Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          J1B8/Xd8IdBPm6pP84aom+QOKZrU7BKKnH3kmhqBV94=
Subject key identifier:   B7:1A:27:CE:2F:D1:50:68:DA:94:B4:6E:EC:1C:85:BF:6A:3C:BF:C0
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       019CAB33E7F5D63ADA5238DD94291642A227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          0846
Signing time:             Sun 01 Mar 2026 21:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:31 +0000
Files and hashes:         1: 0scV3UlCupRHGS6g1h-BrwrwEKU.roa (hash: pa6E5GUAG5mBRmb6nVG4qfg+RLPtEAD+EZ54AovucyE=)
                          2: 1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa (hash: xE6sRa3DTTD5nNX1zDSktxn7FqcwqAPXm9HRxByDF/c=)
                          3: 71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa (hash: R2PacJbb/HyRYwcfVm4XOQFUlae+hBB/iU+Z6f163zA=)
                          4: OKfVJiOZcBF7lwrejSVbnp-mJlM.roa (hash: Xi8UZye71hwHlDGIb4Ds6g7ARS6UAoAe2f0dvg0x25c=)
                          5: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: d9RdWhK5E3w41KbHI+ejzp+xfalFfifAKJ80ylQUPHI=)
                          6: rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa (hash: kQhxnU+CRwoQ25mo4Up88vGMY8Gm4YSKOXHtcexGtww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e7:f5:d6:3a:da:52:38:dd:94:29:16:42:a2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Mar  1 21:00:31 2026 GMT
            Not After : Mar  2 21:00:31 2026 GMT
        Subject: CN=b71a27ce2fd15068da94b46eec1c85bf6a3cbfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:29:90:0d:e2:12:77:a7:79:69:82:2b:f4:
                    67:c9:fc:1d:98:b1:53:ee:b1:a9:4e:cc:be:42:d0:
                    f7:a1:36:ee:fa:09:8c:69:57:97:ec:7d:22:1e:59:
                    4a:36:9e:ae:ba:67:d3:fa:11:25:61:1a:3b:da:99:
                    d8:97:7f:fd:fd:b4:f7:4f:ae:f4:f8:ba:70:73:04:
                    f2:dd:46:fd:e1:6d:90:a3:c4:c1:54:1d:d3:cb:8a:
                    5d:43:2d:9a:a1:28:a5:cc:7d:51:27:a1:23:af:e8:
                    01:eb:de:8b:ef:03:6d:19:9f:ba:91:65:1f:b8:8d:
                    4a:e4:81:bb:e4:e6:b8:8c:0d:cf:77:69:d6:9d:4e:
                    a1:05:e3:b6:c8:c9:20:e9:1a:43:d2:41:cf:65:33:
                    a9:ca:9a:24:f7:3c:0a:33:81:6f:20:38:46:fa:34:
                    d5:c7:25:16:b2:b6:9d:0e:2f:bf:36:cd:31:62:28:
                    65:7e:2a:c3:3b:54:5c:63:84:4d:ed:8b:d2:f5:f3:
                    8b:f0:ea:4f:ea:2d:56:5f:02:41:c3:a1:a7:2b:64:
                    cd:df:c2:d8:0f:f3:fc:17:26:ba:95:4d:41:e0:b8:
                    f6:0b:62:d2:e5:a0:68:6e:af:b6:9a:bf:5c:85:2b:
                    f8:b3:f1:f6:9e:52:3e:ca:bc:53:c3:24:5a:92:1d:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:27:CE:2F:D1:50:68:DA:94:B4:6E:EC:1C:85:BF:6A:3C:BF:C0
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:c9:a9:61:bd:c3:7d:72:56:76:e1:c5:49:25:ef:7b:f7:
         f2:18:93:74:d7:da:e3:74:de:b9:a3:12:d3:bd:d6:26:1b:ab:
         7c:67:25:49:b8:20:41:5d:fc:44:dd:b7:e1:0a:dc:56:8c:04:
         cc:b7:fa:78:a7:3d:af:90:24:d0:45:b1:54:f4:59:ff:4b:ab:
         79:e8:ca:45:3d:36:ca:4a:89:c1:8d:70:2b:13:8b:db:fc:cd:
         22:f4:f3:af:0a:5c:74:a2:17:22:72:48:51:0f:03:d8:ca:b5:
         10:9a:1b:cb:b5:2b:9e:5f:1a:be:36:03:72:88:17:87:5a:ef:
         92:aa:da:ab:72:a4:99:c5:fe:02:12:38:3b:e3:ef:bc:fb:42:
         d4:5d:93:22:fd:97:ca:e2:16:c0:a9:74:d7:43:b8:72:e4:f7:
         40:9e:ac:7c:8d:69:f2:d2:a9:17:bc:fa:2f:4d:cf:e2:bf:c1:
         b3:38:b4:0e:0f:18:82:b3:85:c0:05:19:ae:e4:e3:b8:57:a3:
         56:57:a7:1b:03:d2:61:89:0e:7f:ef:00:99:47:18:40:78:25:
         ca:49:5a:07:21:57:00:89:4f:6d:f7:95:f9:37:1b:67:68:71:
         6c:cc:56:9c:4f:10:a0:50:39:60:66:f5:75:6d:ad:95:a6:e0:
         41:a1:10:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM+f11jraUjjdlCkWQqInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmM4NTQwMTExNDBhMTA5NDdkYTdiNTNiYmIzNTBmM2M1
NGIzM2UwHhcNMjYwMzAxMjEwMDMxWhcNMjYwMzAyMjEwMDMxWjAzMTEwLwYDVQQD
EyhiNzFhMjdjZTJmZDE1MDY4ZGE5NGI0NmVlYzFjODViZjZhM2NiZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWIpkA3iEneneWmCK/RnyfwdmLFT
7rGpTsy+QtD3oTbu+gmMaVeX7H0iHllKNp6uumfT+hElYRo72pnYl3/9/bT3T670
+LpwcwTy3Ub94W2Qo8TBVB3Ty4pdQy2aoSilzH1RJ6Ejr+gB696L7wNtGZ+6kWUf
uI1K5IG75Oa4jA3Pd2nWnU6hBeO2yMkg6RpD0kHPZTOpypok9zwKM4FvIDhG+jTV
xyUWsradDi+/Ns0xYihlfirDO1RcY4RN7YvS9fOL8OpP6i1WXwJBw6GnK2TN38LY
D/P8Fya6lU1B4Lj2C2LS5aBobq+2mr9chSv4s/H2nlI+yrxTwyRakh0LjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcaJ84v0VBo2pS0buwchb9qPL/AMB8GA1UdIwQY
MBaAFDwshUARFAoQlH2ntTu7NQ88VLM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYt
YjViYmQwYjVlMGFhLzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYtYjViYmQwYjVlMGFh
LzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuDJqWG9
w31yVnbhxUkl73v38hiTdNfa43TeuaMS073WJhurfGclSbggQV38RN234QrcVowE
zLf6eKc9r5Ak0EWxVPRZ/0ureejKRT02ykqJwY1wKxOL2/zNIvTzrwpcdKIXInJI
UQ8D2Mq1EJoby7Urnl8avjYDcogXh1rvkqraq3KkmcX+AhI4O+PvvPtC1F2TIv2X
yuIWwKl010O4cuT3QJ6sfI1p8tKpF7z6L03P4r/Bszi0Dg8YgrOFwAUZruTjuFej
VlenGwPSYYkOf+8AmUcYQHglyklaByFXAIlPbfeV+TcbZ2hxbMxWnE8QoFA5YGb1
dW2tlabgQaEQEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:27 2026 by rpki-client