Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File:                     iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier:          5D6kTFgwCeci40IqBkd7/fGOzcbx2R/pYcsKCyKxzNI=
Subject key identifier:   C2:41:B8:C8:02:AD:A5:1E:01:E1:22:9E:FD:60:08:7A:C2:AC:CD:E6
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer:       /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial:       019D284E561B1A0B41669668841BC500D3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number:          0884
Signing time:             Thu 26 Mar 2026 04:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:55 +0000
Files and hashes:         1: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (hash: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0=)
                          2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: N2vFg06lXlOD+E/Yp7rs2+NXXtoo7FKIP46Yq5GbRcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:56:1b:1a:0b:41:66:96:68:84:1b:c5:00:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
        Validity
            Not Before: Mar 26 04:01:55 2026 GMT
            Not After : Mar 27 04:01:55 2026 GMT
        Subject: CN=c241b8c802ada51e01e1229efd60087ac2accde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:2e:b2:5e:66:a1:27:11:52:44:f1:87:4a:
                    52:7d:fc:80:ee:7d:9a:b7:44:bf:3c:8b:6f:2b:bc:
                    05:34:15:0d:a7:b0:5d:d2:0e:e9:2d:7b:c1:cf:02:
                    1e:a3:b7:e5:ba:34:08:3d:e5:7e:8a:8e:38:c4:e6:
                    4b:26:51:6e:93:f5:9b:96:8e:c0:93:ef:12:c1:36:
                    0d:53:35:7c:58:fb:80:8f:df:d7:42:6a:40:e2:8c:
                    ee:c3:2a:bf:39:c1:93:07:26:fd:a1:6f:6d:ca:e6:
                    b2:77:e5:9f:ee:45:3e:b2:c2:f8:e8:29:fd:d8:1f:
                    d2:c2:38:b8:9c:75:73:7c:28:40:14:73:8f:35:a4:
                    18:49:00:27:62:ad:83:e7:d8:99:ae:ac:56:68:a3:
                    f3:a0:5e:f2:c5:d2:cd:a1:28:ce:d8:92:43:73:d7:
                    ef:82:b0:22:06:2a:0d:56:1e:0d:1f:77:e8:28:9a:
                    29:b2:3b:3a:3b:6e:02:7f:ab:b2:e1:38:b4:2a:c0:
                    e0:aa:7c:8f:ac:bd:1b:c9:50:78:84:42:ea:65:92:
                    62:00:c7:8f:c7:f8:bc:6e:81:53:d8:e5:c8:4a:42:
                    11:41:83:b3:bc:06:13:44:58:60:20:19:5c:76:70:
                    e4:17:13:e4:d9:5f:af:e5:8f:00:cd:7d:26:d1:dd:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:B8:C8:02:AD:A5:1E:01:E1:22:9E:FD:60:08:7A:C2:AC:CD:E6
            X509v3 Authority Key Identifier:
                keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:40:b7:c1:0b:7f:05:9f:65:80:a7:20:32:02:bf:68:2f:2b:
         ea:49:00:1b:bb:7f:31:b5:bb:55:b7:be:66:c1:22:00:3f:2a:
         4f:e2:96:60:ba:64:d8:95:2d:66:c2:f3:a7:c9:52:cd:6a:b8:
         36:03:17:40:bd:fa:45:4a:45:73:94:57:f2:48:ae:0b:e5:f3:
         b8:12:6f:78:5c:f9:3c:5c:33:18:4c:04:92:4d:d2:7a:46:94:
         c2:95:90:61:fe:66:3b:b5:4a:d3:5c:99:dc:00:d1:c3:b3:ce:
         21:03:2b:fe:bc:09:94:1b:a1:71:ca:c4:f2:6b:28:45:2c:b1:
         3f:71:96:19:5b:8b:b7:92:cd:54:b3:a2:07:d8:b2:30:97:6e:
         1c:84:01:b0:67:0c:c8:74:bb:33:ae:3e:c1:2e:a9:fa:9e:1c:
         b2:34:e3:28:f6:60:e2:ea:d5:da:83:36:ce:c7:a7:10:93:2a:
         57:fa:88:8a:06:fa:e0:e5:fb:07:7f:6d:2c:42:35:a1:00:8c:
         78:6e:d7:c0:87:1a:3f:2c:af:ef:19:9a:ae:bb:08:87:b2:b4:
         fb:b3:a8:f9:4c:c7:55:d1:aa:e4:9b:b7:8c:85:b5:aa:25:90:
         19:45:ab:f3:47:f5:62:67:24:ac:3b:70:67:76:b2:09:d7:dd:
         3c:f0:34:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlYbGgtBZpZohBvFANPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh
NmU5ZDYwHhcNMjYwMzI2MDQwMTU1WhcNMjYwMzI3MDQwMTU1WjAzMTEwLwYDVQQD
EyhjMjQxYjhjODAyYWRhNTFlMDFlMTIyOWVmZDYwMDg3YWMyYWNjZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQkusl5moScRUkTxh0pSffyA7n2a
t0S/PItvK7wFNBUNp7Bd0g7pLXvBzwIeo7flujQIPeV+io44xOZLJlFuk/Wblo7A
k+8SwTYNUzV8WPuAj9/XQmpA4ozuwyq/OcGTByb9oW9tyuayd+Wf7kU+ssL46Cn9
2B/Swji4nHVzfChAFHOPNaQYSQAnYq2D59iZrqxWaKPzoF7yxdLNoSjO2JJDc9fv
grAiBioNVh4NH3foKJopsjs6O24Cf6uy4Ti0KsDgqnyPrL0byVB4hELqZZJiAMeP
x/i8boFT2OXISkIRQYOzvAYTRFhgIBlcdnDkFxPk2V+v5Y8AzX0m0d34IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJBuMgCraUeAeEinv1gCHrCrM3mMB8GA1UdIwQY
MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt
Zjg1ZjcyMWZiMWI4LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4
LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEC3wQt/
BZ9lgKcgMgK/aC8r6kkAG7t/MbW7Vbe+ZsEiAD8qT+KWYLpk2JUtZsLzp8lSzWq4
NgMXQL36RUpFc5RX8kiuC+XzuBJveFz5PFwzGEwEkk3SekaUwpWQYf5mO7VK01yZ
3ADRw7POIQMr/rwJlBuhccrE8msoRSyxP3GWGVuLt5LNVLOiB9iyMJduHIQBsGcM
yHS7M64+wS6p+p4csjTjKPZg4urV2oM2zsenEJMqV/qIigb64OX7B39tLEI1oQCM
eG7XwIcaPyyv7xmarrsIh7K0+7Oo+UzHVdGq5Ju3jIW1qiWQGUWr80f1YmckrDtw
Z3ayCdfdPPA0xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:01 2026 by rpki-client