Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          lCaWnpJ3TGkzQ5VAKO7i2HKUDlGDnflPRsO1fnH0piA=
Subject key identifier:   22:91:4C:D1:06:06:0E:0C:6E:FE:83:CC:50:00:50:BB:98:B5:40:25
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       019D27DFEC72CEFEC3CA4840B458BC8C2EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          18F9
Signing time:             Thu 26 Mar 2026 02:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:19 +0000
Files and hashes:         1: 5B3QzFFwuaIhWId1BpNkCEb5Rw4.roa (hash: njTH7vSGj/qysjszttcRpcexFHzl574nxZqTUKWfj4U=)
                          2: 88Ep4sB7AT24dHj0wOBkm20Qc98.roa (hash: +Tc166MSSO0xFflm016KEMW6FrFPduRqEtRuQCxP4z0=)
                          3: CA4GMUv1Mwa8-wTQziLXcZ8L4BQ.roa (hash: qM8jK7p3DVRcLAnm5qF0WSX4keV9dPzuUt50Yrxi1Bs=)
                          4: XOOM-dH84H7UxsX_I1xUFD2MCiU.roa (hash: yF0/ZzZszM6k3jBSRxWniYaHE+/EQQL9gELNFRwQiJ0=)
                          5: msniQ9k0_CkOjexD_PlJuidr5u4.roa (hash: VbMAM6GChJDxzsgDinm32lvUmxBoASqx+zQmVtXEqT8=)
                          6: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: HCZ4PqG1G2Qpzl+lCQW1h+zOoMGGUBzhjqDUhcWIVAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:ec:72:ce:fe:c3:ca:48:40:b4:58:bc:8c:2e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Mar 26 02:01:19 2026 GMT
            Not After : Mar 27 02:01:19 2026 GMT
        Subject: CN=22914cd106060e0c6efe83cc500050bb98b54025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:17:47:e7:90:ef:49:e2:54:b2:3c:f8:c2:
                    91:64:91:c6:c0:6c:d2:ca:41:14:2a:a2:36:16:55:
                    1f:65:c4:58:6f:2e:5b:8a:20:f3:de:87:a6:ac:79:
                    bb:9c:7c:94:f9:3f:24:57:ff:67:85:87:b0:fc:fd:
                    89:9d:e9:71:5a:5e:a1:07:40:96:2c:39:b4:1d:5b:
                    ae:07:ca:0b:6c:a5:6b:d5:ce:0b:48:9e:8b:cf:cf:
                    79:94:ab:f4:64:eb:c4:3e:b7:19:c8:85:cc:5c:23:
                    03:61:11:00:7e:1e:35:33:7b:55:da:7d:54:c0:98:
                    b6:36:16:3b:c1:72:58:81:96:9b:12:3e:e9:b1:08:
                    47:15:93:b2:d5:e8:b4:69:e5:f9:d8:ad:ed:11:db:
                    76:c1:0a:5f:c9:17:a6:6f:3a:f3:d9:24:e1:ea:7b:
                    17:d1:cc:63:35:d5:68:6a:34:4e:a4:87:6f:a5:6c:
                    45:57:e2:24:ba:bd:39:24:c7:32:ac:86:79:31:97:
                    6e:9f:85:c8:27:20:39:aa:e9:af:c0:65:25:e5:68:
                    fb:c3:ec:88:99:8a:ef:9b:23:49:1e:b6:d8:29:7b:
                    f2:a6:c9:72:7c:0a:81:09:55:c0:57:3f:5f:88:7f:
                    92:83:3b:4c:c8:19:06:ef:ae:e3:d7:37:00:52:42:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:91:4C:D1:06:06:0E:0C:6E:FE:83:CC:50:00:50:BB:98:B5:40:25
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:91:ed:df:58:f1:a0:a7:17:cf:97:c1:fa:bd:4d:a2:5b:
         5d:4e:78:ce:f1:7f:06:e4:65:55:c8:67:63:a8:87:d6:16:e5:
         de:d8:20:7e:a0:97:8a:4f:41:aa:a6:43:7a:c0:55:e4:e5:27:
         07:ec:74:5f:93:0e:c7:68:79:1a:7e:08:81:a0:54:7b:52:1b:
         2c:fb:2f:06:e2:7c:2d:55:d7:d6:85:d1:ed:90:50:01:23:1f:
         68:2d:d8:31:fd:a8:54:0f:57:73:cb:b5:73:16:35:d5:32:e2:
         5f:2b:1f:fc:52:7b:b8:e6:b9:e4:57:75:89:2c:5a:63:0e:30:
         5a:8e:b4:82:a5:00:90:e1:69:e8:63:c9:93:20:14:cf:a1:ce:
         eb:68:04:f9:b0:06:26:0a:6f:f6:03:d2:7f:65:82:e1:4e:22:
         68:2f:ae:08:63:00:de:ea:f2:bc:45:04:b2:b3:e6:a6:c4:96:
         04:08:a5:22:86:11:9e:2e:5d:de:92:33:66:cf:03:74:6a:6b:
         8f:94:48:f3:30:11:77:08:40:22:76:ce:a0:61:4b:42:f6:cb:
         d8:51:bd:eb:5e:7f:69:26:78:ca:1a:ea:27:d3:b0:84:f9:94:
         65:0c:8a:af:1c:15:2c:6b:3a:80:31:78:cd:d8:77:43:a7:d9:
         1b:6f:26:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+xyzv7DykhAtFi8jC7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjYwMzI2MDIwMTE5WhcNMjYwMzI3MDIwMTE5WjAzMTEwLwYDVQQD
EygyMjkxNGNkMTA2MDYwZTBjNmVmZTgzY2M1MDAwNTBiYjk4YjU0MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUQXR+eQ70niVLI8+MKRZJHGwGzS
ykEUKqI2FlUfZcRYby5biiDz3oemrHm7nHyU+T8kV/9nhYew/P2JnelxWl6hB0CW
LDm0HVuuB8oLbKVr1c4LSJ6Lz895lKv0ZOvEPrcZyIXMXCMDYREAfh41M3tV2n1U
wJi2NhY7wXJYgZabEj7psQhHFZOy1ei0aeX52K3tEdt2wQpfyRembzrz2STh6nsX
0cxjNdVoajROpIdvpWxFV+Ikur05JMcyrIZ5MZdun4XIJyA5qumvwGUl5Wj7w+yI
mYrvmyNJHrbYKXvypslyfAqBCVXAVz9fiH+SgztMyBkG767j1zcAUkJ6MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKRTNEGBg4Mbv6DzFAAULuYtUAlMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvyR7d9Y
8aCnF8+Xwfq9TaJbXU54zvF/BuRlVchnY6iH1hbl3tggfqCXik9BqqZDesBV5OUn
B+x0X5MOx2h5Gn4IgaBUe1IbLPsvBuJ8LVXX1oXR7ZBQASMfaC3YMf2oVA9Xc8u1
cxY11TLiXysf/FJ7uOa55Fd1iSxaYw4wWo60gqUAkOFp6GPJkyAUz6HO62gE+bAG
Jgpv9gPSf2WC4U4iaC+uCGMA3uryvEUEsrPmpsSWBAilIoYRni5d3pIzZs8DdGpr
j5RI8zARdwhAInbOoGFLQvbL2FG9615/aSZ4yhrqJ9OwhPmUZQyKrxwVLGs6gDF4
zdh3Q6fZG28mCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:58 2026 by rpki-client