Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          V8NdU5zwpJivFKT+6/EyE6hFjIml9OQ88k1LfrbcviE=
Subject key identifier:   46:99:00:86:EC:AF:2D:BE:24:0D:34:E1:71:28:6E:D0:26:3B:02:68
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       019D2703EED081C9B9E2EEA525779128F519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 22:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:02 +0000
Files and hashes:         1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: D41BNCILew3B6AI72+X85kvHg2XxSoU54mEnD/8Icdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ee:d0:81:c9:b9:e2:ee:a5:25:77:91:28:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Mar 25 22:01:02 2026 GMT
            Not After : Mar 26 22:01:02 2026 GMT
        Subject: CN=46990086ecaf2dbe240d34e171286ed0263b0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:da:e5:37:de:e7:b8:a9:48:a7:a9:3d:4e:
                    21:93:be:85:0e:bb:ef:93:9c:4c:1a:65:49:91:1a:
                    ab:43:ba:41:d3:e0:b4:72:48:db:bb:78:90:dc:16:
                    e9:68:d2:ac:97:1c:85:3f:63:be:75:3b:8a:4e:ab:
                    c9:1f:b3:6a:fd:07:f9:74:57:e7:36:80:e4:a5:8d:
                    b5:48:3e:5e:b1:34:84:e3:9f:11:49:4c:f1:77:7a:
                    da:84:1c:60:92:5b:85:f9:b0:5f:d7:d9:74:93:a1:
                    cd:59:3e:bb:5f:d5:66:68:49:ff:a0:cd:0c:38:da:
                    6c:e6:9d:d4:7d:08:58:4d:b5:52:99:36:41:0e:31:
                    9e:33:da:72:3e:80:c8:15:bc:3a:57:18:d0:17:7c:
                    bd:75:ba:70:ff:ed:4e:78:7a:1e:fe:d6:c2:f3:b6:
                    5c:77:1d:2d:f5:f6:22:6a:da:43:96:f6:55:0f:66:
                    78:f5:2e:f3:e3:b9:39:3c:9e:ef:f9:49:09:f7:11:
                    fc:00:d4:54:2e:e8:92:de:90:9a:69:24:73:96:a2:
                    08:4a:79:8b:d8:90:5f:d2:6a:59:70:74:72:d6:4c:
                    1a:15:11:f1:31:cb:34:23:d4:09:67:76:fb:3d:51:
                    f9:91:a9:ea:03:55:0f:1e:0e:ba:20:dd:9d:e9:e1:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:99:00:86:EC:AF:2D:BE:24:0D:34:E1:71:28:6E:D0:26:3B:02:68
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a3:d9:c3:ac:00:cc:e8:d4:67:55:66:db:84:0e:2a:e6:eb:
         81:c0:6a:1e:2c:e5:63:52:76:93:c1:e1:67:0a:05:bd:e1:a1:
         4b:78:d6:a1:61:a1:96:16:b3:30:b3:35:51:92:0d:62:3d:3e:
         0f:00:95:f5:18:e1:e6:d9:1d:6c:9d:78:cb:a6:59:68:af:04:
         15:69:bc:33:7b:07:e0:2f:31:83:0e:7b:b5:67:d7:e5:61:ae:
         ab:a6:7c:e4:e4:00:9f:fa:22:6b:1d:1f:49:3f:c6:03:ac:54:
         06:1c:4b:ae:35:c5:bc:3f:dd:9a:b4:d0:a0:13:a5:bd:e0:3f:
         f8:c9:94:de:59:8d:bf:ca:3c:87:f2:f1:c8:75:38:19:4c:b9:
         db:e7:0b:ab:07:e4:c5:b5:3c:6c:f4:a5:8a:ea:e7:e0:1a:1b:
         01:83:40:0b:b5:cc:4a:12:f1:9a:4a:66:1f:e9:9a:af:cd:a0:
         3e:99:fc:f5:44:37:0b:b6:e1:6f:f5:e3:cd:b1:6a:47:d7:a1:
         b8:59:03:08:42:77:50:f9:55:58:8f:3d:e7:c3:c5:1f:a7:67:
         6b:eb:d4:12:fa:91:1a:c7:6d:d3:ed:2e:5e:6c:3e:63:ca:8a:
         e6:a9:f9:c4:28:7e:16:17:3e:b5:84:d5:62:6e:51:a9:22:18:
         1f:74:14:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+7Qgcm54u6lJXeRKPUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3
YmZkNTQwHhcNMjYwMzI1MjIwMTAyWhcNMjYwMzI2MjIwMTAyWjAzMTEwLwYDVQQD
Eyg0Njk5MDA4NmVjYWYyZGJlMjQwZDM0ZTE3MTI4NmVkMDI2M2IwMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMfa5Tfe57ipSKepPU4hk76FDrvv
k5xMGmVJkRqrQ7pB0+C0ckjbu3iQ3BbpaNKslxyFP2O+dTuKTqvJH7Nq/Qf5dFfn
NoDkpY21SD5esTSE458RSUzxd3rahBxgkluF+bBf19l0k6HNWT67X9VmaEn/oM0M
ONps5p3UfQhYTbVSmTZBDjGeM9pyPoDIFbw6VxjQF3y9dbpw/+1OeHoe/tbC87Zc
dx0t9fYiatpDlvZVD2Z49S7z47k5PJ7v+UkJ9xH8ANRULuiS3pCaaSRzlqIISnmL
2JBf0mpZcHRy1kwaFRHxMcs0I9QJZ3b7PVH5kanqA1UPHg66IN2d6eEP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaZAIbsry2+JA004XEobtAmOwJoMB8GA1UdIwQY
MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt
OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy
LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaPZw6wA
zOjUZ1Vm24QOKubrgcBqHizlY1J2k8HhZwoFveGhS3jWoWGhlhazMLM1UZINYj0+
DwCV9Rjh5tkdbJ14y6ZZaK8EFWm8M3sH4C8xgw57tWfX5WGuq6Z85OQAn/oiax0f
ST/GA6xUBhxLrjXFvD/dmrTQoBOlveA/+MmU3lmNv8o8h/LxyHU4GUy52+cLqwfk
xbU8bPSliurn4BobAYNAC7XMShLxmkpmH+mar82gPpn89UQ3C7bhb/XjzbFqR9eh
uFkDCEJ3UPlVWI8958PFH6dna+vUEvqRGsdt0+0uXmw+Y8qK5qn5xCh+Fhc+tYTV
Ym5RqSIYH3QUqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:55 2026 by rpki-client