Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          AfeC2bn2nJUzSqzee2RRmZ4OLSYq6ULOu+R3IlucfUk=
Subject key identifier:   AB:23:1D:98:B5:EE:F1:78:46:41:D3:3A:2D:7A:11:6F:81:4E:7F:EE
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019D25F14873430B19E6479A3F6792255E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          17F5
Signing time:             Wed 25 Mar 2026 17:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:02 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: Uzqrn4wUMb4IIogXXRZ1mXgSWNW+HcvckX/3yqM4iCQ=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:48:73:43:0b:19:e6:47:9a:3f:67:92:25:5e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Mar 25 17:01:02 2026 GMT
            Not After : Mar 26 17:01:02 2026 GMT
        Subject: CN=ab231d98b5eef1784641d33a2d7a116f814e7fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:12:19:46:a6:25:99:fa:32:a3:3f:12:54:
                    46:83:7c:51:8b:09:5e:7f:bc:3f:36:90:79:13:05:
                    79:a8:95:e5:94:52:e7:49:11:bb:d8:82:fa:ca:a7:
                    2e:b3:9c:40:4b:15:a5:62:f5:19:90:98:bf:3f:64:
                    23:6e:da:4d:c5:de:99:56:72:05:d2:fc:4d:2f:7c:
                    a0:c6:dd:aa:be:7c:e7:c7:98:d2:6e:37:be:24:53:
                    e9:2b:1a:73:66:24:22:6e:82:a7:a1:39:38:7b:43:
                    b4:d6:ad:1e:13:b9:d0:86:96:23:1e:21:55:c2:6d:
                    f7:14:23:43:3c:a0:27:2b:82:4b:33:77:9a:28:4d:
                    c2:1c:52:16:80:58:0e:88:19:ae:da:be:e8:e5:df:
                    66:21:58:02:35:69:bd:03:4c:95:16:54:9e:43:a0:
                    35:91:fe:56:00:26:5b:25:8d:09:62:d4:90:74:4e:
                    d9:78:c0:92:7e:cc:0e:a7:1d:95:bf:2b:16:ae:aa:
                    3d:ad:f7:e1:71:00:77:62:3e:7a:de:90:a3:e9:58:
                    e6:f6:c2:5a:eb:da:08:bb:36:af:2d:99:7b:ee:1a:
                    77:cd:ba:11:ce:60:c5:cb:cd:c2:1e:d0:a1:8f:28:
                    31:fb:70:45:c7:7b:16:e8:32:3b:d3:d8:de:50:8b:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:23:1D:98:B5:EE:F1:78:46:41:D3:3A:2D:7A:11:6F:81:4E:7F:EE
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:42:11:01:9d:e1:78:b3:e8:da:7b:68:13:30:89:91:63:6c:
         71:6b:d4:e5:5a:0c:8a:7a:e3:ce:73:41:ce:1a:dc:52:17:21:
         5c:fb:d3:3a:ac:3a:02:54:02:93:18:2c:78:f5:e8:7b:2b:b5:
         b2:8c:13:19:d0:f3:d3:59:c0:2c:d0:d3:4c:cb:12:74:79:a2:
         56:1d:43:49:e7:ab:a1:2f:72:a5:b0:84:c6:a4:c8:47:c3:6f:
         87:b9:e7:f4:62:41:46:10:d4:3d:85:e6:07:aa:e8:ac:39:fb:
         49:27:0f:ec:57:e0:6c:5c:2c:81:c4:9a:31:cb:4f:89:57:16:
         3d:b2:62:97:44:8e:d2:d1:d1:3c:e5:95:ee:71:16:d2:c6:68:
         ce:37:af:d5:f8:e6:7f:70:b3:d4:d6:fd:82:7b:17:2d:da:34:
         f2:0a:54:05:83:5d:33:6a:38:9e:4a:bb:a8:39:a1:f3:f7:12:
         d3:9b:47:d6:fe:f1:d8:a7:eb:87:f7:47:2f:f4:16:3c:11:f8:
         64:2e:c0:d5:3f:94:0e:30:d6:6b:9b:72:98:4e:5d:7a:a9:85:
         4d:22:81:03:71:25:e9:4b:2d:c6:aa:15:57:28:66:c2:92:68:
         06:d2:bf:ad:0d:0f:28:f5:16:74:46:e4:54:c1:b6:a5:ec:f8:
         ca:5e:f9:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UhzQwsZ5keaP2eSJV47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh
MDMxMTIwHhcNMjYwMzI1MTcwMTAyWhcNMjYwMzI2MTcwMTAyWjAzMTEwLwYDVQQD
EyhhYjIzMWQ5OGI1ZWVmMTc4NDY0MWQzM2EyZDdhMTE2ZjgxNGU3ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz0SGUamJZn6MqM/ElRGg3xRiwle
f7w/NpB5EwV5qJXllFLnSRG72IL6yqcus5xASxWlYvUZkJi/P2QjbtpNxd6ZVnIF
0vxNL3ygxt2qvnznx5jSbje+JFPpKxpzZiQiboKnoTk4e0O01q0eE7nQhpYjHiFV
wm33FCNDPKAnK4JLM3eaKE3CHFIWgFgOiBmu2r7o5d9mIVgCNWm9A0yVFlSeQ6A1
kf5WACZbJY0JYtSQdE7ZeMCSfswOpx2VvysWrqo9rffhcQB3Yj563pCj6Vjm9sJa
69oIuzavLZl77hp3zboRzmDFy83CHtChjygx+3BFx3sW6DI709jeUIsxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsjHZi17vF4RkHTOi16EW+BTn/uMB8GA1UdIwQY
MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt
ZDYyZmE2MzE5ZmQ0LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0
LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkIRAZ3h
eLPo2ntoEzCJkWNscWvU5VoMinrjznNBzhrcUhchXPvTOqw6AlQCkxgsePXoeyu1
sowTGdDz01nALNDTTMsSdHmiVh1DSeeroS9ypbCExqTIR8Nvh7nn9GJBRhDUPYXm
B6rorDn7SScP7FfgbFwsgcSaMctPiVcWPbJil0SO0tHRPOWV7nEW0sZozjev1fjm
f3Cz1Nb9gnsXLdo08gpUBYNdM2o4nkq7qDmh8/cS05tH1v7x2Kfrh/dHL/QWPBH4
ZC7A1T+UDjDWa5tymE5deqmFTSKBA3El6UstxqoVVyhmwpJoBtK/rQ0PKPUWdEbk
VMG2pez4yl75Dw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:08 2026 by rpki-client