Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          NATRk0G7M5pF4OVfqVMaJ+yZuTmI0MxUMwHn1QK3Uxo=
Subject key identifier:   A6:13:08:5F:95:18:5E:46:79:17:CE:07:E1:2E:C8:20:A0:B3:59:AD
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       019D281708483575B8B718349449AE3D603C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:31 +0000
Files and hashes:         1: 3IEzMW9wkvjdW6dqOUxlESavJGw.roa (hash: 2z0dKbAFS8Y5M9QfS1OwUUX8b4XiNgWAST0EQxAlJ70=)
                          2: K-_2uZ2W_94glxC861Amn-MX16Y.roa (hash: 8kuZRTyoDvaEWZI2mWm260ca1KMDIA3sdGDe2hunErA=)
                          3: QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa (hash: jXJ+eXWdyEUtOYkWh8o1m/VVINUVOvHgc2gRQU8crLU=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: v+yzRAy1VT7KhYeX06ka3V6cd9Qvo+gnooBydjrdDVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:17:08:48:35:75:b8:b7:18:34:94:49:ae:3d:60:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Mar 26 03:01:31 2026 GMT
            Not After : Mar 27 03:01:31 2026 GMT
        Subject: CN=a613085f95185e467917ce07e12ec820a0b359ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:e0:47:26:5a:8e:3f:cd:2f:4f:c7:2d:80:
                    d3:60:37:af:f5:c1:43:17:a1:e2:f4:12:9a:da:d2:
                    e8:c3:f1:4c:5b:22:a2:9f:69:2c:bc:59:f5:da:bb:
                    7a:ce:5b:99:64:22:3f:50:34:99:39:8e:d8:b4:c8:
                    33:6c:6d:aa:0f:2a:56:6c:56:4e:99:94:46:8f:03:
                    f0:76:98:5e:75:a2:07:79:91:1d:da:c3:2a:2b:ce:
                    fb:72:e4:4a:81:b1:0b:22:aa:ec:86:f8:33:cb:8f:
                    d4:73:6a:dc:28:85:1a:e7:e5:88:c7:ea:f1:24:6e:
                    20:20:7a:c2:f0:ac:84:3e:01:1d:e5:24:e0:f7:eb:
                    ce:fe:b4:b9:cb:c3:85:33:8e:2e:91:95:44:ae:ba:
                    7f:7d:ad:23:7c:75:27:c2:f8:67:7f:e3:d7:3d:5a:
                    2a:ca:ec:c3:eb:a1:ec:86:c1:64:53:5f:5d:92:da:
                    cc:14:07:8a:dd:4d:67:2b:3b:69:ba:df:0b:38:e3:
                    1c:6a:08:c7:4c:f5:a3:f8:d8:3e:06:47:b6:ca:e3:
                    7d:cf:52:6e:fd:80:24:11:6e:c8:1e:90:90:21:92:
                    d0:20:18:a4:12:89:bb:fd:71:d2:dd:c0:d6:c6:9d:
                    b6:d6:92:92:36:04:4c:c0:1e:b5:18:05:41:00:dd:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:08:5F:95:18:5E:46:79:17:CE:07:E1:2E:C8:20:A0:B3:59:AD
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:69:03:5e:17:ec:d5:57:c8:26:35:00:65:01:be:ea:04:fc:
         0c:55:09:ca:1c:0c:25:57:d9:d6:2e:28:1f:1e:8a:f4:15:5a:
         ae:d5:25:12:17:51:c8:6d:f9:c7:5a:c3:cf:be:47:46:99:00:
         b8:e3:99:0b:98:2c:cd:d2:b4:5e:87:54:1d:f9:61:ba:48:db:
         56:6b:4c:8d:15:c3:39:f9:9f:fb:46:f6:9a:a0:bb:7f:8f:69:
         a6:a6:01:9c:24:19:b4:d1:92:71:f2:b7:5a:ec:44:82:09:66:
         6a:9b:4b:49:37:6c:30:00:0c:7a:c1:bb:e2:eb:32:4f:89:ed:
         a2:92:fc:aa:b5:e7:26:b5:a2:c1:f4:e5:b3:17:40:95:0a:4d:
         76:17:af:f7:3f:ba:94:cc:4e:37:4d:e2:19:de:b5:73:12:0a:
         42:25:3e:e4:f9:0a:52:85:da:4a:b4:a4:b0:20:69:03:c2:df:
         c8:4c:43:fb:44:77:49:54:e6:f0:ea:e0:e6:03:26:2c:28:8c:
         39:0c:a8:e2:ee:a6:e0:23:df:30:0f:0d:dc:14:1b:b3:92:ba:
         09:53:fb:b2:91:58:3a:af:e2:af:29:a7:b6:83:21:af:b2:61:
         bd:ad:01:10:02:24:e2:d7:58:ae:9b:db:50:8c:f9:2a:1b:b8:
         e2:a9:c9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFwhINXW4txg0lEmuPWA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx
NDc2NjMwHhcNMjYwMzI2MDMwMTMxWhcNMjYwMzI3MDMwMTMxWjAzMTEwLwYDVQQD
EyhhNjEzMDg1Zjk1MTg1ZTQ2NzkxN2NlMDdlMTJlYzgyMGEwYjM1OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk/gRyZajj/NL0/HLYDTYDev9cFD
F6Hi9BKa2tLow/FMWyKin2ksvFn12rt6zluZZCI/UDSZOY7YtMgzbG2qDypWbFZO
mZRGjwPwdphedaIHeZEd2sMqK877cuRKgbELIqrshvgzy4/Uc2rcKIUa5+WIx+rx
JG4gIHrC8KyEPgEd5STg9+vO/rS5y8OFM44ukZVErrp/fa0jfHUnwvhnf+PXPVoq
yuzD66HshsFkU19dktrMFAeK3U1nKztput8LOOMcagjHTPWj+Ng+Bke2yuN9z1Ju
/YAkEW7IHpCQIZLQIBikEom7/XHS3cDWxp221pKSNgRMwB61GAVBAN3SUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYTCF+VGF5GeRfOB+EuyCCgs1mtMB8GA1UdIwQY
MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt
MDc5OWE1MmE2Mzg3LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3
LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGkDXhfs
1VfIJjUAZQG+6gT8DFUJyhwMJVfZ1i4oHx6K9BVartUlEhdRyG35x1rDz75HRpkA
uOOZC5gszdK0XodUHflhukjbVmtMjRXDOfmf+0b2mqC7f49ppqYBnCQZtNGScfK3
WuxEgglmaptLSTdsMAAMesG74usyT4ntopL8qrXnJrWiwfTlsxdAlQpNdhev9z+6
lMxON03iGd61cxIKQiU+5PkKUoXaSrSksCBpA8LfyExD+0R3SVTm8Org5gMmLCiM
OQyo4u6m4CPfMA8N3BQbs5K6CVP7spFYOq/irymntoMhr7Jhva0BEAIk4tdYrpvb
UIz5Khu44qnJyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:47 2026 by rpki-client