Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
File:                     SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft (raw, json)
Hash identifier:          t6A+2El+MLkLE/EtyIoQrZ15GIXUjRMq3omrT55YLx4=
Subject key identifier:   87:6B:44:AE:29:F7:AA:AF:23:0E:DF:73:A7:9D:2F:C7:EB:53:08:03
Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63
Certificate issuer:       /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
Certificate serial:       019D26960FF61898A99EB010BAD6C01D82FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
Manifest number:          02F7
Signing time:             Wed 25 Mar 2026 20:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:01 +0000
Files and hashes:         1: QvVVhK4SLUURXLWzSlCSQnsxU_0.roa (hash: bCJLMO2d2KsUAtIgwfRpTRpXl2cSUUuH6iW/kjGwb6A=)
                          2: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl (hash: UjqZ+wdtPlqvR0QVfdFI1UMHnyRqojguo+9ieppQgdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:0f:f6:18:98:a9:9e:b0:10:ba:d6:c0:1d:82:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
        Validity
            Not Before: Mar 25 20:01:01 2026 GMT
            Not After : Mar 26 20:01:01 2026 GMT
        Subject: CN=876b44ae29f7aaaf230edf73a79d2fc7eb530803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:96:5b:0b:7e:5c:a7:40:1a:ed:c2:d2:e5:
                    20:a8:19:89:26:c5:e5:ba:1c:ff:d2:a4:5a:f4:3e:
                    9b:ea:81:98:a7:ce:1f:29:bf:23:81:45:db:1d:e0:
                    c9:22:38:a0:ce:80:02:21:5f:6d:a5:ff:c5:2d:6e:
                    4c:40:3b:f4:78:5b:e1:ee:db:ac:5e:29:36:d3:03:
                    6a:ed:e7:58:c7:50:ca:92:92:46:db:9e:c1:cf:da:
                    f3:2d:5c:aa:48:9d:1f:f4:66:81:1d:bf:20:46:c7:
                    07:02:92:5e:e2:bf:a2:3c:b4:51:86:92:a6:32:9b:
                    a2:d3:c1:85:57:69:74:3d:83:e2:5c:6a:1f:26:d7:
                    41:04:71:85:4d:95:12:68:cd:6a:2a:64:ae:89:d8:
                    6a:48:d7:f2:89:50:4c:27:2e:0a:9f:42:5d:79:3f:
                    56:87:aa:16:88:29:d3:ce:0c:a8:1b:2e:66:ac:aa:
                    3c:68:e0:c7:aa:b4:b5:35:91:22:16:5b:ae:e1:55:
                    d2:22:c7:d2:56:99:6a:a2:1b:c1:fc:17:76:56:b7:
                    13:d0:56:22:a6:4f:f5:3a:22:b1:cd:a6:86:d6:c4:
                    d1:5d:79:5e:b2:05:38:29:67:a5:fa:e3:03:f4:f3:
                    f8:7c:8c:a9:d2:df:c1:3e:14:02:c2:4b:dd:59:26:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:44:AE:29:F7:AA:AF:23:0E:DF:73:A7:9D:2F:C7:EB:53:08:03
            X509v3 Authority Key Identifier:
                keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:e4:fa:ae:28:c4:84:e2:0f:4f:ef:e2:3c:c4:67:0e:73:
         73:c0:a6:b7:cd:fb:14:8a:f1:d1:0e:6d:a2:e7:31:3e:44:b5:
         21:1d:73:a2:da:a1:a6:c1:33:d6:b9:64:19:bd:c3:50:6d:00:
         cc:9d:f3:50:14:34:6f:ec:19:e1:7a:66:f4:0d:cb:58:91:7f:
         1f:1e:56:dc:db:b0:6a:eb:cf:ab:af:26:7c:97:94:d8:82:60:
         62:e5:c2:9c:a1:a3:42:8d:45:80:aa:59:37:8b:78:d6:08:9b:
         ec:74:32:dd:50:00:0a:f0:0f:d9:1d:ac:3d:99:f3:cd:fd:c7:
         5e:3b:1a:49:12:ea:f7:3d:8f:5d:61:fd:79:b0:52:f5:a4:3b:
         a2:3b:50:d8:5b:55:70:62:4b:d9:21:c6:90:c5:c9:37:06:43:
         02:2a:04:59:29:c5:ca:fb:4b:2f:ff:3f:d7:88:d5:04:e8:d4:
         d4:74:ae:b6:87:0d:60:8f:e7:37:c7:e9:28:9c:75:6e:1a:53:
         98:a8:7d:9a:64:13:d4:bc:46:fd:5d:90:8d:52:c1:6a:22:df:
         20:55:f8:49:b2:17:b2:bf:22:54:16:50:2d:4e:c5:dc:e9:af:
         ab:22:5d:58:8d:6e:55:94:07:36:68:24:9d:56:bf:01:d1:12:
         27:e4:84:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlg/2GJipnrAQutbAHYL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjQ5NWUyZWM5ZDA3ZmQ1OTVkMjJiNjI4ZDM3NTZlOWQ4
ZmE3NjMwHhcNMjYwMzI1MjAwMTAxWhcNMjYwMzI2MjAwMTAxWjAzMTEwLwYDVQQD
Eyg4NzZiNDRhZTI5ZjdhYWFmMjMwZWRmNzNhNzlkMmZjN2ViNTMwODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveWWwt+XKdAGu3C0uUgqBmJJsXl
uhz/0qRa9D6b6oGYp84fKb8jgUXbHeDJIjigzoACIV9tpf/FLW5MQDv0eFvh7tus
Xik20wNq7edYx1DKkpJG257Bz9rzLVyqSJ0f9GaBHb8gRscHApJe4r+iPLRRhpKm
Mpui08GFV2l0PYPiXGofJtdBBHGFTZUSaM1qKmSuidhqSNfyiVBMJy4Kn0JdeT9W
h6oWiCnTzgyoGy5mrKo8aODHqrS1NZEiFluu4VXSIsfSVplqohvB/Bd2VrcT0FYi
pk/1OiKxzaaG1sTRXXlesgU4KWel+uMD9PP4fIyp0t/BPhQCwkvdWSZsQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdrRK4p96qvIw7fc6edL8frUwgDMB8GA1UdIwQY
MBaAFEj0leLsnQf9WV0itijTdW6dj6djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2Et
N2RjYWJjMTZlYmFlLzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2EtN2RjYWJjMTZlYmFl
LzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwzk+q4o
xITiD0/v4jzEZw5zc8Cmt837FIrx0Q5toucxPkS1IR1zotqhpsEz1rlkGb3DUG0A
zJ3zUBQ0b+wZ4Xpm9A3LWJF/Hx5W3NuwauvPq68mfJeU2IJgYuXCnKGjQo1FgKpZ
N4t41gib7HQy3VAACvAP2R2sPZnzzf3HXjsaSRLq9z2PXWH9ebBS9aQ7ojtQ2FtV
cGJL2SHGkMXJNwZDAioEWSnFyvtLL/8/14jVBOjU1HSutocNYI/nN8fpKJx1bhpT
mKh9mmQT1LxG/V2QjVLBaiLfIFX4SbIXsr8iVBZQLU7F3OmvqyJdWI1uVZQHNmgk
nVa/AdESJ+SE6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:31 2026 by rpki-client