Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          PZwr0lRBTQar79SOs46g74eAh+4LGl8Khr4UN4YyLKA=
Subject key identifier:   55:1A:3B:3C:34:24:E5:9E:4D:76:C1:5C:8B:5C:47:5E:1C:19:F8:9F
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       019D2772C379085DD8FC6D14A0C3E7BC47B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1892
Signing time:             Thu 26 Mar 2026 00:02:05 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:05 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:05 +0000
Files and hashes:         1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
                          2: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: V8tkcuJVr/sWMyl/MxMxnXig3f7U/0Y8f8bkSROOmBw=)
                          4: zT3qRTo_Bh_Y4PRUIgbcM4_OPhI.roa (hash: DLHVLGVEeEcowvlPfROsXYSKn9EL35p8lKZcaisVJ0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:c3:79:08:5d:d8:fc:6d:14:a0:c3:e7:bc:47:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Mar 26 00:02:05 2026 GMT
            Not After : Mar 27 00:02:05 2026 GMT
        Subject: CN=551a3b3c3424e59e4d76c15c8b5c475e1c19f89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:a8:88:f7:b2:35:20:9f:7e:2d:dc:01:1b:
                    a9:85:dc:3f:aa:22:8f:5a:8f:45:32:4e:32:1a:50:
                    8b:98:3f:14:8d:fa:c6:6c:ce:78:9d:9b:8d:94:76:
                    f1:3b:e8:ca:61:13:c2:cf:bc:89:9d:ac:bf:92:5f:
                    30:06:e6:1f:a8:f6:24:25:57:cd:b8:73:a0:e8:c6:
                    30:74:b6:52:19:c9:ac:9e:3e:da:13:1f:cc:2f:8d:
                    84:18:c1:a9:42:c1:7b:01:c8:b9:83:8e:7f:a9:15:
                    4e:bd:ca:97:cd:45:8a:1e:93:9b:b3:1d:a7:1a:10:
                    24:19:44:8d:3d:ac:4d:a4:c5:6e:02:b9:24:be:91:
                    a5:2c:89:44:92:91:e7:31:3b:16:42:ab:bb:41:3b:
                    68:52:08:60:77:2b:be:aa:28:55:9d:2d:db:b1:95:
                    a5:08:b8:a8:8b:7b:8a:41:9d:aa:51:1d:16:b3:3f:
                    6d:55:76:fa:5e:ed:9a:72:98:a7:c8:c1:cb:1f:a9:
                    9c:5f:f4:07:9d:b1:55:68:8f:f4:ec:1b:c5:90:fe:
                    6f:db:4b:b0:48:80:5e:00:ba:53:ab:40:4b:3b:1e:
                    8b:4c:78:04:9d:36:42:81:0b:94:b3:86:df:8f:90:
                    1f:76:b9:61:9a:49:66:be:25:e4:5c:8f:da:30:48:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:3B:3C:34:24:E5:9E:4D:76:C1:5C:8B:5C:47:5E:1C:19:F8:9F
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:01:cd:05:5f:a6:dd:37:4e:3e:88:a1:e5:08:6f:08:94:
         d0:60:61:f3:44:7e:8d:ee:37:c7:31:9e:68:8e:1e:af:32:0d:
         40:35:3e:4e:0e:de:89:17:86:cd:a3:72:0e:6f:4d:0b:44:c4:
         72:d1:36:91:4d:3d:c5:1c:23:fb:57:05:09:7c:f1:e4:42:4c:
         34:b3:90:6c:a0:95:d8:af:94:09:e5:e1:8f:44:e7:d6:a1:00:
         59:83:1b:e1:36:0e:05:ce:a4:be:4e:d8:17:31:56:a1:d9:84:
         76:ad:67:93:a2:74:e6:12:d7:12:6d:a9:85:db:22:0a:62:fc:
         85:e2:62:e6:e8:b0:62:67:61:d5:dc:26:32:54:fe:ff:e4:f2:
         75:12:71:74:79:f1:49:c8:a4:18:4e:97:a9:ae:05:27:2f:f0:
         08:2d:a4:49:68:8b:48:4f:47:51:3e:7a:c9:97:5b:12:6d:f9:
         d3:0c:49:a7:e6:8e:0e:a7:d0:19:11:75:07:dd:d8:48:13:59:
         ec:54:c9:79:79:03:9f:b6:f1:3b:f5:c3:a2:91:d2:6e:f3:1a:
         f6:53:c5:fa:f9:c0:f5:5f:72:f3:87:48:5e:bb:dd:56:e6:54:
         5d:e5:8e:c1:2b:eb:34:2d:18:52:5e:95:ef:09:96:88:63:79:
         9f:48:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsN5CF3Y/G0UoMPnvEeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5
ZjAzOGMwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD
Eyg1NTFhM2IzYzM0MjRlNTllNGQ3NmMxNWM4YjVjNDc1ZTFjMTlmODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyoiPeyNSCffi3cARuphdw/qiKP
Wo9FMk4yGlCLmD8UjfrGbM54nZuNlHbxO+jKYRPCz7yJnay/kl8wBuYfqPYkJVfN
uHOg6MYwdLZSGcmsnj7aEx/ML42EGMGpQsF7Aci5g45/qRVOvcqXzUWKHpObsx2n
GhAkGUSNPaxNpMVuArkkvpGlLIlEkpHnMTsWQqu7QTtoUghgdyu+qihVnS3bsZWl
CLioi3uKQZ2qUR0Wsz9tVXb6Xu2acpinyMHLH6mcX/QHnbFVaI/07BvFkP5v20uw
SIBeALpTq0BLOx6LTHgEnTZCgQuUs4bfj5AfdrlhmklmviXkXI/aMEihGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUaOzw0JOWeTXbBXItcR14cGfifMB8GA1UdIwQY
MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt
NmUzMDc0YzZjNjYzLzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz
LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgQBzQVf
pt03Tj6IoeUIbwiU0GBh80R+je43xzGeaI4erzINQDU+Tg7eiReGzaNyDm9NC0TE
ctE2kU09xRwj+1cFCXzx5EJMNLOQbKCV2K+UCeXhj0Tn1qEAWYMb4TYOBc6kvk7Y
FzFWodmEdq1nk6J05hLXEm2phdsiCmL8heJi5uiwYmdh1dwmMlT+/+TydRJxdHnx
ScikGE6Xqa4FJy/wCC2kSWiLSE9HUT56yZdbEm350wxJp+aODqfQGRF1B93YSBNZ
7FTJeXkDn7bxO/XDopHSbvMa9lPF+vnA9V9y84dIXrvdVuZUXeWOwSvrNC0YUl6V
7wmWiGN5n0hzdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:26 2026 by rpki-client