Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File:                     bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier:          v8P+h9sb4zxyB4oig0UsijyIkvDG17PegWHiGOziC5Q=
Subject key identifier:   2D:AD:20:7B:12:E2:92:68:A7:84:3C:60:2B:2D:7E:F7:FC:50:2F:38
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer:       /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial:       019D265FBDA3DD032242A623CB49C5CF2B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 19:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:41 +0000
Files and hashes:         1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
                          2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
                          3: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
                          4: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
                          5: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: UAQpchOzR4y2m/reW45UTht6BkFFCu+P9YQeR4W99ZE=)
                          6: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:bd:a3:dd:03:22:42:a6:23:cb:49:c5:cf:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
        Validity
            Not Before: Mar 25 19:01:41 2026 GMT
            Not After : Mar 26 19:01:41 2026 GMT
        Subject: CN=2dad207b12e29268a7843c602b2d7ef7fc502f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:d5:03:e9:ec:e5:47:21:87:22:4e:0d:0e:
                    9c:eb:57:ac:1f:1e:7e:bc:96:13:f2:49:91:01:10:
                    a1:89:8f:91:03:0c:b1:0f:8c:4d:a1:39:29:76:1d:
                    12:ce:9f:bb:c6:61:41:77:41:c8:24:01:47:9b:76:
                    c7:77:d1:ac:76:8b:0a:f5:6b:3e:30:e5:5c:63:f1:
                    9e:6f:0d:1d:9e:3a:3e:37:26:bb:e3:9c:76:cb:74:
                    56:63:08:10:f9:5f:26:49:c4:cd:06:57:de:b2:e4:
                    54:38:5b:f4:c4:a7:e9:f7:d0:f2:11:b8:85:d1:5b:
                    48:65:51:93:31:dd:89:aa:54:6b:5f:c8:51:5f:67:
                    46:69:86:76:b7:80:64:5e:7c:6f:4b:80:d3:52:df:
                    47:03:23:5f:87:fb:16:0d:c5:49:39:00:b5:73:ac:
                    94:88:67:e7:56:46:8b:6b:6a:2a:f1:10:6f:78:79:
                    fd:01:a5:cc:2b:88:0a:1e:86:c6:51:dc:ba:04:86:
                    7a:92:a3:78:d0:85:fb:b4:64:2c:bb:7d:78:78:98:
                    f8:93:f1:51:f0:74:f8:ba:68:77:c5:74:3a:c8:0b:
                    48:47:15:0f:71:6c:13:7f:a1:3e:c8:c0:5d:79:52:
                    2f:49:a0:55:5b:7e:a7:20:73:5e:f4:43:e2:e1:62:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:20:7B:12:E2:92:68:A7:84:3C:60:2B:2D:7E:F7:FC:50:2F:38
            X509v3 Authority Key Identifier:
                keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:71:bf:f8:6c:99:5e:02:eb:b4:43:7b:88:ce:20:db:2b:
         27:80:c6:cb:43:31:75:20:78:1a:86:ed:e9:91:8f:ab:f0:62:
         4c:31:aa:16:21:f5:91:ec:b2:95:93:69:e7:74:62:1a:7e:ed:
         57:2c:cb:fc:ff:a6:99:22:1c:37:84:68:b2:63:35:4e:90:c4:
         fa:6d:27:bd:43:ae:c2:9a:4c:bf:f1:7d:75:a3:fe:46:1f:a6:
         84:e8:96:44:c7:28:eb:e9:5e:b0:9d:56:61:24:60:a1:b0:3b:
         24:d2:06:30:07:88:60:fd:9a:90:85:35:ae:99:82:de:d0:aa:
         fa:6a:3a:10:99:35:98:16:cd:44:ef:ee:37:82:93:50:89:89:
         ef:47:37:cf:ec:b1:92:2f:13:29:ec:df:81:dd:82:79:d6:8d:
         b8:e0:cd:26:cc:65:c2:03:df:bd:b1:93:ef:f4:3f:21:da:51:
         6d:05:76:a1:5a:07:63:b5:50:9c:2a:28:e0:88:79:3b:b3:6f:
         e9:a3:ee:fc:a9:57:16:62:d8:63:ea:43:72:cd:41:bb:c0:68:
         b0:98:44:e7:fd:eb:9c:a8:a7:17:f0:23:1f:87:ca:b0:41:55:
         9f:e2:3a:38:ac:0d:b6:58:52:68:52:95:f1:77:4b:ca:76:0c:
         57:77:1a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX72j3QMiQqYjy0nFzysfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk
MGVlNGEwHhcNMjYwMzI1MTkwMTQxWhcNMjYwMzI2MTkwMTQxWjAzMTEwLwYDVQQD
EygyZGFkMjA3YjEyZTI5MjY4YTc4NDNjNjAyYjJkN2VmN2ZjNTAyZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPbVA+ns5UchhyJODQ6c61esHx5+
vJYT8kmRARChiY+RAwyxD4xNoTkpdh0Szp+7xmFBd0HIJAFHm3bHd9GsdosK9Ws+
MOVcY/Gebw0dnjo+Nya745x2y3RWYwgQ+V8mScTNBlfesuRUOFv0xKfp99DyEbiF
0VtIZVGTMd2JqlRrX8hRX2dGaYZ2t4BkXnxvS4DTUt9HAyNfh/sWDcVJOQC1c6yU
iGfnVkaLa2oq8RBveHn9AaXMK4gKHobGUdy6BIZ6kqN40IX7tGQsu314eJj4k/FR
8HT4umh3xXQ6yAtIRxUPcWwTf6E+yMBdeVIvSaBVW36nIHNe9EPi4WJKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2tIHsS4pJop4Q8YCstfvf8UC84MB8GA1UdIwQY
MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt
Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0
LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATedxv/hs
mV4C67RDe4jOINsrJ4DGy0MxdSB4Gobt6ZGPq/BiTDGqFiH1keyylZNp53RiGn7t
VyzL/P+mmSIcN4RosmM1TpDE+m0nvUOuwppMv/F9daP+Rh+mhOiWRMco6+lesJ1W
YSRgobA7JNIGMAeIYP2akIU1rpmC3tCq+mo6EJk1mBbNRO/uN4KTUImJ70c3z+yx
ki8TKezfgd2CedaNuODNJsxlwgPfvbGT7/Q/IdpRbQV2oVoHY7VQnCoo4Ih5O7Nv
6aPu/KlXFmLYY+pDcs1Bu8BosJhE5/3rnKinF/AjH4fKsEFVn+I6OKwNtlhSaFKV
8XdLynYMV3caVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:39 2026 by rpki-client