Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          OSIH3V4esw7fyiu7ydX8x4jgDeMWfouifi/ecgNhqJg=
Subject key identifier:   32:47:FF:8F:43:3F:61:C2:73:77:8A:5F:08:E8:82:97:EE:34:15:DC
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       019CAD59827FD3176FB8A0A9381781D821A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          185E
Signing time:             Mon 02 Mar 2026 07:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:50 +0000
Files and hashes:         1: DpcOVa9Nt6WyZo-jc4F2B8cvii4.roa (hash: /w23cNA5keFWZ7eCICp43aq7lv6Ep32mf5by54qPxvI=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: nvf3Kmk5Mt2/K9I0IXLODeuB24xyOTHigvaxY2k5iBo=)
                          3: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          4: vFIwAzBWf5hLUk_C60sKa4u-Hgg.roa (hash: 80SZxBpW+GH4V/rwts3MicZ6OM8HiXOFlZ60y63Wyrw=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:82:7f:d3:17:6f:b8:a0:a9:38:17:81:d8:21:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Mar  2 07:00:50 2026 GMT
            Not After : Mar  3 07:00:50 2026 GMT
        Subject: CN=3247ff8f433f61c273778a5f08e88297ee3415dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e0:81:c0:62:be:0f:30:8c:21:d4:95:9f:cf:
                    41:d1:54:fd:33:b2:ce:10:c8:2a:d9:3e:ce:f6:79:
                    dd:b3:a5:26:e3:e1:77:e4:d5:47:2d:8a:40:be:e7:
                    29:f1:cf:89:99:79:18:8f:db:f8:64:b5:bd:73:6c:
                    61:1f:ec:1d:36:ee:57:8e:cf:60:09:4d:10:5a:38:
                    f4:00:76:7c:a4:b9:2b:db:f5:80:f8:c9:79:43:e2:
                    5a:1d:cd:32:3c:c4:95:e3:80:88:d6:85:03:29:66:
                    e3:35:dc:55:54:f1:b7:7c:cf:0f:5d:bd:b8:9c:51:
                    07:01:e7:92:59:8d:24:cc:19:9b:43:83:2e:95:70:
                    fc:57:41:7d:aa:0f:b9:f0:42:b2:cc:57:86:b1:35:
                    f8:2c:e4:6d:f6:bb:14:51:89:ba:bd:4f:dd:bb:18:
                    48:56:68:8d:bc:49:e5:f8:5d:72:f2:c0:c2:59:61:
                    0d:42:81:59:5c:df:41:bf:c0:76:ca:6a:f3:5f:50:
                    b8:7c:d8:47:3b:28:5a:0f:5c:1a:a6:de:c6:4b:6c:
                    07:fc:6f:f4:f0:56:ca:fc:46:c5:ee:c1:4d:ea:4b:
                    84:d2:9d:23:8e:70:01:ee:8d:e5:ce:00:49:a0:71:
                    01:54:da:5f:4d:0b:09:e8:7c:a1:0f:90:60:06:a4:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:FF:8F:43:3F:61:C2:73:77:8A:5F:08:E8:82:97:EE:34:15:DC
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:41:45:ea:d1:4f:bc:20:00:2c:4e:8a:de:a8:8b:38:37:8a:
         82:b7:61:4f:b8:6b:df:78:07:99:81:03:a7:b4:55:28:f1:dc:
         b8:f6:35:66:59:11:47:1b:ce:fc:42:5e:87:d9:3d:b8:fc:e5:
         1a:2c:52:e6:43:f7:b9:ce:8a:4b:83:3c:c3:d0:6d:58:0d:34:
         72:06:e9:eb:e1:79:62:40:98:43:bb:59:5d:86:5e:2d:e8:8b:
         4f:62:d6:a1:84:ac:a7:aa:6c:a2:bd:ec:54:14:9b:a2:59:61:
         62:6a:f5:03:ee:a9:d8:4b:ab:7f:5b:77:aa:de:33:b1:90:c3:
         d5:74:1d:0c:2b:3a:f7:ef:c8:63:1c:5f:f5:bf:97:6c:d8:1a:
         e6:fe:2a:12:bc:1a:e0:d1:bc:b1:c3:65:e1:73:9d:69:eb:de:
         d8:62:b0:89:26:f6:49:69:23:23:4a:48:a3:90:a1:20:2d:dc:
         3d:9e:9b:7f:3d:02:ee:99:96:55:a9:b3:3c:96:59:ca:a9:bc:
         7d:23:4f:12:9c:a0:93:7d:cd:36:f5:e9:67:92:b4:ec:d0:c4:
         50:98:81:1e:7a:19:8d:0d:3d:83:d2:c5:c6:b6:fc:6b:02:93:
         0d:1b:59:b6:6e:fb:c5:ae:d5:4e:5b:5b:33:94:dc:27:92:50:
         ae:04:99:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWYJ/0xdvuKCpOBeB2CGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjYwMzAyMDcwMDUwWhcNMjYwMzAzMDcwMDUwWjAzMTEwLwYDVQQD
EygzMjQ3ZmY4ZjQzM2Y2MWMyNzM3NzhhNWYwOGU4ODI5N2VlMzQxNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uCBwGK+DzCMIdSVn89B0VT9M7LO
EMgq2T7O9nnds6Um4+F35NVHLYpAvucp8c+JmXkYj9v4ZLW9c2xhH+wdNu5Xjs9g
CU0QWjj0AHZ8pLkr2/WA+Ml5Q+JaHc0yPMSV44CI1oUDKWbjNdxVVPG3fM8PXb24
nFEHAeeSWY0kzBmbQ4MulXD8V0F9qg+58EKyzFeGsTX4LORt9rsUUYm6vU/duxhI
VmiNvEnl+F1y8sDCWWENQoFZXN9Bv8B2ymrzX1C4fNhHOyhaD1wapt7GS2wH/G/0
8FbK/EbF7sFN6kuE0p0jjnAB7o3lzgBJoHEBVNpfTQsJ6HyhD5BgBqRrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJH/49DP2HCc3eKXwjogpfuNBXcMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEFF6tFP
vCAALE6K3qiLODeKgrdhT7hr33gHmYEDp7RVKPHcuPY1ZlkRRxvO/EJeh9k9uPzl
GixS5kP3uc6KS4M8w9BtWA00cgbp6+F5YkCYQ7tZXYZeLeiLT2LWoYSsp6psor3s
VBSbollhYmr1A+6p2Eurf1t3qt4zsZDD1XQdDCs69+/IYxxf9b+XbNga5v4qErwa
4NG8scNl4XOdaeve2GKwiSb2SWkjI0pIo5ChIC3cPZ6bfz0C7pmWVamzPJZZyqm8
fSNPEpygk33NNvXpZ5K07NDEUJiBHnoZjQ09g9LFxrb8awKTDRtZtm77xa7VTltb
M5TcJ5JQrgSZZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:54 2026 by rpki-client