Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier:          mOz8uVEmc7AnJ6vklPuzhaJIEd9MPZTPu3yO2eeSsXM=
Subject key identifier:   6B:F3:BF:EF:F0:BA:10:F6:F0:10:37:16:F4:81:12:EB:52:70:45:6C
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer:       /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial:       019D284D60B3BA603EE3E140F400DA68629C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number:          0922
Signing time:             Thu 26 Mar 2026 04:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:52 +0000
Files and hashes:         1: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: GIY8s8STpd+9eFu0PiYYc+vAvBpUPvaYC/djgSiUuyU=)
                          2: uN4DAu7bK-c8JvVTn8OEeV-CJp4.roa (hash: jyCJgBnbF1uD+bUHsVKg/2HvPpHhs/dR1060/6K0LU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:60:b3:ba:60:3e:e3:e1:40:f4:00:da:68:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Validity
            Not Before: Mar 26 04:00:52 2026 GMT
            Not After : Mar 27 04:00:52 2026 GMT
        Subject: CN=6bf3bfeff0ba10f6f0103716f48112eb5270456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:7f:06:36:98:1b:75:95:f1:ed:72:6b:0d:
                    83:2e:5a:4a:43:db:53:03:f2:86:33:bc:d9:b8:f5:
                    25:53:61:83:8d:8b:93:42:22:41:4c:3e:a9:bb:27:
                    dd:1f:65:2a:1c:da:59:1b:84:5d:03:ed:de:c0:10:
                    af:1b:1b:6d:8c:a6:a0:17:72:22:b9:8a:25:e1:0d:
                    6b:e3:9f:05:20:88:fa:44:95:be:7b:d5:56:d3:2f:
                    c0:50:26:0b:22:f9:99:bc:d1:42:ba:09:4e:8b:5e:
                    2e:c9:c8:55:8c:86:78:f9:84:eb:a8:06:ec:2a:ae:
                    5c:34:b4:15:02:0e:c6:3a:d2:c9:2b:2f:eb:37:2a:
                    a1:3c:13:cb:e4:44:93:af:25:3e:5d:04:62:50:be:
                    be:d1:c9:1c:2a:ef:ed:68:a6:96:4b:e4:aa:64:c3:
                    7d:1e:2d:8d:b3:12:84:7a:54:15:ff:09:cf:68:bf:
                    c2:cf:dd:3a:0e:dc:3b:b9:c6:c9:81:f0:21:b0:8e:
                    7e:a5:ef:55:c7:d3:e7:a3:07:8a:9b:43:6c:39:97:
                    c8:bf:d5:f1:ee:f8:48:7d:45:fd:dc:04:7a:73:2a:
                    f3:0f:9b:cf:b9:72:69:79:f6:5d:c4:64:8b:6b:64:
                    b9:92:c8:c1:c3:a0:02:6d:9b:98:5c:c1:91:4c:6b:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:BF:EF:F0:BA:10:F6:F0:10:37:16:F4:81:12:EB:52:70:45:6C
            X509v3 Authority Key Identifier:
                keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:17:6d:c1:a8:02:7e:5b:63:3d:26:32:36:c1:41:6a:f9:
         d0:75:b4:92:db:54:e6:43:01:0f:7f:c4:dc:4d:31:bb:2b:1c:
         cb:7f:ab:d0:c8:68:4e:c4:68:cb:e6:c5:c6:56:30:19:20:1d:
         d1:08:0d:70:5b:ef:61:0a:a8:94:c4:9d:ce:08:d6:f3:71:bc:
         de:29:5e:ac:0b:f3:f2:2f:0c:65:b2:0d:05:90:55:9d:42:8b:
         03:3b:2b:4e:c4:36:7f:05:c6:ed:2e:dd:8c:45:04:68:6a:53:
         68:fe:f3:de:94:f5:88:b0:82:06:1c:3e:e3:bf:56:63:d5:79:
         42:69:a6:e1:17:e7:db:48:f0:c3:dd:6c:2e:cb:49:4b:28:47:
         6a:a9:ff:d7:22:c7:aa:f0:30:d1:ab:fb:f2:85:a5:72:7d:7d:
         18:1b:2d:41:22:71:93:b7:d5:c6:17:c8:ee:8f:3b:a9:4c:83:
         6b:d7:c8:f0:81:5e:d4:e3:0a:32:39:6b:2d:1b:3b:44:0d:b5:
         2f:8a:77:a6:e3:fb:53:88:28:d7:e0:c8:28:29:af:9c:9c:b6:
         53:7b:89:fe:68:8b:c4:d7:51:be:e4:87:ae:bd:8d:1b:ca:54:
         41:c4:7c:7e:51:11:4a:61:e2:74:84:48:ab:a9:8d:c2:e8:3e:
         be:fc:ec:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWCzumA+4+FA9ADaaGKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGIyNDFmN2NhYzdkMWU1MjFlMjgzMTQ3ZWM2MTc2M2M0
MjJhYTcwHhcNMjYwMzI2MDQwMDUyWhcNMjYwMzI3MDQwMDUyWjAzMTEwLwYDVQQD
Eyg2YmYzYmZlZmYwYmExMGY2ZjAxMDM3MTZmNDgxMTJlYjUyNzA0NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5F/BjaYG3WV8e1yaw2DLlpKQ9tT
A/KGM7zZuPUlU2GDjYuTQiJBTD6puyfdH2UqHNpZG4RdA+3ewBCvGxttjKagF3Ii
uYol4Q1r458FIIj6RJW+e9VW0y/AUCYLIvmZvNFCuglOi14uychVjIZ4+YTrqAbs
Kq5cNLQVAg7GOtLJKy/rNyqhPBPL5ESTryU+XQRiUL6+0ckcKu/taKaWS+SqZMN9
Hi2NsxKEelQV/wnPaL/Cz906Dtw7ucbJgfAhsI5+pe9Vx9PnoweKm0NsOZfIv9Xx
7vhIfUX93AR6cyrzD5vPuXJpefZdxGSLa2S5ksjBw6ACbZuYXMGRTGsp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvzv+/wuhD28BA3FvSBEutScEVsMB8GA1UdIwQY
MBaAFLeLJB98rH0eUh4oMUfsYXY8QiqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTIt
YzBkOTczY2EyNWQ4LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTItYzBkOTczY2EyNWQ4
LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwUXbcGo
An5bYz0mMjbBQWr50HW0kttU5kMBD3/E3E0xuyscy3+r0MhoTsRoy+bFxlYwGSAd
0QgNcFvvYQqolMSdzgjW83G83ilerAvz8i8MZbINBZBVnUKLAzsrTsQ2fwXG7S7d
jEUEaGpTaP7z3pT1iLCCBhw+479WY9V5Qmmm4Rfn20jww91sLstJSyhHaqn/1yLH
qvAw0av78oWlcn19GBstQSJxk7fVxhfI7o87qUyDa9fI8IFe1OMKMjlrLRs7RA21
L4p3puP7U4go1+DIKCmvnJy2U3uJ/miLxNdRvuSHrr2NG8pUQcR8flERSmHidIRI
q6mNwug+vvzsgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:27 2026 by rpki-client