Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          S/o1DSiKqdL75cx8Yk9ljAL3xQ2TcCf5J2mCGlORZ4M=
Subject key identifier:   62:DB:EF:52:1F:A8:C6:F2:49:2B:3B:53:A9:BA:C4:EF:BB:11:FA:4E
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019D28BBC724A006845B38CE0950F5C2279B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          18A1
Signing time:             Thu 26 Mar 2026 06:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:27 +0000
Files and hashes:         1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: sBwPjPMNfYv/pXDiyYyyEZChUBspWTwgX1ZVSq/rLq0=)
                          2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=)
                          3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=)
                          4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=)
                          5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=)
                          6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=)
                          7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=)
                          8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=)
                          9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=)
                          10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=)
                          11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=)
                          12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=)
                          13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=)
                          14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c7:24:a0:06:84:5b:38:ce:09:50:f5:c2:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Mar 26 06:01:27 2026 GMT
            Not After : Mar 27 06:01:27 2026 GMT
        Subject: CN=62dbef521fa8c6f2492b3b53a9bac4efbb11fa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:46:58:cb:87:f5:34:d3:00:76:13:86:d6:
                    6c:70:88:16:16:8e:11:0f:52:29:f9:b8:a0:32:b3:
                    78:8d:73:82:ac:dc:c2:b7:72:e2:10:09:d1:12:49:
                    ba:78:32:d8:82:c0:c9:35:0b:8d:bb:34:42:d2:20:
                    16:40:57:c0:84:80:ee:5f:8c:3d:47:4c:f7:9e:35:
                    61:8e:11:1c:75:0c:31:f3:b3:8e:79:8c:38:da:f2:
                    d4:27:fd:26:be:e2:79:d9:60:16:09:19:37:36:95:
                    5d:9f:58:cf:70:c1:b9:c8:67:0c:99:cf:20:49:c3:
                    10:69:44:9c:65:f7:43:87:d6:79:70:8d:9b:a0:9d:
                    63:e4:ff:8e:d9:4b:42:81:b0:0b:aa:83:79:42:6a:
                    48:9d:ee:2b:1c:d5:74:da:be:e0:45:b8:4e:67:08:
                    88:a8:c7:b9:f5:7e:95:90:95:3a:31:50:d2:7e:61:
                    01:71:23:15:d3:bd:3e:14:b6:f0:43:ec:d5:0c:88:
                    77:4c:53:51:71:bb:ce:ed:bc:1e:73:94:1e:5f:2c:
                    2c:f5:bc:d6:61:a9:fb:08:95:b9:2f:22:e0:4b:d4:
                    cf:c2:9f:90:ad:48:2c:4a:e9:f6:03:97:3b:9e:6f:
                    90:da:81:14:3c:90:cb:a4:f1:b2:94:82:ad:06:ae:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DB:EF:52:1F:A8:C6:F2:49:2B:3B:53:A9:BA:C4:EF:BB:11:FA:4E
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:7f:4e:74:80:28:4b:4a:ad:fc:1a:6f:f8:da:7b:da:50:
         6a:9d:cf:8a:8e:6c:db:32:8b:83:93:d1:94:e1:12:eb:c7:9c:
         69:31:90:3c:44:f2:a2:d0:8b:57:44:89:1e:5d:eb:2e:1f:82:
         70:be:d0:87:d1:7f:68:13:6f:e2:22:15:9a:eb:38:b6:fd:1e:
         55:10:8f:2e:89:86:4a:79:e4:47:4e:fb:12:70:1b:23:ff:58:
         93:e3:80:2c:53:54:2f:90:50:4f:97:18:ce:4d:d6:1a:2f:45:
         e8:93:c3:9f:30:3a:a2:10:ae:25:ee:a0:75:5f:98:af:42:28:
         70:cc:91:4a:f6:19:3b:a4:36:1d:58:73:3e:f4:dd:b8:4e:08:
         62:a5:a9:26:f2:04:e1:f0:fa:1e:9a:05:7f:aa:72:d1:32:30:
         1c:ae:a9:c8:90:08:68:e3:3c:e5:c8:c9:a5:31:80:ee:03:b7:
         d2:31:2a:55:8d:86:4a:66:24:e9:5f:63:34:33:6d:8b:58:3c:
         fb:68:f9:61:5a:94:4b:9b:2c:95:96:56:04:d7:6c:de:56:51:
         ea:4e:c0:40:d0:db:0a:f0:ce:6e:64:77:49:66:3e:69:8e:ff:
         a1:37:bf:e2:6e:15:fa:d1:90:0c:35:66:f5:77:8c:5f:6d:37:
         e1:d5:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:52 2026 by rpki-client