Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          UFTTC81/lcJemGT1u+d744scigsWGhmvUMhsDNcp3Ck=
Subject key identifier:   39:DF:9C:23:3A:66:C9:89:08:E6:9F:CD:B4:59:CD:A6:A2:3D:85:AC
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       019CAAFD4818A92ABD7FA07C69246CF27626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 20:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:51 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: fbIE2+FK6LC3XPbLw465HS8s7TEYyhrez4KyHb6vL0o=)
                          2: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (hash: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:48:18:a9:2a:bd:7f:a0:7c:69:24:6c:f2:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Mar  1 20:00:51 2026 GMT
            Not After : Mar  2 20:00:51 2026 GMT
        Subject: CN=39df9c233a66c98908e69fcdb459cda6a23d85ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:57:20:fa:c3:65:84:be:0e:ef:63:16:48:
                    c9:6b:e9:b2:27:4d:c6:0a:b0:a0:e5:28:37:85:ed:
                    f9:86:5a:f1:ea:a0:70:09:19:78:f8:43:e2:91:18:
                    3e:0f:d2:94:92:b8:9e:aa:9b:60:b0:e6:c2:3d:94:
                    50:87:06:92:70:23:cd:60:27:3b:a0:c0:e5:44:10:
                    43:ff:4a:33:61:a2:a1:9d:3c:45:d1:88:47:be:4a:
                    5f:33:2b:3f:ef:ad:68:7b:bb:3b:46:c5:da:89:c4:
                    ae:f7:76:de:7f:43:15:1f:75:97:5c:ee:3e:e8:1e:
                    1c:43:3f:d3:7b:e9:fc:d8:c8:a9:e3:a8:21:f8:6c:
                    51:ab:eb:2c:d7:54:2d:46:5f:39:fc:a2:eb:4d:d3:
                    ae:2e:d3:44:27:26:29:5b:f9:f2:48:27:b3:c0:69:
                    38:74:63:d7:e7:2e:4b:34:de:ff:0c:4f:17:d1:ff:
                    ac:cb:ac:c8:0b:b5:05:97:09:30:56:25:68:fe:bc:
                    0e:bc:81:66:63:cb:b6:37:38:33:48:28:f1:d2:36:
                    5a:dd:26:4f:12:5b:a5:fe:14:cc:f1:00:39:bc:38:
                    ec:cf:b0:d5:b5:ba:ee:ed:55:01:01:22:a9:2a:4d:
                    ff:c1:73:c7:7d:9d:b6:d2:5e:e6:0e:19:99:f3:ae:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:9C:23:3A:66:C9:89:08:E6:9F:CD:B4:59:CD:A6:A2:3D:85:AC
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3d:b5:9c:46:d9:5b:90:2f:94:6d:1a:b7:ad:35:96:e1:c3:
         3f:3e:5f:47:49:d6:6b:2a:5c:c9:24:7e:f1:09:f7:69:2a:0e:
         13:fa:89:61:34:0b:d5:b8:5e:0f:f6:6d:54:ed:c1:4e:49:a4:
         e8:b9:20:29:46:a8:09:ab:59:37:67:99:b7:cb:89:34:b7:3e:
         0c:d6:62:e5:45:55:e2:42:69:ea:89:09:ad:57:aa:87:be:6a:
         7c:7e:5b:61:ff:e9:87:b0:31:66:72:67:32:f6:da:98:1d:38:
         32:ab:b1:85:dd:a0:6e:14:52:1f:ef:05:6a:7d:c5:2b:46:a2:
         ba:64:a6:07:c7:cb:ba:6e:31:0d:3a:2f:e1:82:65:59:f3:94:
         9f:25:65:32:47:b1:fc:a6:91:50:1d:02:41:df:c5:64:0d:bc:
         59:8c:73:af:f3:b4:c0:db:db:89:7c:d2:ab:5d:79:30:69:78:
         7a:a6:06:ea:7b:72:3e:5f:64:86:dd:f8:f9:b9:ef:50:8b:42:
         0e:bf:3b:c9:df:7d:15:f4:a9:ab:ef:03:3d:1c:f0:fb:0b:2c:
         b6:81:1e:f6:f7:74:af:f2:2c:ee:a4:ef:68:2b:ff:c5:08:5f:
         ce:19:8f:30:c8:a9:4b:37:f4:45:b0:87:62:91:55:76:80:db:
         84:4e:66:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/UgYqSq9f6B8aSRs8nYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy
ZjYxZmUwHhcNMjYwMzAxMjAwMDUxWhcNMjYwMzAyMjAwMDUxWjAzMTEwLwYDVQQD
EygzOWRmOWMyMzNhNjZjOTg5MDhlNjlmY2RiNDU5Y2RhNmEyM2Q4NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TFXIPrDZYS+Du9jFkjJa+myJ03G
CrCg5Sg3he35hlrx6qBwCRl4+EPikRg+D9KUkrieqptgsObCPZRQhwaScCPNYCc7
oMDlRBBD/0ozYaKhnTxF0YhHvkpfMys/761oe7s7RsXaicSu93bef0MVH3WXXO4+
6B4cQz/Te+n82Mip46gh+GxRq+ss11QtRl85/KLrTdOuLtNEJyYpW/nySCezwGk4
dGPX5y5LNN7/DE8X0f+sy6zIC7UFlwkwViVo/rwOvIFmY8u2NzgzSCjx0jZa3SZP
Elul/hTM8QA5vDjsz7DVtbru7VUBASKpKk3/wXPHfZ220l7mDhmZ8660HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnfnCM6ZsmJCOafzbRZzaaiPYWsMB8GA1UdIwQY
MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt
ODk4OWI0Y2FhMjA2LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2
LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz21nEbZ
W5AvlG0at601luHDPz5fR0nWaypcySR+8Qn3aSoOE/qJYTQL1bheD/ZtVO3BTkmk
6LkgKUaoCatZN2eZt8uJNLc+DNZi5UVV4kJp6okJrVeqh75qfH5bYf/ph7AxZnJn
MvbamB04Mquxhd2gbhRSH+8Fan3FK0aiumSmB8fLum4xDTov4YJlWfOUnyVlMkex
/KaRUB0CQd/FZA28WYxzr/O0wNvbiXzSq115MGl4eqYG6ntyPl9kht34+bnvUItC
Dr87yd99FfSpq+8DPRzw+wsstoEe9vd0r/Is7qTvaCv/xQhfzhmPMMipSzf0RbCH
YpFVdoDbhE5mWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:25 2026 by rpki-client