Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File:                     suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier:          0ltK1DzDGJpOnlOHV1kp/mJevE7z/tUXwMmkE/L6X+Q=
Subject key identifier:   36:70:6C:E4:B4:C1:8D:3D:BC:67:DE:B6:8B:87:C0:DB:9E:C0:97:A4
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer:       /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial:       019D284D83A812B94C3FF763AA1D2A32FF30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 04:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:01 +0000
Files and hashes:         1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
                          2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: x1tI6bO/NTJbAIwxDjGPCzpVN3vlZzBtXS05DFOp+ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:83:a8:12:b9:4c:3f:f7:63:aa:1d:2a:32:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
        Validity
            Not Before: Mar 26 04:01:01 2026 GMT
            Not After : Mar 27 04:01:01 2026 GMT
        Subject: CN=36706ce4b4c18d3dbc67deb68b87c0db9ec097a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:d0:bc:e9:af:50:12:57:b6:48:d9:d0:b9:
                    f8:12:46:b2:49:7b:ae:c1:26:a1:47:25:ff:ab:81:
                    46:4e:7e:4a:98:63:cf:5a:94:ea:1a:b5:47:55:93:
                    25:a9:23:45:a0:fb:84:89:5c:39:5d:c0:ca:e1:f6:
                    13:fd:5a:65:d1:1f:1f:b8:dd:32:ee:c9:2d:4a:53:
                    7e:fd:95:8e:da:4f:2b:04:9e:d5:79:46:c8:5d:88:
                    0b:7e:4e:1b:54:d9:94:87:48:82:04:97:13:a4:52:
                    c1:8e:bb:88:0f:ff:99:fc:5a:23:c6:82:09:59:89:
                    77:6d:9d:36:20:5c:b2:41:88:f8:3f:71:07:0b:ea:
                    a7:d1:5a:e3:73:c7:96:f1:0e:81:54:d8:fc:ce:4b:
                    97:da:3c:70:69:3a:33:ee:f5:e3:06:d5:83:51:59:
                    c5:0f:38:f5:1d:f5:5e:df:35:0a:d4:2c:8f:97:9f:
                    68:98:36:82:b0:25:c3:34:d7:f4:59:15:75:0e:d9:
                    68:08:82:63:55:cd:a0:c5:27:a7:69:2f:71:03:99:
                    a6:9c:a7:61:02:9b:86:9b:8c:cf:23:12:6b:c4:28:
                    a2:9c:fc:8d:54:ee:d0:49:0e:09:03:39:d5:d9:20:
                    46:69:fa:bb:d3:6b:4a:a3:4e:85:8d:4c:ea:d4:fa:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:6C:E4:B4:C1:8D:3D:BC:67:DE:B6:8B:87:C0:DB:9E:C0:97:A4
            X509v3 Authority Key Identifier:
                keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:66:ee:76:77:98:c1:32:18:70:15:26:22:5b:9a:b9:a7:ed:
         5a:3c:5e:ba:86:4b:7a:ff:aa:b2:bc:09:7b:5d:05:e5:a7:a9:
         63:a3:0b:48:7c:ff:f6:6f:27:49:18:ce:b3:28:c4:67:67:60:
         e0:f0:df:c7:bb:ea:33:3c:a3:1f:6b:df:ad:fe:09:74:55:47:
         05:26:ca:94:af:18:c9:64:a3:41:1f:f7:de:ab:8b:c2:fc:f1:
         8c:9d:70:dc:2e:d3:2f:e5:bd:7f:b7:64:a2:fb:7d:80:1e:fe:
         47:39:e9:bc:54:64:72:dc:b5:59:bb:bf:ff:13:5c:06:41:d1:
         85:93:bd:64:13:77:95:6d:6d:aa:1a:26:a8:92:b9:07:a1:63:
         10:14:0f:a6:5c:f5:be:8d:20:be:c8:3e:76:74:eb:eb:ca:32:
         5b:ce:39:1a:02:86:28:26:6f:15:9b:19:fa:84:2f:b3:a1:6e:
         4d:a7:7d:39:ee:79:a1:ac:2d:81:29:f5:5c:70:27:4a:6f:65:
         e1:2a:64:7a:c8:fc:cf:0a:6e:af:f7:26:a7:72:5f:d9:64:e2:
         57:3b:43:8f:9f:05:40:9a:06:96:3f:cc:5a:13:08:1d:3b:a9:
         44:ed:9e:e4:e7:f9:46:fc:4b:c2:e1:76:99:bd:c0:7f:a5:3b:
         ba:9c:8b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYOoErlMP/djqh0qMv8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjYwMzI2MDQwMTAxWhcNMjYwMzI3MDQwMTAxWjAzMTEwLwYDVQQD
EygzNjcwNmNlNGI0YzE4ZDNkYmM2N2RlYjY4Yjg3YzBkYjllYzA5N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDQvOmvUBJXtkjZ0Ln4EkaySXuu
wSahRyX/q4FGTn5KmGPPWpTqGrVHVZMlqSNFoPuEiVw5XcDK4fYT/Vpl0R8fuN0y
7sktSlN+/ZWO2k8rBJ7VeUbIXYgLfk4bVNmUh0iCBJcTpFLBjruID/+Z/FojxoIJ
WYl3bZ02IFyyQYj4P3EHC+qn0Vrjc8eW8Q6BVNj8zkuX2jxwaToz7vXjBtWDUVnF
Dzj1HfVe3zUK1CyPl59omDaCsCXDNNf0WRV1DtloCIJjVc2gxSenaS9xA5mmnKdh
ApuGm4zPIxJrxCiinPyNVO7QSQ4JAznV2SBGafq702tKo06FjUzq1Po9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZwbOS0wY09vGfetouHwNuewJekMB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGbudneY
wTIYcBUmIluauaftWjxeuoZLev+qsrwJe10F5aepY6MLSHz/9m8nSRjOsyjEZ2dg
4PDfx7vqMzyjH2vfrf4JdFVHBSbKlK8YyWSjQR/33quLwvzxjJ1w3C7TL+W9f7dk
ovt9gB7+RznpvFRkcty1Wbu//xNcBkHRhZO9ZBN3lW1tqhomqJK5B6FjEBQPplz1
vo0gvsg+dnTr68oyW845GgKGKCZvFZsZ+oQvs6FuTad9Oe55oawtgSn1XHAnSm9l
4Spkesj8zwpur/cmp3Jf2WTiVztDj58FQJoGlj/MWhMIHTupRO2e5Of5RvxLwuF2
mb3Af6U7upyLQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:07 2026 by rpki-client