Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File:                     o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier:          94qqkJdeNOnnqqqKk8FLAiSX2upZa36XUlkVgKdavRM=
Subject key identifier:   EE:FC:84:45:84:5F:EC:EC:26:E3:26:3C:1D:B9:3C:9A:17:12:20:47
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer:       /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial:       019CACB520C54B00741F779997253974651B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number:          1365
Signing time:             Mon 02 Mar 2026 04:01:17 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:17 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:17 +0000
Files and hashes:         1: 4GPF89WAgnUGZriA9ptZSO-T4Cw.roa (hash: XFSu2XLv7vsDUbhfxd0ND/Cuvi1jJWGEcqXPPJPZ9So=)
                          2: 64rrEASv-BoNZyRK9yZ16W29oTQ.roa (hash: w8eD21Xmt1XkyLoIbHqWreG+9516iIJY6+/unbkEvgA=)
                          3: GouOZzqtvm5n6Mf6GERm7SmKJik.roa (hash: DnkVplXCGtIXUxBO+/VYhx1ClIvPTPEOEg8ff9BpzWI=)
                          4: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: 0UMoFNQwYlTsAYoz1EkC9Sqt0o2Ea7vKnS9q1j+kGvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:20:c5:4b:00:74:1f:77:99:97:25:39:74:65:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: Mar  2 04:01:17 2026 GMT
            Not After : Mar  3 04:01:17 2026 GMT
        Subject: CN=eefc8445845fecec26e3263c1db93c9a17122047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:8f:e4:5d:c0:33:fd:8a:6d:eb:59:14:3e:
                    2e:0b:46:5e:a6:32:a9:ef:e9:98:41:60:aa:02:ef:
                    9b:83:cf:b0:5e:d8:ba:57:03:91:73:6e:b0:1b:15:
                    53:33:c7:99:e9:8a:f9:aa:95:eb:d0:70:84:e0:1c:
                    f7:20:0a:17:e3:c0:60:d5:37:43:3b:28:fb:9f:17:
                    cb:c0:dd:44:5e:80:03:ad:62:d2:91:9a:e8:90:b6:
                    af:5d:a3:6c:3a:a6:f9:a7:5c:a2:4d:ba:59:ea:f7:
                    0c:f7:a2:8c:a6:93:f4:e4:e6:75:15:db:72:1d:a9:
                    73:11:86:39:b4:48:6b:c6:67:42:4a:39:6d:da:73:
                    5b:00:00:11:9b:e3:71:ed:5e:3a:76:5b:05:9a:0f:
                    3b:1a:ff:0c:99:cb:a0:67:30:4f:0e:af:0f:e8:57:
                    c0:bb:cf:4a:ef:13:2a:a6:2f:5f:74:1a:78:18:c9:
                    8b:47:e9:e9:94:91:5f:cf:93:24:12:e4:5a:2c:b9:
                    dc:d3:e3:1c:ca:3a:b5:6e:44:af:2a:f1:ae:45:bf:
                    aa:b9:03:c8:ae:5d:8d:21:6b:61:d4:65:2f:b7:07:
                    4e:48:35:2a:49:b6:13:b3:17:c3:a8:15:fc:76:13:
                    7b:85:40:01:f7:7b:a7:63:5e:59:4b:d9:47:b6:f3:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FC:84:45:84:5F:EC:EC:26:E3:26:3C:1D:B9:3C:9A:17:12:20:47
            X509v3 Authority Key Identifier:
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:87:98:95:d2:3e:a8:30:61:1e:35:fd:b0:59:d0:9b:4f:43:
         19:f9:2f:27:08:77:12:91:02:30:8d:21:24:8b:27:d2:85:91:
         1b:7a:b2:39:8f:00:fd:9c:c5:43:ae:7e:98:ca:77:d4:f9:64:
         f5:91:a3:a6:8a:2c:f2:87:e1:08:eb:bd:9a:d3:aa:cf:be:44:
         c2:c4:9f:47:0c:99:8c:1e:5d:1c:d3:0b:a8:e8:98:48:6c:3c:
         86:f0:cf:a1:a8:ff:58:16:74:00:25:5d:b0:bb:c3:fe:f7:5b:
         a4:76:f2:8b:3e:4a:df:78:65:53:f9:f3:d1:f0:c7:4a:a9:57:
         e8:f5:d4:d2:66:22:3a:49:0c:88:ce:05:69:12:78:76:33:1d:
         ba:62:13:f4:a0:3d:13:e7:7c:90:cf:2e:df:cc:33:7a:34:1a:
         aa:d3:af:7e:b7:bb:07:60:06:f5:95:9a:18:8b:dc:22:57:e9:
         1f:99:ba:1b:0b:6c:d1:80:20:65:36:bf:47:34:bf:97:57:37:
         5c:23:05:52:de:dd:e5:0f:ba:86:58:8b:40:9d:d0:4f:f8:d8:
         e6:79:e0:19:0a:87:be:5c:87:0f:eb:e1:a6:47:c3:6c:df:56:
         6a:eb:fe:e5:ea:03:34:d8:7d:f3:0d:4d:6d:65:d2:30:69:fa:
         d5:b0:c4:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystSDFSwB0H3eZlyU5dGUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjYwMzAyMDQwMTE3WhcNMjYwMzAzMDQwMTE3WjAzMTEwLwYDVQQD
EyhlZWZjODQ0NTg0NWZlY2VjMjZlMzI2M2MxZGI5M2M5YTE3MTIyMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqiP5F3AM/2KbetZFD4uC0ZepjKp
7+mYQWCqAu+bg8+wXti6VwORc26wGxVTM8eZ6Yr5qpXr0HCE4Bz3IAoX48Bg1TdD
Oyj7nxfLwN1EXoADrWLSkZrokLavXaNsOqb5p1yiTbpZ6vcM96KMppP05OZ1Fdty
HalzEYY5tEhrxmdCSjlt2nNbAAARm+Nx7V46dlsFmg87Gv8MmcugZzBPDq8P6FfA
u89K7xMqpi9fdBp4GMmLR+nplJFfz5MkEuRaLLnc0+Mcyjq1bkSvKvGuRb+quQPI
rl2NIWth1GUvtwdOSDUqSbYTsxfDqBX8dhN7hUAB93unY15ZS9lHtvO+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO78hEWEX+zsJuMmPB25PJoXEiBHMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4eYldI+
qDBhHjX9sFnQm09DGfkvJwh3EpECMI0hJIsn0oWRG3qyOY8A/ZzFQ65+mMp31Plk
9ZGjpoos8ofhCOu9mtOqz75EwsSfRwyZjB5dHNMLqOiYSGw8hvDPoaj/WBZ0ACVd
sLvD/vdbpHbyiz5K33hlU/nz0fDHSqlX6PXU0mYiOkkMiM4FaRJ4djMdumIT9KA9
E+d8kM8u38wzejQaqtOvfre7B2AG9ZWaGIvcIlfpH5m6Gwts0YAgZTa/RzS/l1c3
XCMFUt7d5Q+6hliLQJ3QT/jY5nngGQqHvlyHD+vhpkfDbN9Wauv+5eoDNNh98w1N
bWXSMGn61bDE1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:31 2026 by rpki-client