Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File:                     M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier:          ELkVsyIzsKcMTNTmBfuC11ItiL0oJbSsyK4W4KIrNhA=
Subject key identifier:   9F:9C:6E:75:F6:EC:F5:51:29:8F:8C:A5:22:54:58:C8:B0:13:6E:34
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer:       /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial:       019CAD59B2A974700635E081502E41E4E655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number:          055F
Signing time:             Mon 02 Mar 2026 07:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:02 +0000
Files and hashes:         1: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: JFFfkEwdh+xFTST1lfLNy878rHv2JPyR/M1NsZGMVSQ=)
                          2: mPlMjkqTZkC57IBLKPd0EfNj7iw.roa (hash: VIIonFkOVhOCVYivwNgIVRIKhtGM74oWX8Z6MBeWXm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:b2:a9:74:70:06:35:e0:81:50:2e:41:e4:e6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
        Validity
            Not Before: Mar  2 07:01:02 2026 GMT
            Not After : Mar  3 07:01:02 2026 GMT
        Subject: CN=9f9c6e75f6ecf551298f8ca5225458c8b0136e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:df:7d:13:65:aa:cd:22:7f:2d:5f:5e:dc:
                    81:50:d1:0f:0b:24:c3:f8:31:1f:39:07:41:a9:6b:
                    16:60:03:04:df:54:a6:ca:b1:c1:4d:72:00:75:2e:
                    27:ae:ca:bd:81:48:e6:f0:97:a1:04:ce:e7:0c:ac:
                    0b:4c:fb:46:1c:a9:8e:c8:63:06:b4:be:b8:14:57:
                    4b:f5:5a:f3:b1:2e:1b:aa:51:b6:1a:36:cc:c5:89:
                    0d:bd:f8:1f:dc:72:a1:68:27:64:d8:7f:df:f8:09:
                    0e:46:0c:b8:48:2d:62:1e:43:ce:42:df:87:9d:04:
                    51:3c:00:ae:9b:0f:3e:9f:68:c2:42:48:f3:23:99:
                    eb:63:83:2f:55:db:45:73:d9:a1:25:17:c8:25:76:
                    27:39:8e:af:64:7f:2e:3a:12:57:3b:12:53:1d:f0:
                    43:5a:70:df:b1:5a:2d:1d:34:2a:d2:87:94:b9:d7:
                    04:f4:6c:29:33:d3:21:dd:ff:a7:7f:03:52:f4:80:
                    f9:2f:96:0b:52:ba:ee:fa:ac:c9:b6:94:73:30:8d:
                    95:ed:2e:2e:49:42:73:46:1b:94:9c:47:bb:d1:53:
                    cc:25:12:09:16:87:02:c4:31:be:07:d0:cc:71:9a:
                    ee:23:58:af:c0:f4:ff:29:c5:9f:08:a1:e4:ed:10:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:6E:75:F6:EC:F5:51:29:8F:8C:A5:22:54:58:C8:B0:13:6E:34
            X509v3 Authority Key Identifier:
                keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6e:29:cb:a6:bb:1e:c9:9d:2c:fb:8b:63:f1:ce:0c:29:ba:
         17:65:0a:46:c2:ad:d7:ed:e3:75:34:a5:4e:bb:9e:90:7c:0b:
         60:ed:97:a0:04:2a:fc:80:b3:66:1b:1f:e6:6d:46:fb:22:ee:
         4b:41:99:7f:a9:59:c9:60:b2:9f:86:41:63:af:14:c7:7d:e0:
         9d:84:d6:18:b1:dc:9e:64:3d:9a:6b:5c:c8:47:3c:33:e3:ca:
         ab:dc:9a:88:d3:0e:b7:8c:04:f3:46:d5:53:3a:fa:6b:e1:7e:
         23:4b:67:99:10:05:65:f5:be:5f:e2:9d:36:11:33:3b:9a:ba:
         00:9b:cd:2a:8c:75:d4:0b:4b:cb:ba:7b:af:44:6c:f5:33:26:
         9f:60:c9:34:6a:cb:b2:7f:c2:49:06:12:39:69:71:d9:7a:07:
         7b:dd:f0:78:29:97:0b:a1:15:ae:28:35:98:8b:97:7e:8a:ef:
         33:51:2d:49:c7:6a:e9:a8:b0:27:02:2c:d2:35:cb:52:94:b5:
         40:f2:ed:b2:df:67:93:ce:1b:31:e9:ff:65:82:0a:75:bd:e1:
         c4:a8:d1:a5:1b:4a:0a:73:93:36:75:79:31:4d:b9:9f:3a:18:
         e5:21:37:37:b0:8d:5b:77:f0:de:67:5b:64:d8:c0:1e:61:26:
         d1:5b:5c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWbKpdHAGNeCBUC5B5OZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy
MGU0NTIwHhcNMjYwMzAyMDcwMTAyWhcNMjYwMzAzMDcwMTAyWjAzMTEwLwYDVQQD
Eyg5ZjljNmU3NWY2ZWNmNTUxMjk4ZjhjYTUyMjU0NThjOGIwMTM2ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHHffRNlqs0ify1fXtyBUNEPCyTD
+DEfOQdBqWsWYAME31SmyrHBTXIAdS4nrsq9gUjm8JehBM7nDKwLTPtGHKmOyGMG
tL64FFdL9VrzsS4bqlG2GjbMxYkNvfgf3HKhaCdk2H/f+AkORgy4SC1iHkPOQt+H
nQRRPACumw8+n2jCQkjzI5nrY4MvVdtFc9mhJRfIJXYnOY6vZH8uOhJXOxJTHfBD
WnDfsVotHTQq0oeUudcE9GwpM9Mh3f+nfwNS9ID5L5YLUrru+qzJtpRzMI2V7S4u
SUJzRhuUnEe70VPMJRIJFocCxDG+B9DMcZruI1ivwPT/KcWfCKHk7RCH7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+cbnX27PVRKY+MpSJUWMiwE240MB8GA1UdIwQY
MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt
OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj
LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsW4py6a7
HsmdLPuLY/HODCm6F2UKRsKt1+3jdTSlTruekHwLYO2XoAQq/ICzZhsf5m1G+yLu
S0GZf6lZyWCyn4ZBY68Ux33gnYTWGLHcnmQ9mmtcyEc8M+PKq9yaiNMOt4wE80bV
Uzr6a+F+I0tnmRAFZfW+X+KdNhEzO5q6AJvNKox11AtLy7p7r0Rs9TMmn2DJNGrL
sn/CSQYSOWlx2XoHe93weCmXC6EVrig1mIuXforvM1EtScdq6aiwJwIs0jXLUpS1
QPLtst9nk84bMen/ZYIKdb3hxKjRpRtKCnOTNnV5MU25nzoY5SE3N7CNW3fw3mdb
ZNjAHmEm0Vtclg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:10 2026 by rpki-client