Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File:                     IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier:          HNMoGYA68MRO9QpF3+gjEzmXQx/U+pFHFhOZy01NRFU=
Subject key identifier:   79:C4:71:C5:0C:33:46:E8:94:17:78:8E:1A:9D:5F:F8:41:EC:9C:93
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer:       /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial:       019D284D92EEE0DD0745FD30CF937FEC60CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number:          0808
Signing time:             Thu 26 Mar 2026 04:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:05 +0000
Files and hashes:         1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: 6wLmTOnprquWc63Z0eY3eTVTwgrL4TQcJoE/zMw47zg=)
                          2: omCKLPBL-sX0T1F0arfYXvQOCR0.roa (hash: Y7NRh10SXgE8EspE8su8BnYaod8821/L39MdUhs+QAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:92:ee:e0:dd:07:45:fd:30:cf:93:7f:ec:60:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
        Validity
            Not Before: Mar 26 04:01:05 2026 GMT
            Not After : Mar 27 04:01:05 2026 GMT
        Subject: CN=79c471c50c3346e89417788e1a9d5ff841ec9c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:7e:e4:53:56:78:70:06:10:51:84:67:d8:
                    4f:4f:fb:3d:02:cd:11:03:f5:88:a6:60:37:20:66:
                    60:72:ea:da:4f:4f:fc:31:af:1c:f0:8d:0b:d7:94:
                    da:64:a1:68:56:58:59:99:68:a5:a7:2f:91:f8:96:
                    21:fc:a1:2f:ed:33:b6:61:65:e6:41:3d:53:ed:65:
                    ea:31:1b:ee:7c:0d:d2:da:c3:c9:43:b0:ec:af:f5:
                    08:fe:94:3b:aa:10:13:28:7a:67:e9:d7:f0:a3:fb:
                    be:30:f0:5d:37:c0:55:4e:6e:47:07:0e:6a:6b:3c:
                    b5:51:01:b2:44:98:1f:11:6b:66:84:96:e2:36:ae:
                    24:bc:ae:9d:bf:d8:3c:63:38:d6:42:c5:db:84:41:
                    7c:32:a0:b7:ae:c3:40:2a:ba:a1:bb:cb:20:84:e0:
                    cd:99:cd:cb:30:be:4d:8b:3d:d5:57:c4:83:18:5e:
                    19:db:31:18:66:4c:cc:53:22:af:5e:bf:f3:26:0a:
                    4c:4a:1c:3c:4a:9e:0b:f1:3d:d5:53:fc:43:0d:81:
                    9b:a8:d0:97:6e:7f:2e:3a:36:60:96:2d:0e:8a:9b:
                    ca:32:df:0b:7d:48:ac:9f:d1:6a:57:c3:43:e2:46:
                    07:18:cd:91:90:fb:eb:c3:e9:1c:fb:ab:b3:cf:19:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:71:C5:0C:33:46:E8:94:17:78:8E:1A:9D:5F:F8:41:EC:9C:93
            X509v3 Authority Key Identifier:
                keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:ad:aa:98:84:c3:3c:62:3c:44:af:80:99:28:57:29:a3:
         00:3d:12:4c:e2:17:10:35:46:96:09:0f:29:5b:89:ef:c6:29:
         ea:75:d0:c3:e1:45:33:f9:97:03:26:82:5c:c8:7e:94:91:28:
         f4:ed:f4:aa:52:96:1e:ef:16:8f:3d:af:28:8c:81:ad:37:10:
         31:b6:bc:dc:01:ce:af:db:2e:42:ea:4d:99:93:e4:53:cb:ab:
         3e:f6:a6:eb:74:ed:d1:19:a1:50:9a:d1:4f:b9:f5:40:9d:eb:
         18:45:a4:31:53:e8:20:48:23:59:73:82:db:5f:55:66:4c:83:
         f7:4c:49:4d:7e:7a:51:b7:f8:07:75:17:72:97:8a:47:b1:27:
         95:77:6c:0c:c8:44:99:3a:11:fc:e9:76:15:77:67:39:02:73:
         98:ed:53:b2:7d:a1:7c:d0:4c:19:56:07:db:f9:93:74:bc:d6:
         46:a2:dd:e8:de:31:42:95:2c:f5:2f:49:85:2b:4c:b1:d9:a1:
         de:c0:2a:e8:cd:9d:a7:55:3e:78:7a:db:de:ea:08:67:a9:96:
         0b:7d:b2:99:35:bc:94:8d:d5:16:bf:e1:9b:72:cc:da:34:3c:
         74:b5:8d:a5:a4:4b:ac:f5:28:1a:b5:42:56:d9:d6:d8:ab:23:
         a3:77:5d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZLu4N0HRf0wz5N/7GDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4
ODVlNGYwHhcNMjYwMzI2MDQwMTA1WhcNMjYwMzI3MDQwMTA1WjAzMTEwLwYDVQQD
Eyg3OWM0NzFjNTBjMzM0NmU4OTQxNzc4OGUxYTlkNWZmODQxZWM5YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXl+5FNWeHAGEFGEZ9hPT/s9As0R
A/WIpmA3IGZgcuraT0/8Ma8c8I0L15TaZKFoVlhZmWilpy+R+JYh/KEv7TO2YWXm
QT1T7WXqMRvufA3S2sPJQ7Dsr/UI/pQ7qhATKHpn6dfwo/u+MPBdN8BVTm5HBw5q
azy1UQGyRJgfEWtmhJbiNq4kvK6dv9g8YzjWQsXbhEF8MqC3rsNAKrqhu8sghODN
mc3LML5Niz3VV8SDGF4Z2zEYZkzMUyKvXr/zJgpMShw8Sp4L8T3VU/xDDYGbqNCX
bn8uOjZgli0OipvKMt8LfUisn9FqV8ND4kYHGM2RkPvrw+kc+6uzzxniCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnEccUMM0bolBd4jhqdX/hB7JyTMB8GA1UdIwQY
MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt
ZGU2NjQ0YzNkYWVkLzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk
LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuatqpiE
wzxiPESvgJkoVymjAD0STOIXEDVGlgkPKVuJ78Yp6nXQw+FFM/mXAyaCXMh+lJEo
9O30qlKWHu8Wjz2vKIyBrTcQMba83AHOr9suQupNmZPkU8urPvam63Tt0RmhUJrR
T7n1QJ3rGEWkMVPoIEgjWXOC219VZkyD90xJTX56Ubf4B3UXcpeKR7EnlXdsDMhE
mToR/Ol2FXdnOQJzmO1Tsn2hfNBMGVYH2/mTdLzWRqLd6N4xQpUs9S9JhStMsdmh
3sAq6M2dp1U+eHrb3uoIZ6mWC32ymTW8lI3VFr/hm3LM2jQ8dLWNpaRLrPUoGrVC
VtnW2Ksjo3ddPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:29 2026 by rpki-client