Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File:                     ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier:          M+/eW3Pw3n5/ac8+w0hqrv8R+vFg3J1YyCmIFOCZH3g=
Subject key identifier:   31:09:7F:9E:43:8E:B1:1C:CB:BF:C1:64:0D:AE:79:0F:BA:CC:CE:C3
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer:       /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial:       019CAAC6961CB8A19B5961AE6BEA93C64771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number:          097A
Signing time:             Sun 01 Mar 2026 19:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:07 +0000
Files and hashes:         1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
                          2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: EGLydVpMn8q+5BXLcHK3PF0CE2RE1IcD8kzkxxHNFnI=)
                          3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:96:1c:b8:a1:9b:59:61:ae:6b:ea:93:c6:47:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
        Validity
            Not Before: Mar  1 19:01:07 2026 GMT
            Not After : Mar  2 19:01:07 2026 GMT
        Subject: CN=31097f9e438eb11ccbbfc1640dae790fbacccec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:43:0d:b6:53:94:fe:e8:f7:80:66:1e:6f:
                    f7:8b:e3:b8:d5:a2:db:c5:65:c6:fb:3c:04:1f:c9:
                    a1:45:10:c5:c1:14:41:6b:3e:b7:bc:a3:91:26:42:
                    3e:6b:c3:68:45:58:01:53:fc:c9:54:c9:17:4c:18:
                    42:06:4f:c9:7a:f5:86:b6:58:ba:9e:a2:56:bc:67:
                    f3:1a:65:03:de:22:8e:50:15:1f:53:30:e6:04:ec:
                    a9:41:16:b9:ac:fe:94:1c:ae:b4:e4:e0:8c:f9:33:
                    09:62:4c:b0:83:11:73:86:e1:04:c4:6d:82:81:5b:
                    31:cd:cb:71:a6:11:c2:53:88:70:8e:1e:06:57:d5:
                    ce:d8:b4:b8:73:09:15:4c:26:f7:29:85:a4:0d:99:
                    bc:f9:5c:fe:cb:4c:bf:bd:d9:93:4d:90:f6:c9:4f:
                    7e:87:b6:f5:df:92:40:77:93:ac:ca:45:ea:0e:cb:
                    5e:e4:f8:97:51:9c:47:3b:a9:bb:ca:34:b8:75:30:
                    9d:c4:e6:67:ea:9c:fb:8b:02:07:63:a3:bc:b6:44:
                    68:d8:70:1d:16:c1:e3:00:50:72:f7:37:06:01:4b:
                    55:71:41:cc:52:c8:b3:fd:a2:ea:14:d8:a0:f1:7c:
                    ca:da:4c:de:8f:ad:16:26:c0:e6:57:9f:0e:37:a8:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:7F:9E:43:8E:B1:1C:CB:BF:C1:64:0D:AE:79:0F:BA:CC:CE:C3
            X509v3 Authority Key Identifier:
                keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:47:a5:28:a4:de:aa:14:a7:57:f9:d2:5d:4b:47:71:b9:
         88:20:ee:95:49:2e:6f:9e:bf:b1:12:b0:e4:85:08:05:c4:0a:
         59:00:08:27:19:3f:be:42:e2:8a:ab:92:38:62:b3:d9:f3:56:
         5b:f4:80:72:a2:8f:f9:bb:a2:6c:66:80:7d:25:9f:89:94:07:
         19:2b:6f:8a:1a:cb:c0:fc:f6:8a:3a:e5:5b:75:86:0a:fc:c2:
         d5:f1:b3:6f:3e:6c:cd:e5:b4:7a:f6:37:38:1a:06:98:62:35:
         da:d1:4c:03:8e:c6:0e:bc:51:a2:e7:ac:28:0e:3b:f2:c2:a8:
         ff:75:58:d8:93:fd:21:ab:aa:bb:9f:ef:7b:c4:0d:5b:c2:75:
         c7:2b:94:10:3b:bc:a9:69:bc:53:9b:a3:5a:47:b2:7d:4a:ef:
         a9:71:6d:0d:f5:8f:3d:2a:9e:e6:f7:db:c5:45:d8:2f:66:11:
         2d:8d:ab:27:17:73:6f:bb:4d:c8:a6:84:6f:37:e1:8e:bd:ab:
         63:d4:86:26:d8:01:40:32:c3:c0:8a:17:ff:86:0a:8c:ca:69:
         e9:f1:58:a8:9e:f4:cf:a4:8c:5d:a1:99:55:9b:21:09:48:3e:
         19:87:29:52:b5:49:af:36:2d:e5:4b:58:ea:d9:d5:2e:e6:1e:
         29:7a:ed:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxpYcuKGbWWGua+qTxkdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjYwMzAxMTkwMTA3WhcNMjYwMzAyMTkwMTA3WjAzMTEwLwYDVQQD
EygzMTA5N2Y5ZTQzOGViMTFjY2JiZmMxNjQwZGFlNzkwZmJhY2NjZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovpDDbZTlP7o94BmHm/3i+O41aLb
xWXG+zwEH8mhRRDFwRRBaz63vKORJkI+a8NoRVgBU/zJVMkXTBhCBk/JevWGtli6
nqJWvGfzGmUD3iKOUBUfUzDmBOypQRa5rP6UHK605OCM+TMJYkywgxFzhuEExG2C
gVsxzctxphHCU4hwjh4GV9XO2LS4cwkVTCb3KYWkDZm8+Vz+y0y/vdmTTZD2yU9+
h7b135JAd5OsykXqDste5PiXUZxHO6m7yjS4dTCdxOZn6pz7iwIHY6O8tkRo2HAd
FsHjAFBy9zcGAUtVcUHMUsiz/aLqFNig8XzK2kzej60WJsDmV58ON6g08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEJf55DjrEcy7/BZA2ueQ+6zM7DMB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF1HpSik
3qoUp1f50l1LR3G5iCDulUkub56/sRKw5IUIBcQKWQAIJxk/vkLiiquSOGKz2fNW
W/SAcqKP+buibGaAfSWfiZQHGStvihrLwPz2ijrlW3WGCvzC1fGzbz5szeW0evY3
OBoGmGI12tFMA47GDrxRouesKA478sKo/3VY2JP9Iauqu5/ve8QNW8J1xyuUEDu8
qWm8U5ujWkeyfUrvqXFtDfWPPSqe5vfbxUXYL2YRLY2rJxdzb7tNyKaEbzfhjr2r
Y9SGJtgBQDLDwIoX/4YKjMpp6fFYqJ70z6SMXaGZVZshCUg+GYcpUrVJrzYt5UtY
6tnVLuYeKXrtYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:45 2026 by rpki-client