Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          eLuVVVlaeWdQPbgEGNB+DrTxPZYXYnY6wuEKEOmRttE=
Subject key identifier:   2F:84:57:89:12:17:D0:48:83:95:11:79:53:9E:85:E3:78:25:01:8C
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       019D26CD598AF77D5564F2B7707E61F292B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 21:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:24 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: qQrHcn12Cvw0Fgv+L2w3vfTq9FwRhRj5CvntyDhSZy4=)
                          2: dao3SWGJzmepZe0dSnkxYr7fl80.roa (hash: uVlf5UoF7g9PK+9JqyskFv6IV1mCuEzrCLxi9t1Xg1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:59:8a:f7:7d:55:64:f2:b7:70:7e:61:f2:92:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Mar 25 21:01:24 2026 GMT
            Not After : Mar 26 21:01:24 2026 GMT
        Subject: CN=2f8457891217d04883951179539e85e37825018c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:ce:cb:91:08:71:62:87:09:79:c6:1f:66:
                    a2:11:e3:17:6f:d3:ec:75:5c:90:fc:41:33:0a:9f:
                    df:dc:e1:5e:e3:f2:77:0c:ef:63:82:97:73:1c:d3:
                    90:e7:c6:da:87:4f:22:2a:18:20:2f:0b:27:4e:d4:
                    72:6d:c8:6c:c3:f3:e2:51:48:63:fa:e5:9b:32:52:
                    ce:dc:a4:0e:fe:d1:10:14:30:05:24:c9:e3:94:f2:
                    0e:75:71:a9:85:77:30:87:92:52:20:fa:01:6b:65:
                    f9:6f:f0:61:2c:28:40:a8:ce:6c:b8:2f:e5:56:19:
                    fc:78:dd:55:5b:a0:ad:1c:9d:d2:c0:f8:d9:ed:bc:
                    ea:46:e2:06:51:c2:e3:a4:94:f4:48:83:15:87:79:
                    3b:81:d4:24:5f:bb:29:08:2d:08:08:b6:c8:1b:a7:
                    b4:b9:21:16:ff:6e:fd:01:48:52:c7:1d:e5:8c:a7:
                    bf:65:1d:40:f3:b9:bf:53:5e:bf:2f:4f:7a:18:61:
                    3a:a9:6f:23:bb:38:88:6e:c1:ae:54:65:9b:c6:9a:
                    02:c3:02:bc:60:5a:23:40:0b:9f:8d:9f:50:05:22:
                    e9:28:2d:0b:5a:1c:78:f9:65:03:4f:04:64:03:e5:
                    7c:d5:11:3d:64:f2:8f:6f:0f:5e:c9:b7:0d:31:ec:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:57:89:12:17:D0:48:83:95:11:79:53:9E:85:E3:78:25:01:8C
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:99:57:29:7c:a1:31:a3:16:d3:97:64:8f:6f:11:c2:70:
         8d:51:6a:16:29:88:f2:43:84:c3:77:83:fa:4d:33:be:3b:0e:
         17:40:c8:b6:d0:8b:a1:a1:a2:9a:cd:9f:20:e8:a6:1e:69:37:
         dd:33:f7:cd:d9:ac:34:1e:4d:69:1c:a3:40:8a:d3:ed:50:c8:
         31:32:d8:9b:c7:05:7f:d3:e6:c1:e9:d6:cf:e8:8f:9c:76:ad:
         46:92:15:cb:f8:62:28:1d:ab:e0:3d:a5:c8:15:56:84:9e:e6:
         9f:df:87:40:a7:89:38:27:8c:8c:3a:29:8f:b3:c6:dd:59:cb:
         c3:22:e1:f1:09:b3:11:e1:fe:22:1b:65:ba:60:b1:97:03:5d:
         65:56:9e:53:55:0a:ac:cd:57:86:a8:4a:47:3b:61:33:d4:7c:
         59:77:d0:8f:a6:67:69:c1:21:a3:6b:e1:d4:e1:d3:5b:70:74:
         e9:59:80:68:42:17:08:8a:a6:cf:a3:f5:7b:3d:f6:64:8f:ea:
         6a:8e:bd:da:46:11:92:44:59:9d:4e:d1:37:5b:91:de:f3:af:
         47:08:3d:39:07:3c:c1:d7:03:06:42:4d:51:22:e0:80:dc:3b:
         54:3f:14:54:0e:78:68:48:44:7e:0e:e2:c1:e0:6a:5d:59:46:
         78:d3:9f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVmK931VZPK3cH5h8pK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4
ZDFmZTkwHhcNMjYwMzI1MjEwMTI0WhcNMjYwMzI2MjEwMTI0WjAzMTEwLwYDVQQD
EygyZjg0NTc4OTEyMTdkMDQ4ODM5NTExNzk1MzllODVlMzc4MjUwMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswrOy5EIcWKHCXnGH2aiEeMXb9Ps
dVyQ/EEzCp/f3OFe4/J3DO9jgpdzHNOQ58bah08iKhggLwsnTtRybchsw/PiUUhj
+uWbMlLO3KQO/tEQFDAFJMnjlPIOdXGphXcwh5JSIPoBa2X5b/BhLChAqM5suC/l
Vhn8eN1VW6CtHJ3SwPjZ7bzqRuIGUcLjpJT0SIMVh3k7gdQkX7spCC0ICLbIG6e0
uSEW/279AUhSxx3ljKe/ZR1A87m/U16/L096GGE6qW8juziIbsGuVGWbxpoCwwK8
YFojQAufjZ9QBSLpKC0LWhx4+WUDTwRkA+V81RE9ZPKPbw9eybcNMezGTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+EV4kSF9BIg5UReVOeheN4JQGMMB8GA1UdIwQY
MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt
NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3
LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPyZVyl8
oTGjFtOXZI9vEcJwjVFqFimI8kOEw3eD+k0zvjsOF0DIttCLoaGims2fIOimHmk3
3TP3zdmsNB5NaRyjQIrT7VDIMTLYm8cFf9PmwenWz+iPnHatRpIVy/hiKB2r4D2l
yBVWhJ7mn9+HQKeJOCeMjDopj7PG3VnLwyLh8QmzEeH+IhtlumCxlwNdZVaeU1UK
rM1XhqhKRzthM9R8WXfQj6ZnacEho2vh1OHTW3B06VmAaEIXCIqmz6P1ez32ZI/q
ao692kYRkkRZnU7RN1uR3vOvRwg9OQc8wdcDBkJNUSLggNw7VD8UVA54aEhEfg7i
weBqXVlGeNOfvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:04 2026 by rpki-client