Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          9PEMq7SyoYZ3mq1n1Zt1MaxziQlkPw57H8gSBtAxESg=
Subject key identifier:   B7:B6:08:7D:C2:4F:BD:BD:7B:70:DA:1D:FD:81:F6:BE:42:B2:31:D0
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       019CADC7A26F62BDF2EB4B998A792BEF3541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          06A3
Signing time:             Mon 02 Mar 2026 09:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:07 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: gjkvhSt4HfzoxP5tqhw7sjQjvEn+G2KS0QgMro87WS0=)
                          2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:a2:6f:62:bd:f2:eb:4b:99:8a:79:2b:ef:35:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Mar  2 09:01:07 2026 GMT
            Not After : Mar  3 09:01:07 2026 GMT
        Subject: CN=b7b6087dc24fbdbd7b70da1dfd81f6be42b231d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:a3:6c:d2:41:76:df:08:50:2b:db:e4:b6:
                    cb:8c:cb:42:1f:6b:01:f7:24:9e:5a:c5:da:5a:47:
                    a4:28:db:d9:2b:08:cc:3e:28:66:73:13:76:ea:ab:
                    77:39:62:db:f4:25:b0:a5:73:71:df:82:02:1a:a3:
                    c4:1f:3e:14:88:8e:bd:41:d2:49:42:c0:f0:e3:72:
                    cc:97:17:25:7f:85:f0:12:3f:fd:32:0a:57:3b:eb:
                    1b:3e:30:f1:ad:13:ec:19:a7:34:b7:90:fc:4d:7b:
                    5f:f7:22:42:b6:4d:36:e7:9c:2c:cc:73:00:47:2c:
                    57:40:9e:3c:1a:6c:fa:60:64:60:e9:84:e9:fb:c8:
                    b6:fc:33:d1:bc:3f:5f:ee:fe:a2:51:5e:30:70:9e:
                    11:3c:85:b8:55:71:76:e1:47:f3:52:fd:c4:2f:1e:
                    3d:59:f4:93:c6:59:36:c7:a1:e2:83:ce:d7:18:58:
                    1b:e9:6a:db:01:8d:ef:5e:2c:22:fb:ac:a9:d7:f7:
                    79:7f:85:40:46:01:83:17:d9:95:3e:83:67:d1:69:
                    dc:aa:d7:6c:7e:04:64:b5:e1:6d:4c:c2:c9:91:60:
                    71:76:9d:bd:fb:5a:5f:d2:dc:d0:6d:17:d4:b5:0f:
                    d2:a3:7d:5d:45:b0:45:81:47:b1:fc:89:2b:49:b8:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B6:08:7D:C2:4F:BD:BD:7B:70:DA:1D:FD:81:F6:BE:42:B2:31:D0
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:97:a7:c9:0b:61:4f:77:28:65:9a:a7:b4:7a:cd:32:d0:
         da:17:db:a4:61:3d:e6:46:e5:a2:ec:2e:a5:e1:1c:22:6a:2d:
         ab:a1:66:86:fe:42:a0:5b:2f:53:34:a9:fe:70:b0:4f:01:7e:
         f7:d1:8b:25:74:0c:f1:40:c1:cd:57:6e:df:10:af:93:89:5a:
         77:0a:ae:40:cb:de:dd:75:5c:7d:1e:61:1a:97:d3:27:fb:5d:
         1a:16:81:75:68:81:9f:d4:3a:c8:ce:e8:b0:49:8c:02:9c:36:
         36:1f:1c:b2:bf:91:39:08:8d:13:73:c2:0e:c9:9a:c9:b0:b6:
         66:b2:90:7b:22:bf:5b:e0:02:8d:dc:ca:5b:bc:37:80:59:b7:
         f2:56:18:e8:da:be:86:32:4d:48:d8:ee:67:08:65:e9:47:be:
         56:57:2e:64:17:37:d1:1b:15:fc:f1:12:fc:95:4f:06:ff:b0:
         87:60:f8:65:94:6e:84:84:fb:8f:9f:c7:a3:83:a0:13:32:a0:
         7f:ab:03:20:6c:f9:80:8f:d6:99:2c:76:dd:55:f6:10:f3:3c:
         aa:4e:97:1b:fa:9e:ff:a9:c9:af:66:14:bf:32:44:26:2f:6f:
         eb:a5:32:c7:d4:d0:62:ce:22:11:90:2f:79:44:49:b6:c3:8e:
         7d:69:72:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx6JvYr3y60uZinkr7zVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj
ZDMxNzQwHhcNMjYwMzAyMDkwMTA3WhcNMjYwMzAzMDkwMTA3WjAzMTEwLwYDVQQD
EyhiN2I2MDg3ZGMyNGZiZGJkN2I3MGRhMWRmZDgxZjZiZTQyYjIzMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeejbNJBdt8IUCvb5LbLjMtCH2sB
9ySeWsXaWkekKNvZKwjMPihmcxN26qt3OWLb9CWwpXNx34ICGqPEHz4UiI69QdJJ
QsDw43LMlxclf4XwEj/9MgpXO+sbPjDxrRPsGac0t5D8TXtf9yJCtk0255wszHMA
RyxXQJ48Gmz6YGRg6YTp+8i2/DPRvD9f7v6iUV4wcJ4RPIW4VXF24UfzUv3ELx49
WfSTxlk2x6Hig87XGFgb6WrbAY3vXiwi+6yp1/d5f4VARgGDF9mVPoNn0Wncqtds
fgRkteFtTMLJkWBxdp29+1pf0tzQbRfUtQ/So31dRbBFgUex/IkrSbjw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe2CH3CT729e3DaHf2B9r5CsjHQMB8GA1UdIwQY
MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt
ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw
LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnCXp8kL
YU93KGWap7R6zTLQ2hfbpGE95kblouwupeEcImotq6Fmhv5CoFsvUzSp/nCwTwF+
99GLJXQM8UDBzVdu3xCvk4ladwquQMve3XVcfR5hGpfTJ/tdGhaBdWiBn9Q6yM7o
sEmMApw2Nh8csr+ROQiNE3PCDsmaybC2ZrKQeyK/W+ACjdzKW7w3gFm38lYY6Nq+
hjJNSNjuZwhl6Ue+VlcuZBc30RsV/PES/JVPBv+wh2D4ZZRuhIT7j5/Ho4OgEzKg
f6sDIGz5gI/WmSx23VX2EPM8qk6XG/qe/6nJr2YUvzJEJi9v66Uyx9TQYs4iEZAv
eURJtsOOfWlybw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:26 2026 by rpki-client