Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File:                     AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier:          87x2SQ6Kc3uL9anHAEfThM9BwlzTxXvWj48NXXkztK8=
Subject key identifier:   83:55:C3:7F:2A:BD:3D:F9:DE:F6:74:60:7D:31:DE:81:37:EA:A5:E7
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       019D25F1F4EA8D158DE2DC5C2BACBA4BD03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number:          0BEA
Signing time:             Wed 25 Mar 2026 17:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:46 +0000
Files and hashes:         1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
                          2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
                          3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: bXGGrh4AgSwxN6pBLmyCxYfxasALW53ltTUkIaNwqFg=)
                          4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
                          5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
                          6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
                          7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
                          8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
                          9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:f4:ea:8d:15:8d:e2:dc:5c:2b:ac:ba:4b:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Mar 25 17:01:46 2026 GMT
            Not After : Mar 26 17:01:46 2026 GMT
        Subject: CN=8355c37f2abd3df9def674607d31de8137eaa5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:5b:47:83:88:fe:85:09:e6:2a:27:a7:28:
                    a1:ee:3c:69:ba:92:a4:dd:9d:50:9e:64:fd:ca:c6:
                    e1:07:c1:90:95:a7:a6:9e:b4:b3:aa:ba:e9:52:46:
                    e1:bb:a7:69:a2:b6:50:c8:73:02:fe:4a:f4:98:d9:
                    65:1e:47:71:55:3a:a6:0f:cc:68:25:e6:62:98:d7:
                    94:0a:c3:63:d9:ef:1c:38:9b:b8:71:22:18:a2:a9:
                    32:1f:90:1f:4c:e1:69:ac:fc:ff:60:7c:75:c3:84:
                    19:c7:7f:b8:3b:ec:c1:01:21:88:fa:5c:60:f3:35:
                    26:43:30:ce:d2:c3:c9:3c:92:20:95:53:d1:59:5d:
                    fd:0e:31:19:a2:fb:74:a9:ee:d7:67:a7:e6:97:1f:
                    a2:c2:c9:93:36:4c:71:f6:2c:d9:05:f3:ec:60:94:
                    27:8c:b1:6c:7d:dd:76:4c:ed:ae:5e:84:33:83:6e:
                    dc:01:e2:51:1e:97:3d:29:7e:02:fb:28:e0:a1:b9:
                    31:66:9a:9f:02:22:63:27:c7:52:56:b3:56:7f:39:
                    26:ea:c1:b7:5d:90:f7:63:a6:5e:dd:90:d2:6b:69:
                    66:a0:93:bc:d8:35:25:eb:2b:df:8f:d8:a5:dc:7c:
                    aa:75:9b:b0:9d:ac:bb:41:41:2a:a1:3b:cc:97:bc:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:C3:7F:2A:BD:3D:F9:DE:F6:74:60:7D:31:DE:81:37:EA:A5:E7
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:50:dc:f7:0d:c7:fa:a8:7a:ac:56:f5:6f:df:bb:a9:72:e6:
         d7:97:7a:0d:80:a0:75:83:6e:a0:c7:1a:dc:1a:23:97:99:27:
         e6:32:bc:11:cf:3e:17:e0:af:89:0a:07:cb:3a:7f:1d:b8:4d:
         db:7f:4c:b7:09:8e:ce:5e:ef:8d:5e:77:e1:4d:85:ce:db:9a:
         67:d9:55:32:fc:a4:ac:92:b2:f7:91:7a:43:5b:0d:f7:51:50:
         fe:30:80:b7:0b:b8:ce:98:46:9c:38:48:2e:e2:03:d5:83:76:
         51:97:02:1a:77:39:a0:77:07:42:5a:e9:e4:b4:8c:84:24:f1:
         3b:44:3f:25:fb:94:4b:2a:c2:40:2b:3e:bf:bc:2e:a2:bc:85:
         fc:c6:86:22:16:1c:c1:bb:01:ab:a2:b5:07:a2:38:be:5b:5d:
         74:29:b0:0f:86:0f:d0:24:79:b9:fc:f8:d0:de:d7:70:f5:3b:
         e9:d6:d1:0f:ee:1b:46:00:7c:fa:24:7d:72:ec:33:1a:cb:72:
         7c:27:2e:20:15:92:f5:a8:81:66:81:63:89:f3:9a:29:57:45:
         35:aa:40:b4:21:98:88:1d:dd:9d:51:73:d4:7a:00:8b:ac:26:
         05:02:fa:bb:2b:59:7a:85:dc:7b:15:de:91:cb:4e:84:b0:1a:
         9b:7a:29:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8fTqjRWN4txcK6y6S9A6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjYwMzI1MTcwMTQ2WhcNMjYwMzI2MTcwMTQ2WjAzMTEwLwYDVQQD
Eyg4MzU1YzM3ZjJhYmQzZGY5ZGVmNjc0NjA3ZDMxZGU4MTM3ZWFhNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg1bR4OI/oUJ5ionpyih7jxpupKk
3Z1QnmT9ysbhB8GQlaemnrSzqrrpUkbhu6dporZQyHMC/kr0mNllHkdxVTqmD8xo
JeZimNeUCsNj2e8cOJu4cSIYoqkyH5AfTOFprPz/YHx1w4QZx3+4O+zBASGI+lxg
8zUmQzDO0sPJPJIglVPRWV39DjEZovt0qe7XZ6fmlx+iwsmTNkxx9izZBfPsYJQn
jLFsfd12TO2uXoQzg27cAeJRHpc9KX4C+yjgobkxZpqfAiJjJ8dSVrNWfzkm6sG3
XZD3Y6Ze3ZDSa2lmoJO82DUl6yvfj9il3HyqdZuwnay7QUEqoTvMl7x7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINVw38qvT353vZ0YH0x3oE36qXnMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFDc9w3H
+qh6rFb1b9+7qXLm15d6DYCgdYNuoMca3Bojl5kn5jK8Ec8+F+CviQoHyzp/HbhN
239MtwmOzl7vjV534U2FztuaZ9lVMvykrJKy95F6Q1sN91FQ/jCAtwu4zphGnDhI
LuID1YN2UZcCGnc5oHcHQlrp5LSMhCTxO0Q/JfuUSyrCQCs+v7wuoryF/MaGIhYc
wbsBq6K1B6I4vltddCmwD4YP0CR5ufz40N7XcPU76dbRD+4bRgB8+iR9cuwzGsty
fCcuIBWS9aiBZoFjifOaKVdFNapAtCGYiB3dnVFz1HoAi6wmBQL6uytZeoXcexXe
kctOhLAam3opIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:20 2026 by rpki-client