:ce:5f:b2:11:15:b8:d4:74:b8:1e:40:
                    52:65:47:0e:3f:e8:19:6c:ca:8a:a7:d6:ce:6c:0c:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:81:C4:82:54:36:CE:AA:26:AF:1A:E6:64:57:87:61:C0:B3:FA
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:c8:f9:c9:08:52:c8:73:49:d3:0e:b1:c6:2f:b6:4a:63:
         fd:de:c6:6e:ed:05:4b:73:6d:43:1d:48:d1:a7:64:18:50:25:
         2b:43:d9:d2:c2:88:48:81:df:f9:42:0b:90:17:7d:05:1a:ac:
         d2:bb:32:38:b0:50:50:79:52:84:05:cf:20:6d:4e:3f:32:b7:
         e7:06:07:a8:5d:69:38:9c:0d:26:c7:65:66:00:ce:8e:8c:f9:
         f6:4f:e2:35:af:09:4c:74:85:fe:82:12:0c:61:30:9f:cb:b3:
         b4:1c:bb:be:61:26:a4:2f:7c:6e:77:0a:e3:85:7c:3f:9e:6c:
         94:f4:6c:60:23:dd:73:71:0e:2c:56:8f:e1:93:1e:00:bb:ea:
         46:0a:76:43:cc:85:46:5e:6a:9a:d7:96:77:43:ab:fa:91:2f:
         b1:ac:46:ba:ee:eb:c7:51:5a:76:06:bd:b6:d9:e2:c8:9a:44:
         4b:f9:ed:e1:fa:0d:d2:aa:0a:5e:49:29:b2:47:39:18:22:ab:
         0e:da:d5:c2:fb:62:f3:2b:45:f3:ca:01:f5:96:5e:00:70:fa:
         21:ff:84:15:13:1d:12:02:40:73:24:04:c4:e5:5e:01:aa:64:
         2b:6e:8f:a9:ea:32:a3:c1:0e:1f:6c:f4:24:f8:1f:4a:4a:fb:
         43:ea:13:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PMMzqJR0ojvOuy0s+HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz
MWNmMDMwHhcNMjYwMzAyMDAwMDQ3WhcNMjYwMzAzMDAwMDQ3WjAzMTEwLwYDVQQD
EyhmYjBjODFjNDgyNTQzNmNlYWEyNmFmMWFlNjY0NTc4NzYxYzBiM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1lc2dDbAMpm7YXb0yFcgyQ18SB
ttBCKHf8uwD+m+cdMr6rOD5NZFPQQUydChfbbzEAz8Wl504zhSh0dKCoFBr5ikWV
Wz6xLXt92zHOn45Jon+5pfTTTFycEe1S3/qkAfmb1mlq95e1dy3m36xcA8QerSR4
LwRmUzgx++9RDZmjGx/pX8MLYC65oSSal2WyLrH8HXAoTPHG2IrSGDRVslrrnsUL
8kW+UfaOOIofDohGZRjOX+F+13ythubAjhrNaA1hsfig4D4Y7bAF1wd4wgzAm76L
3GDidEoI3cRxDY3d6/YQzl+yERW41HS4HkBSZUcOP+gZbMqKp9bObAzmowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsMgcSCVDbOqiavGuZkV4dhwLP6MB8GA1UdIwQY
MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt
ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1
LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYnI+ckI
UshzSdMOscYvtkpj/d7Gbu0FS3NtQx1I0adkGFAlK0PZ0sKISIHf+UILkBd9BRqs
0rsyOLBQUHlShAXPIG1OPzK35wYHqF1pOJwNJsdlZgDOjoz59k/iNa8JTHSF/oIS
DGEwn8uztBy7vmEmpC98bncK44V8P55slPRsYCPdc3EOLFaP4ZMeALvqRgp2Q8yF
Rl5qmteWd0Or+pEvsaxGuu7rx1Fadga9ttniyJpES/nt4foN0qoKXkkpskc5GCKr
DtrVwvti8ytF88oB9ZZeAHD6If+EFRMdEgJAcyQExOVeAapkK26Pqeoyo8EOH2z0
JPgfSkr7Q+oT/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:38 2026 by rpki-client