Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          k1gaMO/U/3DeBJA+d2wJXygB9cdE4nzlYex+QNRKc5E=
Subject key identifier:   90:EE:46:EA:E8:CC:FC:25:C8:4B:D3:F2:D7:AF:49:7A:C2:37:AE:CB
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       019CACB4C484E9FDA41960737DB7DB047006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          126E
Signing time:             Mon 02 Mar 2026 04:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:53 +0000
Files and hashes:         1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: Fh1etYxbNoy6Mgdo5kNMpWDovjVVivRw8JnRZQF4wTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:c4:84:e9:fd:a4:19:60:73:7d:b7:db:04:70:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Mar  2 04:00:53 2026 GMT
            Not After : Mar  3 04:00:53 2026 GMT
        Subject: CN=90ee46eae8ccfc25c84bd3f2d7af497ac237aecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:b2:53:7e:6c:27:b3:e2:5c:26:b0:72:b2:
                    63:4f:49:7b:56:b7:23:d0:ac:52:56:85:b2:32:7f:
                    b4:02:29:39:a6:17:87:69:5a:26:ec:ce:df:67:03:
                    f1:43:f2:a2:31:fd:0c:31:f0:ea:a9:e2:c2:2b:aa:
                    f1:0d:43:fd:2b:16:39:c4:02:0d:b0:53:56:af:47:
                    05:45:24:43:28:67:32:9d:49:1e:54:c3:a8:f2:1d:
                    cc:87:17:e4:b0:61:ab:80:2e:98:3a:18:4d:33:ec:
                    42:ac:23:ac:d3:52:4f:a0:b3:e0:d3:cf:44:9c:dd:
                    98:0a:59:7b:9d:31:aa:bf:32:18:43:c1:ce:cc:fe:
                    21:4a:e8:eb:93:f7:a9:89:c8:03:bb:a2:b1:d2:3a:
                    c3:a9:f3:80:c6:dc:1a:18:2d:c9:c9:07:7a:1c:33:
                    b6:98:ec:e1:76:31:f7:84:f2:d4:ce:ad:62:64:d4:
                    c6:f8:d1:d8:20:56:a6:b5:20:32:db:48:56:64:71:
                    44:ac:28:9f:24:4b:38:93:a2:c8:b5:81:3d:eb:34:
                    0b:37:08:6c:bc:25:c2:61:39:d3:09:76:ae:fc:54:
                    a0:bd:86:61:f0:42:29:1f:4b:87:35:c8:a8:01:e2:
                    77:a8:28:8a:08:8b:29:fb:46:91:49:be:b8:ab:8c:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EE:46:EA:E8:CC:FC:25:C8:4B:D3:F2:D7:AF:49:7A:C2:37:AE:CB
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:30:bc:ef:a2:32:f7:6d:73:c3:04:e8:cd:76:07:be:60:
         f7:7c:6b:94:3a:1f:93:b7:4d:39:79:74:0f:c9:b6:4c:45:c9:
         68:61:86:fd:59:77:92:38:ef:df:6d:aa:f4:41:c0:24:6f:23:
         ee:b3:67:64:a4:eb:13:21:42:b3:1a:57:df:74:26:a3:5a:f7:
         6c:f1:b1:bc:66:71:a5:bc:8c:fa:e1:70:90:4b:eb:b0:62:6f:
         41:99:c5:f9:f6:a7:2a:45:fb:83:19:c4:b0:25:e0:87:8d:15:
         6e:24:7f:ed:57:2e:67:ef:d7:00:9b:7a:6f:56:3f:c2:df:75:
         89:fd:c7:b9:6c:d5:1e:2b:58:2e:d1:2a:31:a2:64:e1:e4:8d:
         09:d2:99:3d:3b:d9:07:58:73:5b:eb:b1:e5:34:32:6c:b9:c3:
         97:56:2c:bd:d7:7e:7c:e5:fc:95:83:73:3f:7e:43:2c:cd:f0:
         b4:44:77:99:33:df:26:33:8c:59:fd:d8:bd:d4:a0:29:31:3f:
         63:a6:d7:a3:51:fe:54:9c:a0:02:7e:14:90:e5:f7:8d:d9:5c:
         af:b3:c0:55:c2:13:ac:04:f7:c8:ca:8c:84:72:79:7c:ad:a4:
         3b:5e:62:a5:4a:cc:6f:52:b4:59:8f:02:38:ef:db:f4:6a:b4:
         9d:50:c4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystMSE6f2kGWBzfbfbBHAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh
OWYxOWEwHhcNMjYwMzAyMDQwMDUzWhcNMjYwMzAzMDQwMDUzWjAzMTEwLwYDVQQD
Eyg5MGVlNDZlYWU4Y2NmYzI1Yzg0YmQzZjJkN2FmNDk3YWMyMzdhZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VmyU35sJ7PiXCawcrJjT0l7Vrcj
0KxSVoWyMn+0Aik5pheHaVom7M7fZwPxQ/KiMf0MMfDqqeLCK6rxDUP9KxY5xAIN
sFNWr0cFRSRDKGcynUkeVMOo8h3MhxfksGGrgC6YOhhNM+xCrCOs01JPoLPg089E
nN2YCll7nTGqvzIYQ8HOzP4hSujrk/epicgDu6Kx0jrDqfOAxtwaGC3JyQd6HDO2
mOzhdjH3hPLUzq1iZNTG+NHYIFamtSAy20hWZHFErCifJEs4k6LItYE96zQLNwhs
vCXCYTnTCXau/FSgvYZh8EIpH0uHNcioAeJ3qCiKCIsp+0aRSb64q4wKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDuRurozPwlyEvT8tevSXrCN67LMB8GA1UdIwQY
MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt
NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy
LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlwwvO+i
Mvdtc8ME6M12B75g93xrlDofk7dNOXl0D8m2TEXJaGGG/Vl3kjjv322q9EHAJG8j
7rNnZKTrEyFCsxpX33Qmo1r3bPGxvGZxpbyM+uFwkEvrsGJvQZnF+fanKkX7gxnE
sCXgh40VbiR/7VcuZ+/XAJt6b1Y/wt91if3HuWzVHitYLtEqMaJk4eSNCdKZPTvZ
B1hzW+ux5TQybLnDl1Ysvdd+fOX8lYNzP35DLM3wtER3mTPfJjOMWf3YvdSgKTE/
Y6bXo1H+VJygAn4UkOX3jdlcr7PAVcITrAT3yMqMhHJ5fK2kO15ipUrMb1K0WY8C
OO/b9Gq0nVDEcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:53 2026 by rpki-client