Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          /RcRZqyd1Ek2YqegCiiQYmvMeET1FIZompR0HSgX58Q=
Subject key identifier:   DC:5C:D9:5E:F3:A3:E0:F1:9D:5D:92:36:F7:C3:0E:61:90:3A:35:F4
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       019CAAFD4D937E56226F9D95568DA480DF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0ED7
Signing time:             Sun 01 Mar 2026 20:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:52 +0000
Files and hashes:         1: SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa (hash: qbcYTlDoQlcLT8kuTCFoE2vVHnFviJrGXzlocQtB00Q=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: nNeKcr8iiydnA6J4SzGXMcnXDN60sEDvAZ7jeqGNpEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:4d:93:7e:56:22:6f:9d:95:56:8d:a4:80:df:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Mar  1 20:00:52 2026 GMT
            Not After : Mar  2 20:00:52 2026 GMT
        Subject: CN=dc5cd95ef3a3e0f19d5d9236f7c30e61903a35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:5b:99:a7:76:da:1f:c1:24:25:ae:92:00:
                    91:72:a0:2a:76:d8:4a:7d:3e:4f:9d:96:08:91:4d:
                    19:59:f6:eb:4f:44:e1:15:1e:de:4a:29:71:c4:72:
                    ad:25:4b:7e:8c:4a:e4:8a:a0:36:ba:6a:30:60:6c:
                    22:5d:7c:3f:8a:37:54:66:2c:55:52:2a:d3:22:e2:
                    6a:8d:6a:fa:b5:b7:b7:fd:56:9e:97:0c:c1:aa:d5:
                    b7:ff:aa:75:f9:e9:74:59:e7:1d:95:70:90:ea:86:
                    51:11:b7:83:3c:03:37:76:63:a2:db:82:18:40:e9:
                    62:bf:ca:93:0b:9f:8b:e6:9a:40:90:65:1f:a1:f9:
                    d5:b7:d5:68:7c:7d:c3:8b:2a:ce:86:3b:c1:6f:90:
                    6a:7c:14:45:a3:5a:76:0b:e3:79:31:ef:a7:0e:d0:
                    0f:55:da:7a:50:c2:69:a5:92:1e:fc:24:b3:87:44:
                    37:af:74:d1:a9:9f:45:5c:09:b6:9c:3d:73:fa:ee:
                    c7:8a:1c:a3:b0:ad:dd:16:d4:cb:e5:fc:1a:14:eb:
                    6f:db:fa:ce:38:bd:55:8d:c0:ed:9c:e5:b1:fd:de:
                    44:94:4d:12:6d:56:df:66:48:59:e0:7c:94:9a:fd:
                    1d:ce:19:8c:e7:a7:bb:e7:77:4c:95:a5:b5:36:57:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:D9:5E:F3:A3:E0:F1:9D:5D:92:36:F7:C3:0E:61:90:3A:35:F4
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:31:9f:61:91:2b:78:9b:c2:2d:8e:d8:b6:d9:08:9f:21:17:
         7b:9f:f6:b1:e2:d6:eb:98:cf:86:f8:15:69:b7:ad:16:76:f3:
         63:71:19:3b:bd:5e:ab:9f:60:ec:00:c7:78:c4:fc:6c:39:ce:
         0c:c5:71:b5:47:a8:a2:71:12:1c:90:c0:ba:00:3c:0b:a3:87:
         88:b6:aa:fd:f8:16:49:0b:01:a3:96:19:9c:31:e1:cb:63:61:
         4b:fc:9b:6a:f7:79:94:40:24:5c:61:43:f0:55:10:01:4b:2d:
         77:e9:1b:33:64:ba:3f:7c:b2:06:c3:50:1f:08:e8:45:05:bb:
         1e:5f:c4:79:64:da:c5:8f:ac:1a:3a:24:65:92:06:3c:75:8a:
         b5:80:36:ea:c0:69:c0:39:67:6f:07:80:aa:10:cc:a7:83:54:
         d8:d7:37:7f:08:86:8d:16:ca:09:03:07:ef:7f:d9:b0:df:d6:
         01:bc:66:58:23:35:91:63:cf:27:8a:54:bc:e4:a9:62:62:cb:
         7c:f3:d6:a8:f8:89:6e:dc:0b:74:c2:13:96:10:3d:b1:68:7e:
         29:4c:42:f2:2e:70:12:15:c6:06:7a:b9:86:45:de:e1:7c:c6:
         c9:1a:79:30:70:88:2e:43:cd:51:47:02:be:bb:67:d3:f4:2d:
         49:88:78:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/U2TflYib52VVo2kgN8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh
ZGUwMjcwHhcNMjYwMzAxMjAwMDUyWhcNMjYwMzAyMjAwMDUyWjAzMTEwLwYDVQQD
EyhkYzVjZDk1ZWYzYTNlMGYxOWQ1ZDkyMzZmN2MzMGU2MTkwM2EzNWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Fbmad22h/BJCWukgCRcqAqdthK
fT5PnZYIkU0ZWfbrT0ThFR7eSilxxHKtJUt+jErkiqA2umowYGwiXXw/ijdUZixV
UirTIuJqjWr6tbe3/VaelwzBqtW3/6p1+el0WecdlXCQ6oZREbeDPAM3dmOi24IY
QOliv8qTC5+L5ppAkGUfofnVt9VofH3DiyrOhjvBb5BqfBRFo1p2C+N5Me+nDtAP
Vdp6UMJppZIe/CSzh0Q3r3TRqZ9FXAm2nD1z+u7HihyjsK3dFtTL5fwaFOtv2/rO
OL1VjcDtnOWx/d5ElE0SbVbfZkhZ4HyUmv0dzhmM56e753dMlaW1NleH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxc2V7zo+DxnV2SNvfDDmGQOjX0MB8GA1UdIwQY
MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt
MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4
LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDGfYZEr
eJvCLY7YttkInyEXe5/2seLW65jPhvgVabetFnbzY3EZO71eq59g7ADHeMT8bDnO
DMVxtUeoonESHJDAugA8C6OHiLaq/fgWSQsBo5YZnDHhy2NhS/ybavd5lEAkXGFD
8FUQAUstd+kbM2S6P3yyBsNQHwjoRQW7Hl/EeWTaxY+sGjokZZIGPHWKtYA26sBp
wDlnbweAqhDMp4NU2Nc3fwiGjRbKCQMH73/ZsN/WAbxmWCM1kWPPJ4pUvOSpYmLL
fPPWqPiJbtwLdMITlhA9sWh+KUxC8i5wEhXGBnq5hkXe4XzGyRp5MHCILkPNUUcC
vrtn0/QtSYh4mg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:49 2026 by rpki-client