Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File:                     V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier:          MQ8if9fwmsXUlVnXncmw8cAF0vpwyXiDEPz7htMYfs8=
Subject key identifier:   72:AC:B7:C4:B1:67:FF:09:5A:40:5A:A3:15:61:D7:E5:41:79:4C:8A
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer:       /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial:       019D25F1D83E74F05EEFA26F808DC617A395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number:          1594
Signing time:             Wed 25 Mar 2026 17:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:39 +0000
Files and hashes:         1: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: rPAKTreHfKJvribAOCxr12qEVQ3I8UZMmjpMZt3GINY=)
                          2: ksTitpak2u-_MSffFj8d3gLieoc.roa (hash: Akc+ifGn4Wu7e6ztv1Jh+lSvFvn72wjh27ACIaDBeLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:d8:3e:74:f0:5e:ef:a2:6f:80:8d:c6:17:a3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
        Validity
            Not Before: Mar 25 17:01:39 2026 GMT
            Not After : Mar 26 17:01:39 2026 GMT
        Subject: CN=72acb7c4b167ff095a405aa31561d7e541794c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:c6:d3:c4:0e:1c:2f:63:a9:ea:77:44:1b:
                    dd:ef:c7:be:a9:ad:3c:53:ab:15:22:10:e7:b0:8c:
                    9a:d2:b9:a2:2f:39:d5:60:6a:7a:9b:b8:c4:e9:81:
                    47:32:4f:3d:54:c7:aa:16:49:78:27:76:37:df:34:
                    de:fd:79:a7:43:9e:d2:b1:3b:c1:a5:7e:48:f8:9d:
                    65:4a:cd:fe:fd:9f:99:e9:6e:97:70:66:23:13:f6:
                    75:e1:95:34:8c:6f:ad:af:99:51:27:48:23:4e:c9:
                    91:c0:b5:ea:de:1e:3d:55:0e:d0:c7:3d:06:42:47:
                    5a:e0:94:91:da:56:48:6a:05:e3:00:46:84:81:ae:
                    5e:bb:78:6a:41:7d:73:b9:3a:76:1c:2a:12:c6:ab:
                    cb:41:d5:11:24:e9:e0:61:47:8f:8f:15:32:d9:17:
                    03:56:2b:5c:f6:5e:30:86:02:dd:9c:90:8e:36:2d:
                    61:44:6b:3f:4c:f7:41:9a:10:a3:9f:40:be:82:ef:
                    d3:d1:34:e6:d2:33:38:b4:01:ba:9a:0e:cf:b7:dc:
                    0b:70:80:ab:24:d4:e5:bf:43:a7:37:7a:1e:7e:83:
                    01:68:d5:8c:e2:88:e6:47:c3:78:c1:65:af:bb:80:
                    2a:1e:3d:58:17:22:39:0e:de:93:70:e7:41:a9:99:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AC:B7:C4:B1:67:FF:09:5A:40:5A:A3:15:61:D7:E5:41:79:4C:8A
            X509v3 Authority Key Identifier:
                keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:40:1e:86:9a:05:46:5b:c9:15:42:b2:3d:cb:84:9f:e1:14:
         97:72:4f:d1:c4:c1:c9:c1:f0:7a:6d:8d:2d:01:56:46:90:5f:
         f8:c0:d8:c4:42:9e:30:99:1a:d0:64:e4:3e:94:64:c5:03:3d:
         d2:50:3b:3f:a8:2e:00:42:00:36:c7:2e:09:8d:be:7d:cc:f4:
         22:40:f6:68:08:e0:45:9e:f3:d9:7a:47:ed:bd:bf:06:04:56:
         10:96:37:5b:54:52:52:b7:f2:7d:25:8c:2f:b1:96:e0:8d:7d:
         c2:90:68:15:92:57:32:b6:5d:e0:01:7d:5a:e0:fe:f7:4b:05:
         ec:99:1d:8c:d9:ed:e6:1d:b4:db:2f:0e:a6:fa:e0:8e:07:aa:
         e8:9f:56:38:5c:0f:45:cc:b1:f2:89:7c:4a:e4:08:43:e6:40:
         d4:8b:a3:67:a2:c0:88:8c:8e:74:10:5b:dd:af:c3:1e:48:17:
         96:70:5b:6d:52:04:3c:22:b1:b2:d9:9e:6f:a1:52:d5:7e:dc:
         73:1d:f8:aa:43:dc:de:73:db:dd:36:dc:5f:f9:e2:67:5c:fd:
         e6:d1:e4:29:f5:97:51:15:93:af:cd:b0:6d:93:c9:35:b5:0c:
         e9:1f:12:f8:86:60:20:a5:9d:36:0a:f8:e3:81:36:77:de:86:
         b5:7f:e4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8dg+dPBe76JvgI3GF6OVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThmY2QyMmZiN2ExMWRlYThiMzdlNGMzZjYyMmFhN2E0
N2I5ZWUwHhcNMjYwMzI1MTcwMTM5WhcNMjYwMzI2MTcwMTM5WjAzMTEwLwYDVQQD
Eyg3MmFjYjdjNGIxNjdmZjA5NWE0MDVhYTMxNTYxZDdlNTQxNzk0YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7G08QOHC9jqep3RBvd78e+qa08
U6sVIhDnsIya0rmiLznVYGp6m7jE6YFHMk89VMeqFkl4J3Y33zTe/XmnQ57SsTvB
pX5I+J1lSs3+/Z+Z6W6XcGYjE/Z14ZU0jG+tr5lRJ0gjTsmRwLXq3h49VQ7Qxz0G
Qkda4JSR2lZIagXjAEaEga5eu3hqQX1zuTp2HCoSxqvLQdURJOngYUePjxUy2RcD
Vitc9l4whgLdnJCONi1hRGs/TPdBmhCjn0C+gu/T0TTm0jM4tAG6mg7Pt9wLcICr
JNTlv0OnN3oefoMBaNWM4ojmR8N4wWWvu4AqHj1YFyI5Dt6TcOdBqZlltwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKst8SxZ/8JWkBaoxVh1+VBeUyKMB8GA1UdIwQY
MBaAFFdY/NIvt6Ed6os35MP2Iqp6R7nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAt
MjUwYmVjOWRjY2ExLzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAtMjUwYmVjOWRjY2Ex
LzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkAehpoF
RlvJFUKyPcuEn+EUl3JP0cTBycHwem2NLQFWRpBf+MDYxEKeMJka0GTkPpRkxQM9
0lA7P6guAEIANscuCY2+fcz0IkD2aAjgRZ7z2XpH7b2/BgRWEJY3W1RSUrfyfSWM
L7GW4I19wpBoFZJXMrZd4AF9WuD+90sF7JkdjNnt5h202y8Opvrgjgeq6J9WOFwP
Rcyx8ol8SuQIQ+ZA1IujZ6LAiIyOdBBb3a/DHkgXlnBbbVIEPCKxstmeb6FS1X7c
cx34qkPc3nPb3TbcX/niZ1z95tHkKfWXURWTr82wbZPJNbUM6R8S+IZgIKWdNgr4
44E2d96GtX/k0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:05 2026 by rpki-client