Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          5mpO8hRxx08qF7MPc7oHYG688MPaEV6bzqheaClcSHE=
Subject key identifier:   51:94:99:BF:27:2F:88:05:C1:65:22:8F:17:16:8C:F6:62:26:FD:70
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019D2816C1CF269E8C0FD9C934479749EF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 03:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:13 +0000
Files and hashes:         1: 6mr_negPNHsR5J0MSqEp_ieYKiU.roa (hash: R2V3SBjHf1L7l3zp37riDQXw6pyaQxn29F6fxbrUIig=)
                          2: GljtY0R1J1ByOdSoq7cvOo-xQ8U.roa (hash: Fqs7S4w69EF6ZT+aB+xuRmBdIVTZ/4rbTRRyrV/zgKA=)
                          3: JIvUMyg919C-AEiCOLhbtlj6cjE.roa (hash: c3tt9IXLSdvp7thburVJzoa0SnXdItptroj1j30Mafk=)
                          4: S2LndCNixy083ZTjbNt_shK0ePU.roa (hash: /dwxq7l7Ax9j0ZmPcwmkPrxtmD1WAiHSHcUMVp1m05I=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: yYCbn/DdEZTly5DdP7LxdTVOhWpUnG90Mgmy4DiB88Q=)
                          6: wMBz1OxL3HTz5yYKEtRNA_2ypJc.roa (hash: dgJQac7vUSrU8OsO7dHZl/BzAOs/LTYZ/18knGRwxgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:c1:cf:26:9e:8c:0f:d9:c9:34:47:97:49:ef:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Mar 26 03:01:13 2026 GMT
            Not After : Mar 27 03:01:13 2026 GMT
        Subject: CN=519499bf272f8805c165228f17168cf66226fd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:03:ce:a7:6e:b8:e9:1e:cc:7d:8c:61:30:
                    e6:6a:e2:63:19:cb:9e:a9:5d:05:3d:9b:21:7c:b1:
                    ea:37:73:88:6f:9e:a6:da:8e:a3:05:56:90:85:c6:
                    32:62:ec:06:45:2d:18:b4:89:1a:9f:c1:a3:dd:d7:
                    c3:3a:0b:0a:b2:00:39:39:64:17:bc:16:f3:71:8c:
                    5f:af:5a:96:25:db:77:24:e3:d8:7b:6d:8e:4c:bf:
                    3a:8b:35:90:dd:8a:34:0b:d3:ef:97:6c:8d:d9:7e:
                    96:37:f9:75:4a:7c:b5:8e:56:0d:49:8c:03:0d:d3:
                    3e:b4:4d:1c:39:f3:d3:ee:ed:da:a8:75:79:55:06:
                    b3:fe:3b:88:77:84:9d:6e:e6:81:ff:3d:df:12:7d:
                    16:e4:8c:e0:7f:da:1d:f4:a2:e7:58:23:e3:81:28:
                    3b:2f:a2:c0:44:de:e9:36:c5:df:9c:a6:5c:9d:07:
                    de:a4:1f:a2:e1:e2:d9:86:5a:20:80:0c:a6:2b:fd:
                    d2:10:fa:c6:45:e2:01:9a:02:61:39:a6:2a:71:d2:
                    bc:92:4d:b1:18:76:a0:9d:1d:2b:33:22:8e:7a:fd:
                    1a:cc:bb:1b:4a:b7:c0:98:b9:85:c0:15:f7:c2:d7:
                    d1:e0:98:f8:73:ce:68:c0:9f:e1:f0:f6:2a:31:cb:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:99:BF:27:2F:88:05:C1:65:22:8F:17:16:8C:F6:62:26:FD:70
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:5c:d1:3d:39:77:06:90:e6:5d:b6:e8:09:ee:cd:13:3c:
         3a:e6:75:33:aa:c7:99:e8:fe:da:2f:c5:ce:6f:4d:df:9c:08:
         d2:6a:49:35:a7:4c:c9:3a:07:01:57:46:99:e3:98:4f:f5:10:
         aa:25:75:7d:e8:aa:f1:e9:b2:d7:3b:e2:78:05:c9:95:44:44:
         27:f2:19:b1:9a:88:7d:14:0b:37:29:b5:ba:ec:5a:81:15:77:
         47:78:b3:16:c5:8c:a6:12:7d:50:e7:35:92:95:ef:56:06:44:
         44:0a:61:14:26:60:07:ed:8d:9e:4b:5f:66:cc:78:c7:89:b2:
         dd:ac:51:63:8d:1a:0e:50:74:f3:42:43:3e:a9:01:dd:3f:42:
         9e:1c:30:d5:76:06:af:c6:16:33:25:72:04:40:a4:7c:6e:25:
         8c:5c:2a:75:af:d8:98:35:33:49:bb:4b:8e:99:9d:3b:38:87:
         3a:cb:58:b6:66:0e:4f:3c:6b:e0:0d:96:95:9e:20:d3:24:b0:
         df:e1:c1:9a:28:2b:b9:a5:8b:b9:16:5b:85:69:84:a9:d8:fd:
         83:98:d3:1b:9d:48:de:bf:ba:30:aa:ef:ef:44:25:b7:e0:3d:
         b9:8e:c8:46:b6:c0:b7:c3:97:3b:ef:d5:e9:2f:b9:b1:92:3b:
         98:0f:8e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsHPJp6MD9nJNEeXSe+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi
YjM2ODYwHhcNMjYwMzI2MDMwMTEzWhcNMjYwMzI3MDMwMTEzWjAzMTEwLwYDVQQD
Eyg1MTk0OTliZjI3MmY4ODA1YzE2NTIyOGYxNzE2OGNmNjYyMjZmZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtloDzqduuOkezH2MYTDmauJjGcue
qV0FPZshfLHqN3OIb56m2o6jBVaQhcYyYuwGRS0YtIkan8Gj3dfDOgsKsgA5OWQX
vBbzcYxfr1qWJdt3JOPYe22OTL86izWQ3Yo0C9Pvl2yN2X6WN/l1Sny1jlYNSYwD
DdM+tE0cOfPT7u3aqHV5VQaz/juId4SdbuaB/z3fEn0W5Izgf9od9KLnWCPjgSg7
L6LARN7pNsXfnKZcnQfepB+i4eLZhloggAymK/3SEPrGReIBmgJhOaYqcdK8kk2x
GHagnR0rMyKOev0azLsbSrfAmLmFwBX3wtfR4Jj4c85owJ/h8PYqMctcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGUmb8nL4gFwWUijxcWjPZiJv1wMB8GA1UdIwQY
MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt
YzdmZTYyMjI3ZGYzLzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz
LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWJc0T05
dwaQ5l226AnuzRM8OuZ1M6rHmej+2i/Fzm9N35wI0mpJNadMyToHAVdGmeOYT/UQ
qiV1feiq8emy1zvieAXJlUREJ/IZsZqIfRQLNym1uuxagRV3R3izFsWMphJ9UOc1
kpXvVgZERAphFCZgB+2NnktfZsx4x4my3axRY40aDlB080JDPqkB3T9Cnhww1XYG
r8YWMyVyBECkfG4ljFwqda/YmDUzSbtLjpmdOziHOstYtmYOTzxr4A2WlZ4g0ySw
3+HBmigruaWLuRZbhWmEqdj9g5jTG51I3r+6MKrv70Qlt+A9uY7IRrbAt8OXO+/V
6S+5sZI7mA+OyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:42 2026 by rpki-client