Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          zNty9+/aly5MQYKLi1YLUaDuK7SVRxAwsKx08P5JfhI=
Subject key identifier:   02:AB:C3:8E:28:F6:DA:98:15:26:64:03:6C:53:C8:E6:B8:55:84:DD
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019D2B8585B2624666F94FF0B562C6FEEB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 19:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:03 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: YqDLEKOkpI41uVYiyDXdn+5rOASIg3FA5K75LxEZ724=)
                          6: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:85:b2:62:46:66:f9:4f:f0:b5:62:c6:fe:eb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Mar 26 19:01:03 2026 GMT
            Not After : Mar 27 19:01:03 2026 GMT
        Subject: CN=02abc38e28f6da98152664036c53c8e6b85584dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:9c:42:dd:24:a6:30:84:c2:ad:6b:7d:a5:
                    7e:df:8e:83:61:7c:c8:96:c5:7a:a8:e6:79:9c:59:
                    f2:87:e0:65:15:f8:61:29:6f:0e:fc:57:30:47:ec:
                    8a:9a:ba:00:85:13:2d:32:ae:b7:c2:9b:91:27:56:
                    d2:18:0c:b7:78:9d:f5:54:fe:50:91:de:d6:99:1b:
                    7d:ff:5d:ff:e0:68:f6:8d:d2:60:ef:11:98:d3:2f:
                    02:d1:48:2e:29:d5:84:af:61:37:72:ea:71:09:41:
                    22:4f:a5:ba:20:b9:4a:23:a5:d2:e8:e7:e5:35:08:
                    d2:f1:52:87:88:7b:53:86:dd:48:ac:fe:3d:0a:9e:
                    e7:b8:91:e1:bc:c7:05:0a:f2:e4:5f:47:0c:aa:04:
                    09:2f:bf:35:3f:87:c7:fd:3e:7e:3f:dc:bf:02:e8:
                    a5:2d:59:92:81:8e:99:f3:5a:0d:93:53:50:49:91:
                    b2:d4:f9:78:41:35:c4:cc:4b:23:73:83:e5:8c:45:
                    71:b1:07:60:af:fd:4c:97:bd:6f:91:a4:9e:bc:77:
                    aa:bf:a3:1b:9e:8c:c7:24:19:30:6c:28:c1:b8:45:
                    88:0a:49:53:94:69:5b:62:a8:0c:61:a7:52:d8:f4:
                    6c:38:be:fc:42:e7:0a:b9:4a:2d:69:48:9e:83:5e:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:C3:8E:28:F6:DA:98:15:26:64:03:6C:53:C8:E6:B8:55:84:DD
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:99:98:7d:23:f4:51:e5:2b:de:d5:22:6b:c9:25:29:e9:
         46:4c:b2:04:f1:98:da:20:a6:82:15:4a:b0:42:56:06:2c:c7:
         81:87:37:8c:be:49:3c:02:b8:a8:83:65:45:e1:57:49:c1:ff:
         88:52:35:50:8f:3c:a4:09:cb:fb:34:16:5e:c7:ce:ce:38:0e:
         cb:a7:02:f5:59:0a:c5:e6:b6:17:4b:df:f0:c2:a8:4d:27:f8:
         53:1b:42:ef:91:1c:13:ca:09:62:0d:91:07:4f:c2:25:60:43:
         bc:f0:67:1b:8a:4c:5c:ce:e0:d6:55:90:26:d1:8f:39:f3:56:
         c4:57:46:35:f0:f4:9c:b2:66:1d:0a:c8:35:32:22:2e:2d:1d:
         c1:26:56:70:b5:69:59:f1:10:8b:a1:dc:4d:58:5a:4f:ed:04:
         e1:b7:81:ea:b2:6e:90:5a:86:11:97:fd:46:82:26:93:0e:76:
         8e:69:a7:50:6a:00:29:85:ad:27:71:a8:1b:a7:54:02:5d:80:
         a0:8f:f9:38:84:ea:29:75:57:84:4c:92:e9:0d:9a:33:86:96:
         f7:f2:fc:a0:e6:01:78:54:ac:40:7f:b8:01:b3:99:dd:29:ca:
         ce:08:4d:d3:ce:bc:4c:7c:2f:ec:fa:96:7a:50:e2:8d:79:3d:
         08:fa:7c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhYWyYkZm+U/wtWLG/usfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3
YzNkZjUwHhcNMjYwMzI2MTkwMTAzWhcNMjYwMzI3MTkwMTAzWjAzMTEwLwYDVQQD
EygwMmFiYzM4ZTI4ZjZkYTk4MTUyNjY0MDM2YzUzYzhlNmI4NTU4NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz22cQt0kpjCEwq1rfaV+346DYXzI
lsV6qOZ5nFnyh+BlFfhhKW8O/FcwR+yKmroAhRMtMq63wpuRJ1bSGAy3eJ31VP5Q
kd7WmRt9/13/4Gj2jdJg7xGY0y8C0UguKdWEr2E3cupxCUEiT6W6ILlKI6XS6Ofl
NQjS8VKHiHtTht1IrP49Cp7nuJHhvMcFCvLkX0cMqgQJL781P4fH/T5+P9y/Auil
LVmSgY6Z81oNk1NQSZGy1Pl4QTXEzEsjc4PljEVxsQdgr/1Ml71vkaSevHeqv6Mb
nozHJBkwbCjBuEWICklTlGlbYqgMYadS2PRsOL78QucKuUotaUieg16YyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKrw44o9tqYFSZkA2xTyOa4VYTdMB8GA1UdIwQY
MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt
Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4
LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS6ZmH0j
9FHlK97VImvJJSnpRkyyBPGY2iCmghVKsEJWBizHgYc3jL5JPAK4qINlReFXScH/
iFI1UI88pAnL+zQWXsfOzjgOy6cC9VkKxea2F0vf8MKoTSf4UxtC75EcE8oJYg2R
B0/CJWBDvPBnG4pMXM7g1lWQJtGPOfNWxFdGNfD0nLJmHQrINTIiLi0dwSZWcLVp
WfEQi6HcTVhaT+0E4beB6rJukFqGEZf9RoImkw52jmmnUGoAKYWtJ3GoG6dUAl2A
oI/5OITqKXVXhEyS6Q2aM4aW9/L8oOYBeFSsQH+4AbOZ3SnKzghN0868THwv7PqW
elDijXk9CPp8mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:11 2026 by rpki-client