Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          cZwV3/L08i/KIBYpbh8khpLrUAVK0SROoDV+PUkvTSw=
Subject key identifier:   5E:BB:5D:6E:4F:C8:FE:7C:BF:FA:69:76:D6:A4:3C:81:0B:D3:85:EE
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       019CAAC6B51566C720C49D9932FD0806AF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          1534
Signing time:             Sun 01 Mar 2026 19:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:15 +0000
Files and hashes:         1: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (hash: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI=)
                          2: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: Y+e4H3EHBgxFXSpFIVHaSW+yWnnL1ZaXXBj8rO8IC0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:b5:15:66:c7:20:c4:9d:99:32:fd:08:06:af:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: Mar  1 19:01:15 2026 GMT
            Not After : Mar  2 19:01:15 2026 GMT
        Subject: CN=5ebb5d6e4fc8fe7cbffa6976d6a43c810bd385ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:58:70:58:b6:d6:ef:44:a8:3a:81:04:12:
                    20:c2:81:ba:23:3e:3a:d0:a9:dd:7f:70:88:79:3b:
                    e0:2f:54:aa:c7:0e:b6:36:a0:11:d8:4f:59:9e:4f:
                    69:5b:f3:2e:c9:fa:3c:c6:ca:c0:32:53:3f:20:13:
                    dc:0d:55:ff:ca:cd:70:37:d4:57:1f:ec:9a:b3:27:
                    46:3a:c5:2c:c0:43:31:7b:33:c7:48:0e:42:de:70:
                    72:eb:78:a9:7c:1e:26:5d:f6:39:aa:04:30:6b:d5:
                    44:57:75:70:9d:cf:f3:b8:c4:cb:86:2a:82:2a:d1:
                    09:b1:89:27:4a:5e:2a:30:e3:e7:1c:90:59:26:97:
                    5f:93:46:0f:76:9e:65:92:8f:68:da:a4:fe:c1:99:
                    8a:0b:89:b4:60:5a:4d:c9:09:af:40:fa:dd:ef:86:
                    28:61:0e:c7:a9:ea:06:df:61:da:1a:ec:1b:a2:e1:
                    67:f1:bc:59:59:24:33:b3:af:57:6a:0f:53:27:ad:
                    72:3b:aa:1c:94:96:fb:05:e1:44:f7:84:7b:c5:b1:
                    c6:45:ed:9d:c2:db:95:02:21:86:17:8b:a8:31:c0:
                    e6:68:b8:2a:10:19:aa:fb:86:a9:72:07:1f:8e:3a:
                    58:48:d4:e7:92:ff:d1:c0:c1:1e:bf:90:32:5b:8b:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:5D:6E:4F:C8:FE:7C:BF:FA:69:76:D6:A4:3C:81:0B:D3:85:EE
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:ba:8e:18:7f:e5:d8:5e:0e:06:a2:aa:c4:ea:94:63:d3:
         16:64:87:d2:05:f8:65:4c:2b:fd:c9:cb:d3:2c:3a:75:aa:3d:
         be:a0:b2:e2:31:54:14:ac:68:20:f3:51:84:b0:17:e0:ce:7b:
         98:dd:42:52:3a:52:95:03:ec:aa:80:24:9c:fc:b7:5c:0d:36:
         0a:eb:6d:26:76:a9:73:34:92:06:2c:8f:11:7c:43:ff:2c:5b:
         55:6d:a0:5e:83:23:f9:6a:cd:06:23:ce:d0:a0:ee:9e:ca:45:
         80:48:b9:ce:5d:f0:15:67:57:48:d6:2d:75:bf:92:b1:70:32:
         c3:f3:87:f1:b3:07:ef:b0:15:29:80:81:7b:04:9d:37:95:db:
         1f:eb:82:8b:36:45:3c:78:b3:e7:3b:fe:87:71:42:3b:84:6b:
         54:59:b3:db:e4:db:29:b2:b5:43:de:3e:6d:46:6e:f0:19:38:
         14:eb:ee:bf:98:d0:09:a3:21:a1:44:f7:28:5e:3c:cc:d4:87:
         c2:4f:be:0e:3d:16:fd:f5:d2:b1:29:1d:0a:54:0f:0e:c0:1e:
         1b:1b:73:65:90:d0:b3:51:a8:34:cb:bf:0d:b2:54:60:1f:44:
         da:02:77:a5:cc:16:55:04:93:74:9f:17:c6:18:a9:13:c5:0b:
         4d:10:2f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrUVZscgxJ2ZMv0IBq9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz
MmMxZTgwHhcNMjYwMzAxMTkwMTE1WhcNMjYwMzAyMTkwMTE1WjAzMTEwLwYDVQQD
Eyg1ZWJiNWQ2ZTRmYzhmZTdjYmZmYTY5NzZkNmE0M2M4MTBiZDM4NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4pYcFi21u9EqDqBBBIgwoG6Iz46
0Kndf3CIeTvgL1Sqxw62NqAR2E9Znk9pW/Muyfo8xsrAMlM/IBPcDVX/ys1wN9RX
H+yasydGOsUswEMxezPHSA5C3nBy63ipfB4mXfY5qgQwa9VEV3Vwnc/zuMTLhiqC
KtEJsYknSl4qMOPnHJBZJpdfk0YPdp5lko9o2qT+wZmKC4m0YFpNyQmvQPrd74Yo
YQ7HqeoG32HaGuwbouFn8bxZWSQzs69Xag9TJ61yO6oclJb7BeFE94R7xbHGRe2d
wtuVAiGGF4uoMcDmaLgqEBmq+4apcgcfjjpYSNTnkv/RwMEev5AyW4sHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF67XW5PyP58v/ppdtakPIEL04XuMB8GA1UdIwQY
MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt
YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1
LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURu6jhh/
5dheDgaiqsTqlGPTFmSH0gX4ZUwr/cnL0yw6dao9vqCy4jFUFKxoIPNRhLAX4M57
mN1CUjpSlQPsqoAknPy3XA02CuttJnapczSSBiyPEXxD/yxbVW2gXoMj+WrNBiPO
0KDunspFgEi5zl3wFWdXSNYtdb+SsXAyw/OH8bMH77AVKYCBewSdN5XbH+uCizZF
PHiz5zv+h3FCO4RrVFmz2+TbKbK1Q94+bUZu8Bk4FOvuv5jQCaMhoUT3KF48zNSH
wk++Dj0W/fXSsSkdClQPDsAeGxtzZZDQs1GoNMu/DbJUYB9E2gJ3pcwWVQSTdJ8X
xhipE8ULTRAvlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:28:48 2026 by rpki-client