Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File:                     fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier:          9acIXg21XySs8/XzUUv0fzy2pUUaWSgLvYZzj76XLhQ=
Subject key identifier:   5E:BF:89:9B:9B:8E:4E:FE:3F:BA:F8:E7:F5:DE:F0:55:04:EF:64:2E
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       019D27A8E195928971F36CADAA4E3931AACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number:          0BD3
Signing time:             Thu 26 Mar 2026 01:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:12 +0000
Files and hashes:         1: Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa (hash: NXq7kChGH24MXWlnwrMypjf5dlmgOh9tkgpPRlq06/w=)
                          2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: vq40nCDOhmT2Yky8dLdTkzskqBifVF3O1X6Up9sq2Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e1:95:92:89:71:f3:6c:ad:aa:4e:39:31:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Mar 26 01:01:12 2026 GMT
            Not After : Mar 27 01:01:12 2026 GMT
        Subject: CN=5ebf899b9b8e4efe3fbaf8e7f5def05504ef642e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:3b:63:be:8f:d1:fa:bd:93:82:00:54:79:
                    62:d1:a0:4f:f6:66:44:95:b5:4d:0d:73:2e:33:b6:
                    1c:af:a9:55:9c:7f:9d:de:62:d7:a4:9d:d8:68:39:
                    5d:46:ba:63:2c:a7:68:87:2f:26:f7:04:aa:5e:39:
                    d5:86:d8:59:12:3d:86:b3:ee:2b:f0:c6:ff:8e:5c:
                    fa:15:03:6c:d3:83:fa:25:86:4c:99:40:17:4c:3b:
                    44:fd:bb:d4:d2:98:0c:73:da:6e:23:5b:7f:54:64:
                    f1:8e:a6:68:a2:8e:2f:7d:52:5b:af:b5:51:50:dd:
                    17:2a:72:dd:c6:c9:f4:33:df:72:14:7b:b3:43:a6:
                    09:15:a1:f6:62:de:31:ee:f5:a0:ff:33:d5:28:2f:
                    d0:f1:48:b8:59:bd:7c:b7:f2:94:0d:18:3a:06:2e:
                    e8:86:fc:09:a6:0f:f3:bf:57:9c:34:97:d1:68:5f:
                    9d:b5:ab:aa:52:77:c1:06:bc:da:9a:8b:6e:f4:53:
                    74:e3:f7:3b:02:43:83:34:21:4b:46:5f:8d:ce:73:
                    73:3f:b3:c0:47:58:19:33:47:24:7c:46:26:3b:46:
                    11:0c:17:1d:63:d6:43:27:31:2b:32:52:fd:e5:20:
                    61:23:b0:df:05:41:21:65:fc:20:3e:98:d4:6c:41:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BF:89:9B:9B:8E:4E:FE:3F:BA:F8:E7:F5:DE:F0:55:04:EF:64:2E
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:91:94:2d:59:e2:3e:78:28:36:f8:31:7f:1a:86:cc:30:d4:
         89:d2:11:2e:42:b9:60:b2:23:a3:33:66:11:13:4f:32:d7:ea:
         31:3e:4a:53:d8:b0:75:8e:61:c0:f6:9d:95:44:e2:58:17:27:
         79:45:9d:c0:4c:16:fe:04:85:e6:55:93:0d:36:5d:bd:76:ac:
         79:8c:d3:24:bb:d9:3e:d1:89:4a:9c:71:f6:7d:73:2f:db:db:
         ac:5d:2a:a5:a7:c5:4c:c6:20:eb:7a:39:d9:06:96:3e:3e:5c:
         41:91:6b:32:1f:c6:57:eb:65:f6:b4:aa:1c:9a:91:eb:b5:5b:
         ac:c7:a6:f9:16:f6:e3:d3:38:82:63:6a:e0:06:7c:70:b5:4b:
         57:49:e7:62:e4:8c:80:20:26:66:15:53:83:21:3e:3d:f2:69:
         52:32:d1:24:85:79:55:31:30:2d:54:48:1e:f3:6f:64:95:2a:
         98:03:cf:37:10:37:a7:64:74:7d:af:84:9a:d9:78:73:82:92:
         70:e6:42:6c:cc:ef:2e:34:33:c2:60:2f:43:56:11:c0:9a:b5:
         94:ce:c1:12:7b:e0:12:c8:23:cc:4e:b1:b8:f4:fd:38:23:13:
         6a:68:75:87:f3:9b:f1:01:c7:8b:a4:99:85:e3:f9:e8:f4:8c:
         75:8f:e3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOGVkolx82ytqk45MarNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj
NWFlNDgwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
Eyg1ZWJmODk5YjliOGU0ZWZlM2ZiYWY4ZTdmNWRlZjA1NTA0ZWY2NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjE7Y76P0fq9k4IAVHli0aBP9mZE
lbVNDXMuM7Ycr6lVnH+d3mLXpJ3YaDldRrpjLKdohy8m9wSqXjnVhthZEj2Gs+4r
8Mb/jlz6FQNs04P6JYZMmUAXTDtE/bvU0pgMc9puI1t/VGTxjqZooo4vfVJbr7VR
UN0XKnLdxsn0M99yFHuzQ6YJFaH2Yt4x7vWg/zPVKC/Q8Ui4Wb18t/KUDRg6Bi7o
hvwJpg/zv1ecNJfRaF+dtauqUnfBBrzamotu9FN04/c7AkODNCFLRl+NznNzP7PA
R1gZM0ckfEYmO0YRDBcdY9ZDJzErMlL95SBhI7DfBUEhZfwgPpjUbEHy3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6/iZubjk7+P7r45/Xe8FUE72QuMB8GA1UdIwQY
MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et
YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2
LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5GULVni
PngoNvgxfxqGzDDUidIRLkK5YLIjozNmERNPMtfqMT5KU9iwdY5hwPadlUTiWBcn
eUWdwEwW/gSF5lWTDTZdvXaseYzTJLvZPtGJSpxx9n1zL9vbrF0qpafFTMYg63o5
2QaWPj5cQZFrMh/GV+tl9rSqHJqR67VbrMem+Rb249M4gmNq4AZ8cLVLV0nnYuSM
gCAmZhVTgyE+PfJpUjLRJIV5VTEwLVRIHvNvZJUqmAPPNxA3p2R0fa+Emtl4c4KS
cOZCbMzvLjQzwmAvQ1YRwJq1lM7BEnvgEsgjzE6xuPT9OCMTamh1h/Ob8QHHi6SZ
heP56PSMdY/jiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:41 2026 by rpki-client