Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          10ia/Y3Gbs2i00bDUsCfyNTaUc4pegRskbpgGsXIOWc=
Subject key identifier:   86:D5:E0:3A:56:14:81:B3:D9:88:E3:71:55:53:A4:DE:EE:34:DD:FE
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019D281647FEB8A31D306B0D04CD1D91814C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0F6E
Signing time:             Thu 26 Mar 2026 03:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:41 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: W3VEmly29GoPq51jCC7nXQTeBwN0PbnTLoRavMv5oCI=)
                          2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:47:fe:b8:a3:1d:30:6b:0d:04:cd:1d:91:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Mar 26 03:00:41 2026 GMT
            Not After : Mar 27 03:00:41 2026 GMT
        Subject: CN=86d5e03a561481b3d988e3715553a4deee34ddfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:16:1a:8f:54:c7:0b:05:14:25:d4:96:b1:
                    b3:09:9a:04:0d:d8:0e:60:49:8f:5e:ad:93:c0:06:
                    d2:b8:a5:8a:80:6b:84:17:14:71:b1:dd:fa:5f:72:
                    4b:0f:31:b1:1b:75:9d:1a:ae:58:32:1f:71:43:b0:
                    8e:28:db:44:26:c7:bc:91:de:a4:f1:a3:97:d0:a6:
                    6b:d7:64:df:0f:1f:c9:94:70:7b:3b:91:54:6d:bc:
                    8e:14:6f:c1:a4:87:8d:d5:5b:e1:33:32:c7:22:1e:
                    d2:3e:d5:6b:cc:6a:c1:7a:48:25:69:ed:93:8f:d3:
                    77:0d:de:b6:51:96:9e:d0:d2:9b:75:28:30:5d:4c:
                    08:dc:aa:14:4f:13:18:f2:91:26:4b:6d:c2:9e:34:
                    fe:0a:c1:86:ba:ad:98:0a:48:25:99:d8:e4:75:f8:
                    88:db:31:c6:98:2a:2f:42:d9:56:18:fd:63:84:19:
                    61:54:52:d8:80:8c:6a:ef:10:69:38:ae:a5:74:4a:
                    81:27:c0:b1:a2:cc:5b:06:f5:74:8e:c4:2c:f9:61:
                    f3:d0:04:d5:b1:4b:91:41:a6:92:d2:18:c4:65:35:
                    6d:07:c1:19:f8:30:95:c7:a7:40:8c:5a:2f:52:5e:
                    68:96:17:0a:7e:ae:bb:66:82:d4:9b:ca:b6:5d:27:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:E0:3A:56:14:81:B3:D9:88:E3:71:55:53:A4:DE:EE:34:DD:FE
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:56:eb:ea:64:b3:5e:e3:53:b3:ef:6b:20:eb:90:bc:7b:
         dc:60:81:09:50:e0:37:47:e3:73:87:4b:77:cc:89:00:d4:16:
         a4:f7:f1:60:11:8a:a0:c9:7f:c4:6b:c4:36:46:84:a2:33:06:
         8f:ca:ed:ed:cb:43:d2:a5:99:f5:a1:71:40:bc:65:ed:dd:e9:
         49:2c:07:a7:3b:18:1d:b1:f1:f9:08:ac:f1:b0:00:16:b2:c8:
         47:6f:ba:26:1b:4b:d4:e8:69:67:f6:0c:13:26:d1:31:2a:a2:
         4e:22:83:76:23:e8:67:95:b2:0c:c0:58:10:64:c9:50:d5:c9:
         91:43:96:ea:59:bf:3c:1e:5f:4f:44:a9:fc:b6:2e:b2:e8:79:
         7b:23:70:c0:c3:df:1b:11:62:7b:81:71:40:f4:61:36:cb:e1:
         12:7d:bd:87:67:55:6d:53:26:c0:1d:c8:72:60:35:4f:97:0e:
         fa:a3:72:ac:5f:1a:6e:cf:67:d8:d1:ef:f3:9e:4c:26:2b:06:
         72:94:2f:a6:1b:24:3a:00:c0:d0:bd:a4:d3:51:47:ba:98:0f:
         60:f3:70:48:57:de:67:17:30:d4:cd:45:2e:cd:1c:16:4b:94:
         fa:41:40:0a:a6:ba:b6:03:6a:95:41:5a:1c:1b:7f:80:90:47:
         60:15:9c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkf+uKMdMGsNBM0dkYFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjYwMzI2MDMwMDQxWhcNMjYwMzI3MDMwMDQxWjAzMTEwLwYDVQQD
Eyg4NmQ1ZTAzYTU2MTQ4MWIzZDk4OGUzNzE1NTUzYTRkZWVlMzRkZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydQWGo9UxwsFFCXUlrGzCZoEDdgO
YEmPXq2TwAbSuKWKgGuEFxRxsd36X3JLDzGxG3WdGq5YMh9xQ7COKNtEJse8kd6k
8aOX0KZr12TfDx/JlHB7O5FUbbyOFG/BpIeN1VvhMzLHIh7SPtVrzGrBekglae2T
j9N3Dd62UZae0NKbdSgwXUwI3KoUTxMY8pEmS23CnjT+CsGGuq2YCkglmdjkdfiI
2zHGmCovQtlWGP1jhBlhVFLYgIxq7xBpOK6ldEqBJ8CxosxbBvV0jsQs+WHz0ATV
sUuRQaaS0hjEZTVtB8EZ+DCVx6dAjFovUl5olhcKfq67ZoLUm8q2XScpfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbV4DpWFIGz2YjjcVVTpN7uNN3+MB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvNW6+pk
s17jU7PvayDrkLx73GCBCVDgN0fjc4dLd8yJANQWpPfxYBGKoMl/xGvENkaEojMG
j8rt7ctD0qWZ9aFxQLxl7d3pSSwHpzsYHbHx+Qis8bAAFrLIR2+6JhtL1OhpZ/YM
EybRMSqiTiKDdiPoZ5WyDMBYEGTJUNXJkUOW6lm/PB5fT0Sp/LYusuh5eyNwwMPf
GxFie4FxQPRhNsvhEn29h2dVbVMmwB3IcmA1T5cO+qNyrF8abs9n2NHv855MJisG
cpQvphskOgDA0L2k01FHupgPYPNwSFfeZxcw1M1FLs0cFkuU+kFACqa6tgNqlUFa
HBt/gJBHYBWcRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:07 2026 by rpki-client