Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          8UF95/aujnubED/JjMSJVG2bonoJX1fGrZnsl/O/kfA=
Subject key identifier:   A8:42:8E:A1:F0:7B:64:7E:50:E9:B7:78:89:5D:FB:63:F8:DE:43:A6
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       019CAA58369CD7CFB0B8BD8938EA65D91257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          0E30
Signing time:             Sun 01 Mar 2026 17:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:33 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: 7m2y98h9/sEYGc70HZFRF4qHmAa6QBXU3eoSdrmpLTs=)
                          2: nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (hash: 9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:36:9c:d7:cf:b0:b8:bd:89:38:ea:65:d9:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Mar  1 17:00:33 2026 GMT
            Not After : Mar  2 17:00:33 2026 GMT
        Subject: CN=a8428ea1f07b647e50e9b778895dfb63f8de43a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:54:e3:fd:1e:e0:c8:7c:9c:19:99:92:78:
                    d3:8a:1e:18:a7:27:c8:30:7b:96:cd:c0:0d:14:70:
                    59:5c:61:7b:02:5f:c2:3e:c5:fc:93:c5:25:b6:88:
                    00:a4:b7:61:12:37:35:b7:ea:9e:73:01:5d:10:ff:
                    95:90:6e:f1:06:b4:e7:36:f0:c5:b8:77:73:4f:28:
                    ab:6b:f9:76:c6:1b:b5:b8:1b:65:40:d4:ca:c1:ba:
                    25:3d:ae:55:6c:43:eb:b0:a5:30:c9:ae:15:ea:a5:
                    9a:12:30:bb:c5:d2:be:58:9a:22:bc:cd:d9:7e:b7:
                    a1:fa:c8:6d:6c:e9:de:56:ac:23:77:ce:f8:a3:bb:
                    7b:c0:fe:26:50:6c:a5:fe:40:c1:eb:99:9d:32:93:
                    93:ec:cd:0d:cb:fd:1d:a6:73:b8:c3:25:28:5d:76:
                    d3:87:3d:af:43:56:cb:62:aa:a8:3d:1f:e4:c0:51:
                    3a:eb:fa:53:b0:b6:30:a4:a1:73:c8:03:d2:e1:fa:
                    75:41:0d:ba:28:12:fe:39:b3:cb:80:76:f5:a8:2f:
                    a5:d1:89:dc:86:78:cc:a4:dc:66:8e:83:9f:c3:5f:
                    5a:16:c8:10:84:50:b8:d6:54:9d:ce:c8:33:13:ee:
                    93:32:3f:32:cb:a4:cd:22:2a:a3:9f:d9:c6:6d:73:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:42:8E:A1:F0:7B:64:7E:50:E9:B7:78:89:5D:FB:63:F8:DE:43:A6
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:85:ad:a6:3d:cd:d5:4b:ef:c7:01:80:ee:5d:10:a4:ca:59:
         aa:f8:46:5e:49:bf:6d:94:58:a7:ab:23:9d:00:92:5b:c5:48:
         17:d9:4c:ec:1c:49:cc:56:c3:b4:5f:d9:e2:49:b2:fa:95:24:
         b0:5a:ca:ac:17:b0:c0:4c:9c:a1:1f:36:4b:84:64:7a:5b:ae:
         91:58:30:b1:de:ad:f2:85:ae:80:1e:45:13:58:53:fa:60:6f:
         17:c9:b1:c6:c5:cb:09:2d:e5:eb:c9:c8:e6:3a:5c:27:66:4c:
         aa:40:32:11:28:aa:08:9c:d6:ca:a1:55:06:c0:12:14:1f:fe:
         42:9c:3d:81:7c:b0:37:33:5e:95:ba:20:a3:0d:07:8e:ab:bf:
         d5:71:c2:ed:98:fc:b1:da:5d:b1:7e:9c:08:03:01:22:b6:22:
         ed:5b:bc:6b:47:30:e4:c0:4d:5e:7e:31:a3:bc:61:10:8d:b9:
         96:ab:b5:4a:37:df:b7:8b:82:67:9d:3e:be:82:81:26:a4:9e:
         c3:11:2f:3c:14:77:d9:b5:6d:f3:84:8a:c8:b0:56:fd:c2:a5:
         21:b7:ca:86:b3:87:ea:72:b0:15:cf:f5:74:9a:d7:fa:09:b0:
         4f:86:6a:44:d8:07:fd:60:b3:f7:88:1c:1d:dc:c2:40:b7:54:
         4a:4d:98:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWDac18+wuL2JOOpl2RJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjMzMDBiY2Q4NDRkNjA3NTJmZTVkZmIyZGUyOTk5NjZl
OWI4ZjYwHhcNMjYwMzAxMTcwMDMzWhcNMjYwMzAyMTcwMDMzWjAzMTEwLwYDVQQD
EyhhODQyOGVhMWYwN2I2NDdlNTBlOWI3Nzg4OTVkZmI2M2Y4ZGU0M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXJU4/0e4Mh8nBmZknjTih4YpyfI
MHuWzcANFHBZXGF7Al/CPsX8k8UltogApLdhEjc1t+qecwFdEP+VkG7xBrTnNvDF
uHdzTyira/l2xhu1uBtlQNTKwbolPa5VbEPrsKUwya4V6qWaEjC7xdK+WJoivM3Z
freh+shtbOneVqwjd874o7t7wP4mUGyl/kDB65mdMpOT7M0Ny/0dpnO4wyUoXXbT
hz2vQ1bLYqqoPR/kwFE66/pTsLYwpKFzyAPS4fp1QQ26KBL+ObPLgHb1qC+l0Ync
hnjMpNxmjoOfw19aFsgQhFC41lSdzsgzE+6TMj8yy6TNIiqjn9nGbXP82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhCjqHwe2R+UOm3eIld+2P43kOmMB8GA1UdIwQY
MBaAFETzMAvNhE1gdS/l37LeKZlm6bj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMt
ODE0ODRmN2E3OWJhLzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMtODE0ODRmN2E3OWJh
LzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYWtpj3N
1UvvxwGA7l0QpMpZqvhGXkm/bZRYp6sjnQCSW8VIF9lM7BxJzFbDtF/Z4kmy+pUk
sFrKrBewwEycoR82S4RkeluukVgwsd6t8oWugB5FE1hT+mBvF8mxxsXLCS3l68nI
5jpcJ2ZMqkAyESiqCJzWyqFVBsASFB/+Qpw9gXywNzNelbogow0Hjqu/1XHC7Zj8
sdpdsX6cCAMBIrYi7Vu8a0cw5MBNXn4xo7xhEI25lqu1Sjfft4uCZ50+voKBJqSe
wxEvPBR32bVt84SKyLBW/cKlIbfKhrOH6nKwFc/1dJrX+gmwT4ZqRNgH/WCz94gc
HdzCQLdUSk2YjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client