Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          UcLblk8SRoTBfHJDK214i2LcPW10ibsd8KURTBh15ds=
Subject key identifier:   EE:54:26:7C:F2:D9:CD:BD:F3:5F:5F:9C:45:62:3E:84:25:2D:B7:A1
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       019D28F221F4BCD6F284788F6C32141189D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 07:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:50 +0000
Files and hashes:         1: WIl0Xqb_jjioT10im6ZilazK9oU.roa (hash: bnIVhAkmyrGOEI0F1P6+uWii6pOvIBe20BCtDnQhbkw=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: XmBKCjF5LNp26z45UL7oENBGa5GNhY+YtdPuHC8qk6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:21:f4:bc:d6:f2:84:78:8f:6c:32:14:11:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Mar 26 07:00:50 2026 GMT
            Not After : Mar 27 07:00:50 2026 GMT
        Subject: CN=ee54267cf2d9cdbdf35f5f9c45623e84252db7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:e5:aa:fb:aa:4b:82:03:5f:2d:22:c9:bc:
                    5d:c4:51:f5:60:3b:32:d8:96:f5:8d:d6:48:b8:e2:
                    e1:3e:82:d3:47:1d:70:c1:c6:36:79:58:12:37:8f:
                    6f:94:99:b1:6e:4b:8f:03:3f:21:8c:b3:5b:ab:52:
                    29:d8:7c:1d:71:af:7f:05:b4:32:b1:35:b2:b7:53:
                    ee:e5:f3:9e:a3:45:86:49:aa:43:a0:14:0d:7b:4d:
                    9a:76:59:75:00:e9:fe:07:56:30:36:cd:78:7e:a4:
                    9c:35:4d:e8:a7:2c:c1:3d:61:5a:4b:8e:d5:1c:19:
                    6d:99:87:ba:14:f0:89:83:6b:fc:ab:57:46:7d:d7:
                    15:bf:e1:8f:41:69:fd:4a:b7:a8:46:8b:43:51:3f:
                    4d:68:c8:cf:af:bd:de:c9:6b:22:10:98:8d:bc:88:
                    db:9f:51:04:89:d7:f8:c5:bc:2a:3f:17:30:8b:49:
                    f5:1e:e2:4f:27:76:01:58:01:44:77:fc:29:f4:87:
                    5f:96:d3:5d:9d:76:06:0e:17:c3:0e:6f:f1:4c:18:
                    36:a2:21:83:27:bc:ac:c0:9a:88:7e:e6:34:13:a1:
                    b9:c5:28:3a:a6:22:ce:70:8b:bb:bc:0e:ce:29:88:
                    1c:a1:13:37:95:55:11:76:5f:6f:59:82:6d:57:9b:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:26:7C:F2:D9:CD:BD:F3:5F:5F:9C:45:62:3E:84:25:2D:B7:A1
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:fa:55:f5:d3:71:45:d1:5a:ac:dc:06:85:83:ef:3c:8d:
         f0:19:20:81:c0:be:f2:59:21:56:d4:5a:30:9c:45:83:54:e8:
         10:ce:cd:08:6a:64:4f:37:06:14:28:e1:78:52:5e:47:90:4e:
         ec:81:53:69:61:ea:d6:97:2d:73:99:e9:1e:96:b6:ae:69:66:
         44:2d:9d:e4:e7:1d:9c:f9:4c:c1:a6:f9:14:e5:6e:75:72:66:
         0f:2a:33:44:b0:39:fc:53:41:5c:be:97:11:aa:d9:10:c8:b6:
         ce:f1:e2:5f:e0:24:89:0e:1a:85:9b:0d:b5:3c:63:d9:db:43:
         49:ce:97:56:f3:e4:64:6f:bb:d0:1b:77:14:a5:20:7e:f3:84:
         99:6f:9a:ef:6e:6c:a2:54:93:c1:6e:f2:ea:24:2b:5a:d4:65:
         b7:0b:1e:3d:89:2a:62:fc:9a:3b:0e:d1:80:13:55:4c:18:45:
         a8:bf:99:05:1d:8d:8d:06:73:20:23:9b:11:27:5d:2d:6d:a3:
         b9:0d:f1:20:86:d0:4a:62:8a:96:20:cd:b6:e9:70:1e:c5:a4:
         c1:9c:4f:02:7e:54:50:ce:49:cb:eb:ba:64:ec:3d:ac:f2:e0:
         88:6e:21:b3:e9:b7:70:2c:25:9c:3e:fb:4c:83:cb:3c:4b:61:
         74:39:1b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iH0vNbyhHiPbDIUEYnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTAyZjFhZjE3ZDAwZmQ4MGEzZDlmZTlmZmU4MWQwNGNl
MTc0NDcwHhcNMjYwMzI2MDcwMDUwWhcNMjYwMzI3MDcwMDUwWjAzMTEwLwYDVQQD
EyhlZTU0MjY3Y2YyZDljZGJkZjM1ZjVmOWM0NTYyM2U4NDI1MmRiN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTlqvuqS4IDXy0iybxdxFH1YDsy
2Jb1jdZIuOLhPoLTRx1wwcY2eVgSN49vlJmxbkuPAz8hjLNbq1Ip2Hwdca9/BbQy
sTWyt1Pu5fOeo0WGSapDoBQNe02adll1AOn+B1YwNs14fqScNU3opyzBPWFaS47V
HBltmYe6FPCJg2v8q1dGfdcVv+GPQWn9SreoRotDUT9NaMjPr73eyWsiEJiNvIjb
n1EEidf4xbwqPxcwi0n1HuJPJ3YBWAFEd/wp9IdfltNdnXYGDhfDDm/xTBg2oiGD
J7yswJqIfuY0E6G5xSg6piLOcIu7vA7OKYgcoRM3lVURdl9vWYJtV5u+awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5UJnzy2c29819fnEViPoQlLbehMB8GA1UdIwQY
MBaAFK0QLxrxfQD9gKPZ/p/+gdBM4XRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAt
M2IxYWFkOWZkZDU3LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAtM2IxYWFkOWZkZDU3
LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK76VfXT
cUXRWqzcBoWD7zyN8BkggcC+8lkhVtRaMJxFg1ToEM7NCGpkTzcGFCjheFJeR5BO
7IFTaWHq1pctc5npHpa2rmlmRC2d5OcdnPlMwab5FOVudXJmDyozRLA5/FNBXL6X
EarZEMi2zvHiX+AkiQ4ahZsNtTxj2dtDSc6XVvPkZG+70Bt3FKUgfvOEmW+a725s
olSTwW7y6iQrWtRltwsePYkqYvyaOw7RgBNVTBhFqL+ZBR2NjQZzICObESddLW2j
uQ3xIIbQSmKKliDNtulwHsWkwZxPAn5UUM5Jy+u6ZOw9rPLgiG4hs+m3cCwlnD77
TIPLPEthdDkbvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:28 2026 by rpki-client