Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File:                     1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier:          uKbLlopMQOObevUyZQcP0qCLUQr27mRX9dNnz36/Ar0=
Subject key identifier:   07:36:89:CB:A0:78:A6:B9:46:0D:D4:A3:AE:46:07:AD:32:62:48:BB
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer:       /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial:       019D2772AD4A980625EA19B76474171B8ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number:          0C94
Signing time:             Thu 26 Mar 2026 00:01:59 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:59 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:59 +0000
Files and hashes:         1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: 6ZMmInYNghLhvPUs7OYPhoTtP+IxrrtgHhPAObEXZRg=)
                          2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:ad:4a:98:06:25:ea:19:b7:64:74:17:1b:8a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
        Validity
            Not Before: Mar 26 00:01:59 2026 GMT
            Not After : Mar 27 00:01:59 2026 GMT
        Subject: CN=073689cba078a6b9460dd4a3ae4607ad326248bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:24:2d:a9:36:6c:9e:5f:00:85:ec:46:60:
                    af:05:c5:f1:a5:49:23:b3:d5:7b:e5:e1:d2:1e:37:
                    ca:89:3d:7b:d1:c7:0b:2b:75:f0:b4:79:72:87:41:
                    55:7c:6e:56:f5:34:a7:6d:b0:ed:d6:d0:f9:90:54:
                    24:d0:f1:8e:29:8c:54:77:ac:43:4c:5b:ed:73:f9:
                    8a:2a:e3:e3:ee:6e:0a:ce:33:9c:df:17:43:32:9c:
                    85:b4:27:98:a8:9b:19:0e:94:9e:37:25:ef:9e:62:
                    15:82:d9:29:45:33:60:b2:b0:d6:b0:3c:fa:1f:83:
                    e6:5c:3a:57:22:7f:57:68:82:a3:b2:de:75:bf:35:
                    d0:60:5a:87:4d:e1:83:c3:6b:37:72:04:d7:0b:ba:
                    5b:f3:76:db:1c:72:63:11:95:1a:fb:50:f4:09:35:
                    48:8a:98:43:12:c5:99:b6:09:d8:89:c4:a3:be:bb:
                    36:e8:d8:13:82:77:5e:5b:3b:52:52:0e:d0:d6:65:
                    1c:78:75:0c:b2:dc:0d:e2:93:cd:68:8d:96:9d:d3:
                    da:5a:b9:cb:a6:07:58:32:21:ee:0c:a8:c2:f5:0a:
                    ef:0d:3d:ea:2b:b8:35:95:2e:c0:7c:50:84:e6:8b:
                    0a:92:2d:ea:eb:3e:ce:cb:39:a6:93:e6:84:00:58:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:89:CB:A0:78:A6:B9:46:0D:D4:A3:AE:46:07:AD:32:62:48:BB
            X509v3 Authority Key Identifier:
                keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:3d:0f:bc:3d:a7:f5:69:eb:a8:42:52:45:da:65:49:4c:
         64:2f:a6:f6:3e:e3:b5:a5:10:32:19:f4:f6:d0:35:c1:ad:6d:
         89:f4:17:08:34:bf:b7:4c:f9:ec:13:c3:c4:bf:a1:85:ca:15:
         c9:65:ad:fa:e0:51:e3:f8:3b:31:2c:cd:27:6a:d0:60:cd:48:
         cb:66:18:6f:4f:30:00:18:71:ca:7b:5c:a5:a7:37:f0:f5:80:
         74:21:b6:df:8e:d8:5d:94:6e:a6:27:1a:a1:d9:4d:e4:9f:6c:
         b9:1a:0a:9a:06:6f:a1:11:6e:b7:00:59:2a:3b:2f:43:df:c7:
         d7:b9:a3:de:ee:96:b0:65:3c:4e:60:11:04:64:f5:4f:f6:1c:
         7a:12:48:92:9b:18:08:84:fa:98:44:2d:6a:22:6b:b6:9d:00:
         34:01:e9:c4:5a:5d:66:20:6b:e6:09:e0:f7:aa:2b:4d:84:db:
         e0:40:4d:a5:66:df:ba:09:81:f3:66:51:28:7d:c5:57:e9:01:
         c4:d7:1d:1b:02:df:85:4b:c6:a7:f1:70:4e:2a:4d:c2:1a:50:
         45:81:0c:e5:8c:15:3c:ab:3e:40:75:c1:20:6a:ae:a4:ad:3f:
         97:29:00:51:19:83:d0:8e:6a:74:9b:5a:af:32:b3:84:a6:bf:
         60:36:a7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncq1KmAYl6hm3ZHQXG4rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0
MTJjODAwHhcNMjYwMzI2MDAwMTU5WhcNMjYwMzI3MDAwMTU5WjAzMTEwLwYDVQQD
EygwNzM2ODljYmEwNzhhNmI5NDYwZGQ0YTNhZTQ2MDdhZDMyNjI0OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIIkLak2bJ5fAIXsRmCvBcXxpUkj
s9V75eHSHjfKiT170ccLK3XwtHlyh0FVfG5W9TSnbbDt1tD5kFQk0PGOKYxUd6xD
TFvtc/mKKuPj7m4KzjOc3xdDMpyFtCeYqJsZDpSeNyXvnmIVgtkpRTNgsrDWsDz6
H4PmXDpXIn9XaIKjst51vzXQYFqHTeGDw2s3cgTXC7pb83bbHHJjEZUa+1D0CTVI
iphDEsWZtgnYicSjvrs26NgTgndeWztSUg7Q1mUceHUMstwN4pPNaI2WndPaWrnL
pgdYMiHuDKjC9QrvDT3qK7g1lS7AfFCE5osKki3q6z7Oyzmmk+aEAFjadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc2icugeKa5Rg3Uo65GB60yYki7MB8GA1UdIwQY
MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt
MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi
LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcno9D7w9
p/Vp66hCUkXaZUlMZC+m9j7jtaUQMhn09tA1wa1tifQXCDS/t0z57BPDxL+hhcoV
yWWt+uBR4/g7MSzNJ2rQYM1Iy2YYb08wABhxyntcpac38PWAdCG2347YXZRupica
odlN5J9suRoKmgZvoRFutwBZKjsvQ9/H17mj3u6WsGU8TmARBGT1T/YcehJIkpsY
CIT6mEQtaiJrtp0ANAHpxFpdZiBr5gng96orTYTb4EBNpWbfugmB82ZRKH3FV+kB
xNcdGwLfhUvGp/FwTipNwhpQRYEM5YwVPKs+QHXBIGqupK0/lykAURmD0I5qdJta
rzKzhKa/YDansw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:55 2026 by rpki-client