Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          8jHYR46Rt+sZSvmnIofxkLMD4gJ88sWdRsbqX2eMlo0=
Subject key identifier:   74:D2:35:B5:70:D9:BA:B0:EF:D6:EB:F3:5E:7D:F3:1C:53:99:E8:BD
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       019D27724A6EFF74C6C2F2AA5C0FA00DC5CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 00:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:34 +0000
Files and hashes:         1: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (hash: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM=)
                          2: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: P3GN9SiSMRibqv3gXR1E4LQhj/lZKgZ36cKIfxvGnA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:4a:6e:ff:74:c6:c2:f2:aa:5c:0f:a0:0d:c5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Mar 26 00:01:34 2026 GMT
            Not After : Mar 27 00:01:34 2026 GMT
        Subject: CN=74d235b570d9bab0efd6ebf35e7df31c5399e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:be:c8:62:24:b3:33:c7:db:e2:01:9f:36:
                    02:96:d3:94:20:5c:7a:78:58:39:a5:72:2b:77:2f:
                    bf:e7:c4:c3:f5:6f:a9:58:34:ef:b6:c6:0a:86:6b:
                    74:e5:f6:7a:e5:87:3c:33:be:e8:bf:06:b2:38:75:
                    c2:8e:ea:96:36:46:2e:18:81:9c:d7:6e:d6:8d:06:
                    90:48:d0:6a:4c:40:f5:da:de:b6:9c:01:c8:d9:d7:
                    44:d5:77:65:e4:71:ac:9e:69:5d:da:ae:d5:32:e1:
                    5f:c7:8e:4a:5e:ac:4d:b4:79:cb:54:26:59:cd:a0:
                    7e:12:20:0e:db:1c:41:ec:b3:e5:ad:d1:5b:08:48:
                    60:6d:e6:54:10:bc:45:c2:42:b2:06:6b:c1:3c:91:
                    8b:5f:6b:ab:9d:ce:79:5b:13:ce:66:48:7e:ef:bd:
                    75:a5:ca:b1:fa:ef:dd:25:25:c3:20:75:9f:20:a8:
                    03:47:16:1b:51:48:d2:91:60:6a:d2:ef:ab:cb:d9:
                    d4:31:93:82:01:a3:13:8e:35:d0:1e:e2:92:8c:56:
                    e7:5f:1a:95:a5:e8:d0:d0:e3:ca:81:14:9d:1d:97:
                    bc:24:28:9e:e7:0b:06:1d:67:89:e1:32:0a:ad:e4:
                    f8:9c:a5:dd:91:ee:28:b3:21:e4:ab:cb:79:a1:18:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:35:B5:70:D9:BA:B0:EF:D6:EB:F3:5E:7D:F3:1C:53:99:E8:BD
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:e9:58:d8:a9:48:5f:35:78:5f:bd:33:b7:90:1c:bd:1a:
         f9:35:46:53:e0:c2:0e:7a:79:40:fb:77:a2:ab:d9:9d:13:39:
         f0:c2:cd:43:1d:35:46:56:6b:0f:77:ca:95:7e:c7:f1:ad:3b:
         82:3e:16:4d:fb:a1:bf:6a:d0:bc:d6:32:0e:b0:44:ea:f8:12:
         c6:c9:0c:34:f8:1f:b3:e7:dd:cd:4b:7f:26:41:b3:e4:16:5f:
         11:56:7f:ea:43:6e:2a:68:e0:64:f6:f7:42:cd:ba:bd:76:e3:
         99:a5:d8:58:78:a0:75:20:07:91:65:37:65:c2:b4:93:d0:2a:
         3f:0d:87:0b:85:25:57:46:bc:11:5a:be:43:6a:43:16:e1:ab:
         3d:a9:18:86:bb:46:cb:e8:43:c4:23:e7:1f:94:15:ee:e3:13:
         c4:10:53:d4:ce:40:3b:8a:86:bc:57:65:15:52:27:fb:74:48:
         d3:6c:b7:17:bb:48:54:ef:0e:13:1c:aa:c2:9d:c0:5d:95:dc:
         53:bf:82:59:63:06:f2:c0:6c:6f:66:63:e9:f3:c1:b5:91:b1:
         a2:84:0f:0f:e8:19:35:df:0e:e0:48:a2:eb:00:ff:79:6a:27:
         19:7d:85:8b:df:d4:d4:fa:c6:bc:ae:85:68:12:db:0e:9d:f5:
         a2:d3:a0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckpu/3TGwvKqXA+gDcXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWU4MzgzMTJlMDRhZWY5Zjk1MzZlMjBjZDQxMjgzYTdi
OGI3N2IwHhcNMjYwMzI2MDAwMTM0WhcNMjYwMzI3MDAwMTM0WjAzMTEwLwYDVQQD
Eyg3NGQyMzViNTcwZDliYWIwZWZkNmViZjM1ZTdkZjMxYzUzOTllOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZK+yGIkszPH2+IBnzYCltOUIFx6
eFg5pXIrdy+/58TD9W+pWDTvtsYKhmt05fZ65Yc8M77ovwayOHXCjuqWNkYuGIGc
127WjQaQSNBqTED12t62nAHI2ddE1Xdl5HGsnmld2q7VMuFfx45KXqxNtHnLVCZZ
zaB+EiAO2xxB7LPlrdFbCEhgbeZUELxFwkKyBmvBPJGLX2urnc55WxPOZkh+7711
pcqx+u/dJSXDIHWfIKgDRxYbUUjSkWBq0u+ry9nUMZOCAaMTjjXQHuKSjFbnXxqV
pejQ0OPKgRSdHZe8JCie5wsGHWeJ4TIKreT4nKXdke4osyHkq8t5oRgfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTSNbVw2bqw79br81598xxTmei9MB8GA1UdIwQY
MBaAFO1eg4MS4Ervn5U24gzUEoOnuLd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYt
ZWRhY2E5ZDEzNjFhLzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYtZWRhY2E5ZDEzNjFh
LzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgnpWNip
SF81eF+9M7eQHL0a+TVGU+DCDnp5QPt3oqvZnRM58MLNQx01RlZrD3fKlX7H8a07
gj4WTfuhv2rQvNYyDrBE6vgSxskMNPgfs+fdzUt/JkGz5BZfEVZ/6kNuKmjgZPb3
Qs26vXbjmaXYWHigdSAHkWU3ZcK0k9AqPw2HC4UlV0a8EVq+Q2pDFuGrPakYhrtG
y+hDxCPnH5QV7uMTxBBT1M5AO4qGvFdlFVIn+3RI02y3F7tIVO8OExyqwp3AXZXc
U7+CWWMG8sBsb2Zj6fPBtZGxooQPD+gZNd8O4Eii6wD/eWonGX2Fi9/U1PrGvK6F
aBLbDp31otOgmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:58 2026 by rpki-client