Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          KrA1hAiuzfCmW6ZAjaNteYkFSi3hcltcN+gk02DsY0s=
Subject key identifier:   C0:21:C0:E1:E3:9A:F8:92:6B:FE:67:74:56:61:DA:8B:B0:86:24:93
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       019D2AE02440612CD34BBDD9E69B1A1BE027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          1825
Signing time:             Thu 26 Mar 2026 16:00:25 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:25 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:25 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (hash: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs=)
                          3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: piXs7IUu4K4LbnXkwaNLzsgqdjxX61AyG0HfKH799tE=)
                          4: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (hash: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE=)
                          5: OoGvPehNjKU6hE3SxfV0wILIsN4.roa (hash: 7Php/xkVqP8tmnrDY7MQsYCSTzCCLDFw6kgWF4S8f2I=)
                          6: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:24:40:61:2c:d3:4b:bd:d9:e6:9b:1a:1b:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Mar 26 16:00:25 2026 GMT
            Not After : Mar 27 16:00:25 2026 GMT
        Subject: CN=c021c0e1e39af8926bfe67745661da8bb0862493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1c:8a:b7:97:1a:ae:c9:c7:9e:bd:91:ba:6b:
                    3f:4c:45:88:f6:db:61:ef:a0:9e:b6:15:79:48:3a:
                    21:64:eb:77:a0:35:6f:f8:ac:cb:3f:87:3b:26:7b:
                    6d:f5:a0:b7:33:a8:8a:4c:17:96:f1:64:28:6b:0d:
                    ee:38:09:be:63:ae:28:45:6b:8e:ea:d3:90:8f:74:
                    6a:b9:1f:3b:48:6c:fd:e1:13:a2:af:69:09:5e:bf:
                    12:e6:79:16:7d:83:c3:09:ab:b4:4d:5f:71:01:0f:
                    d4:21:f8:6c:92:16:42:dd:ca:23:95:4d:29:40:53:
                    85:a6:4c:14:af:b8:6b:4f:63:bf:fa:1f:ab:c7:57:
                    8c:04:2a:af:eb:39:81:0f:c3:dd:43:38:dd:c1:e1:
                    76:88:d7:f6:3a:69:d3:18:24:59:a5:d6:56:7a:58:
                    43:40:b0:85:70:54:8e:ae:45:54:7b:06:21:26:a2:
                    75:94:e5:75:0d:43:82:8c:2e:36:1d:94:1a:5e:07:
                    93:b8:b9:de:6b:3b:5a:18:3c:37:8f:37:f3:59:8c:
                    fb:7e:b6:b0:91:70:58:ed:4a:7e:b8:b7:48:ff:56:
                    7f:7d:1c:44:d2:23:94:da:67:19:e8:57:eb:c8:ba:
                    da:06:e3:2b:78:3b:72:bf:dc:f7:e0:57:8b:63:08:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:C0:E1:E3:9A:F8:92:6B:FE:67:74:56:61:DA:8B:B0:86:24:93
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:25:b2:dc:88:c8:ee:37:1c:79:ad:2d:ae:e8:eb:2a:7e:3e:
         f1:dc:c2:44:61:14:46:90:21:53:19:38:6b:64:86:b0:1e:1e:
         86:90:e5:3f:db:33:90:78:0d:71:ce:01:4b:a2:01:9a:1e:52:
         5e:a4:68:30:e4:66:87:ed:f1:dc:65:3e:1f:29:0f:01:5d:32:
         9b:72:0c:56:c7:28:7d:bc:c0:49:bf:cd:57:c4:6f:59:c5:ff:
         c5:14:eb:a0:d1:71:fa:06:50:b1:44:5e:e6:04:fa:0b:b9:30:
         58:4f:6e:3a:e6:80:45:1e:54:b3:26:34:17:ee:d5:11:72:0f:
         be:9d:16:ac:81:ec:5d:d7:c1:dd:c7:16:c8:ee:29:ce:35:1e:
         e3:0b:f7:77:5f:3d:e0:b9:99:34:ee:ab:28:ec:92:47:b1:2d:
         42:ba:f9:f3:ff:21:9a:91:e9:1a:99:e2:a2:3e:55:a0:01:9d:
         a8:50:f1:67:00:fe:ae:14:d4:f6:4f:be:13:d9:9d:8a:da:21:
         55:eb:d0:8b:f0:98:31:b2:87:b5:59:69:4b:86:a7:bb:e2:95:
         a4:99:29:6f:fd:42:d2:7f:85:46:6b:26:70:52:a8:6d:46:b6:
         c4:01:a3:02:d2:f9:10:cc:f4:f4:24:3c:7a:11:b0:35:35:c9:
         f9:ba:7e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4CRAYSzTS73Z5psaG+AnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2
M2MwZGYwHhcNMjYwMzI2MTYwMDI1WhcNMjYwMzI3MTYwMDI1WjAzMTEwLwYDVQQD
EyhjMDIxYzBlMWUzOWFmODkyNmJmZTY3NzQ1NjYxZGE4YmIwODYyNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hyKt5carsnHnr2Rums/TEWI9tth
76CethV5SDohZOt3oDVv+KzLP4c7Jntt9aC3M6iKTBeW8WQoaw3uOAm+Y64oRWuO
6tOQj3RquR87SGz94ROir2kJXr8S5nkWfYPDCau0TV9xAQ/UIfhskhZC3cojlU0p
QFOFpkwUr7hrT2O/+h+rx1eMBCqv6zmBD8PdQzjdweF2iNf2OmnTGCRZpdZWelhD
QLCFcFSOrkVUewYhJqJ1lOV1DUOCjC42HZQaXgeTuLneaztaGDw3jzfzWYz7fraw
kXBY7Up+uLdI/1Z/fRxE0iOU2mcZ6FfryLraBuMreDtyv9z34FeLYwicUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAhwOHjmviSa/5ndFZh2ouwhiSTMB8GA1UdIwQY
MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt
YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm
LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiWy3IjI
7jccea0trujrKn4+8dzCRGEURpAhUxk4a2SGsB4ehpDlP9szkHgNcc4BS6IBmh5S
XqRoMORmh+3x3GU+HykPAV0ym3IMVscofbzASb/NV8RvWcX/xRTroNFx+gZQsURe
5gT6C7kwWE9uOuaARR5UsyY0F+7VEXIPvp0WrIHsXdfB3ccWyO4pzjUe4wv3d189
4LmZNO6rKOySR7EtQrr58/8hmpHpGpnioj5VoAGdqFDxZwD+rhTU9k++E9mditoh
VevQi/CYMbKHtVlpS4anu+KVpJkpb/1C0n+FRmsmcFKobUa2xAGjAtL5EMz09CQ8
ehGwNTXJ+bp+Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:33 2026 by rpki-client