Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          JDGOfaUcUD3jBDG0qaoS02pDcaQ22WKMht+dQvyjmAc=
Subject key identifier:   08:12:BE:02:74:24:A3:73:03:94:20:F8:24:56:DA:86:42:33:48:9E
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       019CABA1CC7B214A4F3088EAA33B675FD0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          0F1C
Signing time:             Sun 01 Mar 2026 23:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:33 +0000
Files and hashes:         1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
                          2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: NuEDhQN2PpzJBRTDQ2Azbn0z58HtFMueifkNeor4Umw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:cc:7b:21:4a:4f:30:88:ea:a3:3b:67:5f:d0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Mar  1 23:00:33 2026 GMT
            Not After : Mar  2 23:00:33 2026 GMT
        Subject: CN=0812be027424a373039420f82456da864233489e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:55:8e:85:20:07:ec:1d:b2:4b:fa:12:7e:
                    a3:72:21:28:42:df:01:71:67:f9:5d:db:60:19:77:
                    f5:a7:f3:36:fa:3b:cc:b3:78:a7:80:5f:07:f6:f9:
                    9a:92:58:14:44:58:7c:63:55:c6:7c:ca:87:a9:86:
                    11:16:41:99:16:33:97:c3:02:46:dc:86:13:6a:58:
                    3b:60:85:a9:ef:78:76:b2:ec:b0:57:e5:28:84:45:
                    c4:b6:da:8a:f8:50:54:6d:47:3b:4a:50:ff:03:50:
                    6a:66:07:da:8f:69:1e:98:53:bd:2a:b5:f3:ef:d9:
                    9e:01:83:56:71:cb:43:d0:90:c0:7e:22:95:a7:5e:
                    65:d1:df:52:dd:ed:7e:64:4b:2e:fd:a6:f4:ed:b5:
                    50:a6:fc:e0:52:00:e6:e9:b7:11:f7:cd:c9:a7:37:
                    61:48:3d:06:46:d3:b4:c3:49:77:da:19:dc:0d:47:
                    ec:cb:11:80:32:79:12:0f:a0:7e:9f:7b:72:e7:39:
                    83:1e:a4:cc:61:9a:7b:e7:5b:ff:bd:a4:71:a8:cc:
                    55:e7:65:a5:91:6e:98:07:88:fb:f1:12:5c:04:c5:
                    a0:8d:3a:db:47:5b:86:47:61:f0:86:71:11:d3:40:
                    50:3a:d1:12:46:8b:f6:77:f2:d0:e3:1f:95:f3:06:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:BE:02:74:24:A3:73:03:94:20:F8:24:56:DA:86:42:33:48:9E
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:44:ab:70:c8:48:09:1c:2d:7c:f1:f4:b1:d7:4c:fa:67:
         fa:cb:4b:7c:c4:45:39:40:aa:83:e3:16:97:7e:21:89:19:a8:
         b6:f4:11:25:cb:ec:c2:fd:5f:4c:4c:85:30:f0:89:7d:4c:66:
         cc:6b:ea:a6:fe:92:53:2e:1e:47:28:a2:03:58:c2:1f:7d:cd:
         db:7d:6c:e4:f0:fe:4e:d5:8d:c0:00:0d:01:c4:1b:cb:fa:f2:
         a0:c1:96:22:5a:4f:d3:2c:11:3d:e5:6a:1e:ec:bc:a5:89:c6:
         1b:50:c0:36:b9:28:4a:eb:3a:da:53:1c:d3:8d:ab:59:31:15:
         da:95:79:ed:7a:d2:41:6e:40:6a:73:99:c7:81:bd:9e:27:1e:
         0b:45:5d:61:8b:b4:49:d8:d3:47:f1:48:08:8b:51:65:c9:7a:
         58:c4:20:0f:7b:44:64:dc:54:7e:76:09:74:ab:36:d7:17:ec:
         bc:55:2c:ed:ed:79:0e:f4:59:8f:f4:ad:be:c8:2e:5f:80:0f:
         59:85:83:9c:71:82:c0:62:12:5c:5b:36:aa:ae:94:ec:a5:3e:
         8d:0a:3f:5a:a3:fd:77:76:73:5a:3a:13:fc:d3:81:01:9e:8e:
         cb:83:13:a3:33:48:19:6d:69:6f:f9:03:56:7e:9a:3d:56:b3:
         d5:60:7e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocx7IUpPMIjqoztnX9DeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjYwMzAxMjMwMDMzWhcNMjYwMzAyMjMwMDMzWjAzMTEwLwYDVQQD
EygwODEyYmUwMjc0MjRhMzczMDM5NDIwZjgyNDU2ZGE4NjQyMzM0ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ARVjoUgB+wdskv6En6jciEoQt8B
cWf5XdtgGXf1p/M2+jvMs3ingF8H9vmaklgURFh8Y1XGfMqHqYYRFkGZFjOXwwJG
3IYTalg7YIWp73h2suywV+UohEXEttqK+FBUbUc7SlD/A1BqZgfaj2kemFO9KrXz
79meAYNWcctD0JDAfiKVp15l0d9S3e1+ZEsu/ab07bVQpvzgUgDm6bcR983Jpzdh
SD0GRtO0w0l32hncDUfsyxGAMnkSD6B+n3ty5zmDHqTMYZp751v/vaRxqMxV52Wl
kW6YB4j78RJcBMWgjTrbR1uGR2HwhnER00BQOtESRov2d/LQ4x+V8wYHJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgSvgJ0JKNzA5Qg+CRW2oZCM0ieMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMotEq3DI
SAkcLXzx9LHXTPpn+stLfMRFOUCqg+MWl34hiRmotvQRJcvswv1fTEyFMPCJfUxm
zGvqpv6SUy4eRyiiA1jCH33N231s5PD+TtWNwAANAcQby/ryoMGWIlpP0ywRPeVq
Huy8pYnGG1DANrkoSus62lMc042rWTEV2pV57XrSQW5AanOZx4G9niceC0VdYYu0
SdjTR/FICItRZcl6WMQgD3tEZNxUfnYJdKs21xfsvFUs7e15DvRZj/StvsguX4AP
WYWDnHGCwGISXFs2qq6U7KU+jQo/WqP9d3ZzWjoT/NOBAZ6Oy4MTozNIGW1pb/kD
Vn6aPVaz1WB+mg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:18 2026 by rpki-client