Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          XYI0dEq6X2hWSbEZ15NrTyz3FLIi16t6COdJ6ty8zWc=
Subject key identifier:   12:7E:EF:48:93:EF:75:CF:41:56:F8:CA:50:45:AD:C7:EE:44:93:C0
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019D25BA9F645A5A27FFB565D989D424C9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          1113
Signing time:             Wed 25 Mar 2026 16:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:20 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: OKCaw8zZad8+v17SgwI0pHqP7RR47oHwX9WxmS17a4c=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
                          4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          6: SJqCby9bRcz81zQZO1TeT-stBH8.asa (hash: zdlq1QtWJPDwU8pcUXTI4wu8J85849xwOKfqaDypeVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:9f:64:5a:5a:27:ff:b5:65:d9:89:d4:24:c9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Mar 25 16:01:20 2026 GMT
            Not After : Mar 26 16:01:20 2026 GMT
        Subject: CN=127eef4893ef75cf4156f8ca5045adc7ee4493c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:0d:50:98:df:e1:9f:09:d1:f4:06:21:10:
                    75:b3:8f:63:59:7c:d8:39:f5:50:86:3d:2c:91:7f:
                    75:f8:ad:9a:75:01:06:75:57:06:33:ff:be:68:b0:
                    53:c1:4b:e8:03:95:8b:4a:5a:03:9a:48:e4:05:0e:
                    49:61:39:9d:51:18:3c:75:29:15:a3:73:cb:d5:86:
                    95:53:69:a5:09:c6:8a:ae:bd:a1:2c:1a:c5:69:ad:
                    8d:ad:61:aa:74:be:39:f4:3f:b4:0f:af:7a:d0:c0:
                    c0:49:69:40:58:3c:03:78:45:8c:d7:b7:65:cc:6c:
                    62:ab:a6:ee:f3:6e:86:b3:b0:3a:b1:30:f3:f0:a2:
                    e5:79:9d:12:f4:b7:1f:24:85:a8:e3:13:9f:52:cc:
                    ce:ba:7b:48:06:5e:c6:34:69:ff:8b:c2:1f:57:c4:
                    44:b2:73:11:9c:15:15:f8:1f:48:63:5c:52:0e:12:
                    ac:b1:fb:1c:f5:3b:a2:a7:71:07:2b:3f:41:c6:1c:
                    06:12:96:e1:c5:62:91:43:48:2d:71:51:83:08:ec:
                    d1:71:27:11:32:e6:9a:cd:8a:9b:bb:65:c1:d1:9d:
                    ba:3e:fd:81:46:25:8a:02:9d:9d:97:1e:a5:dc:36:
                    c0:42:63:9c:4f:68:3c:8a:a1:9e:29:c9:b3:e2:50:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:EF:48:93:EF:75:CF:41:56:F8:CA:50:45:AD:C7:EE:44:93:C0
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:9a:33:89:60:3e:ab:cd:86:ea:a2:48:82:57:73:79:cd:
         30:b2:56:e7:2d:16:69:b7:b8:86:0d:41:75:7e:49:8c:66:2a:
         1d:c6:c9:64:fa:11:39:6e:e5:f3:51:af:cc:e1:12:99:5e:0a:
         36:ac:70:c5:b5:c3:f8:7c:02:75:a2:7a:ad:77:eb:04:c0:55:
         ac:27:67:f3:14:eb:ff:51:3a:62:3a:d1:e0:13:19:ae:22:6f:
         24:9a:e0:8e:a2:a6:15:0b:2a:77:a1:c8:7c:a6:f8:f3:9b:d1:
         42:1b:bb:74:7d:7d:03:7d:83:66:8e:45:8f:2a:a6:6d:69:a5:
         2b:a8:54:89:23:27:34:13:8b:11:26:b7:1a:7f:18:16:3a:71:
         5a:0d:2c:eb:fb:5a:68:59:03:79:8f:14:fc:1c:b2:19:9f:5b:
         78:60:2d:1c:d7:4a:d8:49:54:f2:fd:d2:bd:17:81:3a:03:2c:
         1d:e7:70:3b:22:7c:58:0f:c0:d7:c6:9c:ee:16:ac:6b:71:b5:
         01:29:7e:e0:e6:b3:4c:68:82:f5:33:00:5b:24:d3:58:ee:18:
         df:a7:3b:28:e5:ce:00:e8:10:8d:57:41:ca:61:73:d3:13:09:
         cf:89:b1:64:62:b0:54:b7:cc:14:5d:58:bd:dc:7d:d7:5f:f7:
         ac:8d:64:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lup9kWlon/7Vl2YnUJMncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwMzI1MTYwMTIwWhcNMjYwMzI2MTYwMTIwWjAzMTEwLwYDVQQD
EygxMjdlZWY0ODkzZWY3NWNmNDE1NmY4Y2E1MDQ1YWRjN2VlNDQ5M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LwNUJjf4Z8J0fQGIRB1s49jWXzY
OfVQhj0skX91+K2adQEGdVcGM/++aLBTwUvoA5WLSloDmkjkBQ5JYTmdURg8dSkV
o3PL1YaVU2mlCcaKrr2hLBrFaa2NrWGqdL459D+0D6960MDASWlAWDwDeEWM17dl
zGxiq6bu826Gs7A6sTDz8KLleZ0S9LcfJIWo4xOfUszOuntIBl7GNGn/i8IfV8RE
snMRnBUV+B9IY1xSDhKssfsc9Tuip3EHKz9BxhwGEpbhxWKRQ0gtcVGDCOzRcScR
MuaazYqbu2XB0Z26Pv2BRiWKAp2dlx6l3DbAQmOcT2g8iqGeKcmz4lBcQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ+70iT73XPQVb4ylBFrcfuRJPAMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuGaM4lg
PqvNhuqiSIJXc3nNMLJW5y0Wabe4hg1BdX5JjGYqHcbJZPoROW7l81GvzOESmV4K
NqxwxbXD+HwCdaJ6rXfrBMBVrCdn8xTr/1E6YjrR4BMZriJvJJrgjqKmFQsqd6HI
fKb485vRQhu7dH19A32DZo5FjyqmbWmlK6hUiSMnNBOLESa3Gn8YFjpxWg0s6/ta
aFkDeY8U/ByyGZ9beGAtHNdK2ElU8v3SvReBOgMsHedwOyJ8WA/A18ac7hasa3G1
ASl+4OazTGiC9TMAWyTTWO4Y36c7KOXOAOgQjVdBymFz0xMJz4mxZGKwVLfMFF1Y
vdx911/3rI1kRA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:29 2026 by rpki-client