Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          rGveJkET08vV22WKMIdg6A2CPfyF+TngGzbQcjyBLvs=
Subject key identifier:   25:B2:44:04:AD:59:6A:40:41:CB:77:6C:A9:7E:EC:3E:66:71:BB:76
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019CAD5A2B0F7468492D93FEB382BB551AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0CC6
Signing time:             Mon 02 Mar 2026 07:01:33 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:33 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:33 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: gdZBMppOJXILor3Qftv2KNvv1orSxD74Vn54YVdcXys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:2b:0f:74:68:49:2d:93:fe:b3:82:bb:55:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Mar  2 07:01:33 2026 GMT
            Not After : Mar  3 07:01:33 2026 GMT
        Subject: CN=25b24404ad596a4041cb776ca97eec3e6671bb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:d1:af:b3:12:98:50:00:3d:c0:43:76:a5:
                    a9:b1:67:93:cd:12:c4:3a:66:9f:22:cd:72:71:85:
                    40:7a:58:f5:a0:d9:b1:8d:90:09:56:89:7f:8b:5a:
                    1e:da:2e:4d:b4:69:75:53:2f:8f:d8:c4:78:40:a7:
                    7c:b9:da:ca:11:42:0b:e0:d3:3f:c2:df:c6:9d:60:
                    f3:40:38:f7:ba:e8:a9:9f:9e:f3:b8:36:3a:36:f6:
                    65:8a:ea:48:bf:d6:5b:55:b5:19:a9:38:c9:5e:7e:
                    bb:06:3a:6c:4a:1c:82:b7:cb:13:b3:63:a2:c9:65:
                    10:1d:63:86:62:92:58:cf:52:12:ff:87:35:6a:6e:
                    9f:17:05:dc:67:60:6d:a9:35:23:47:28:35:6b:f4:
                    c5:d1:55:af:f3:00:a8:41:6d:d7:c6:4f:ae:8e:9c:
                    88:58:b1:b6:74:a9:1a:f3:a6:45:af:7c:27:e4:b2:
                    08:96:ed:bc:e0:68:94:69:c7:ec:6b:8f:68:21:96:
                    a1:50:6e:43:58:f5:1a:85:43:52:9e:6a:2f:e3:83:
                    cf:24:df:fa:8a:c8:88:e3:bc:07:a2:66:da:74:ee:
                    37:1d:e3:e7:7b:d2:35:e8:8b:cf:94:5c:43:e0:99:
                    bd:9c:f3:8b:1c:a9:6f:81:cb:8f:a8:1b:d8:a8:68:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:44:04:AD:59:6A:40:41:CB:77:6C:A9:7E:EC:3E:66:71:BB:76
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:6f:3e:b7:6f:12:8a:96:c7:8c:f8:d4:31:91:af:4d:03:
         3b:82:ec:34:f5:70:4e:76:a5:2b:df:d2:ee:2d:af:cf:da:13:
         2c:23:6c:78:36:46:5e:2a:a6:2d:91:5d:cd:59:a2:70:a1:87:
         25:98:33:60:e5:a3:8b:21:b2:92:e2:d5:4c:ed:18:3e:44:fc:
         90:e3:e1:5f:c7:24:ca:7c:51:f0:da:72:fc:be:b8:7f:fb:2b:
         94:b8:79:79:75:fa:93:56:22:22:98:63:25:7b:2d:3b:16:db:
         e1:cd:b6:18:c0:d7:4a:07:30:be:e2:97:04:85:db:73:f0:a2:
         0e:4c:60:0d:ae:f9:84:2f:66:0b:08:0a:bc:cd:ed:1d:1e:1e:
         96:53:42:dd:f2:e9:e1:cf:18:3a:0d:a0:4e:75:a6:e7:64:cd:
         9a:14:b6:ca:d6:c1:47:89:a6:80:a5:e0:ac:a9:27:00:3b:73:
         31:96:87:cc:d3:c2:5c:63:db:de:e6:6a:9e:76:5c:73:ad:0b:
         82:0e:2f:c9:72:d4:d8:62:9e:36:c1:41:86:eb:c2:07:46:b5:
         80:68:fb:a1:b6:2a:e6:0b:68:4a:d2:a5:ae:3a:fc:32:da:1f:
         ed:de:8c:cf:72:f1:c6:6d:8d:34:16:b2:b3:66:40:7c:e2:fb:
         74:e1:75:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWisPdGhJLZP+s4K7VRr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll
OTQ3YTQwHhcNMjYwMzAyMDcwMTMzWhcNMjYwMzAzMDcwMTMzWjAzMTEwLwYDVQQD
EygyNWIyNDQwNGFkNTk2YTQwNDFjYjc3NmNhOTdlZWMzZTY2NzFiYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BfRr7MSmFAAPcBDdqWpsWeTzRLE
OmafIs1ycYVAelj1oNmxjZAJVol/i1oe2i5NtGl1Uy+P2MR4QKd8udrKEUIL4NM/
wt/GnWDzQDj3uuipn57zuDY6NvZliupIv9ZbVbUZqTjJXn67BjpsShyCt8sTs2Oi
yWUQHWOGYpJYz1IS/4c1am6fFwXcZ2BtqTUjRyg1a/TF0VWv8wCoQW3Xxk+ujpyI
WLG2dKka86ZFr3wn5LIIlu284GiUacfsa49oIZahUG5DWPUahUNSnmov44PPJN/6
isiI47wHombadO43HePne9I16IvPlFxD4Jm9nPOLHKlvgcuPqBvYqGj/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWyRAStWWpAQct3bKl+7D5mcbt2MB8GA1UdIwQY
MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt
ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm
LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGilvPrdv
EoqWx4z41DGRr00DO4LsNPVwTnalK9/S7i2vz9oTLCNseDZGXiqmLZFdzVmicKGH
JZgzYOWjiyGykuLVTO0YPkT8kOPhX8ckynxR8Npy/L64f/srlLh5eXX6k1YiIphj
JXstOxbb4c22GMDXSgcwvuKXBIXbc/CiDkxgDa75hC9mCwgKvM3tHR4ellNC3fLp
4c8YOg2gTnWm52TNmhS2ytbBR4mmgKXgrKknADtzMZaHzNPCXGPb3uZqnnZcc60L
gg4vyXLU2GKeNsFBhuvCB0a1gGj7obYq5gtoStKlrjr8Mtof7d6Mz3Lxxm2NNBay
s2ZAfOL7dOF1TA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:07 2026 by rpki-client