Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File:                     31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier:          xHRsrBS7ksCU+exWLNbBD/pjcWXS18jw0x4JCcM1Frs=
Subject key identifier:   45:24:CE:22:BE:4A:5D:5D:9A:92:D0:24:D9:28:FB:9E:0D:E1:34:95
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer:       /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial:       019D25F146C808F0FB98449DBA0BB419E1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 17:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:02 +0000
Files and hashes:         1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: 2CWf6ZYsQJ08M0RPrzACdI8lPrH1h4SRRWmT251mN2w=)
                          2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:46:c8:08:f0:fb:98:44:9d:ba:0b:b4:19:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
        Validity
            Not Before: Mar 25 17:01:02 2026 GMT
            Not After : Mar 26 17:01:02 2026 GMT
        Subject: CN=4524ce22be4a5d5d9a92d024d928fb9e0de13495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:19:7b:99:cd:ca:b4:53:c7:24:0a:d3:27:
                    e9:74:14:5c:32:03:a9:18:c0:c9:f6:90:5b:b6:3f:
                    64:ab:b5:b8:ba:58:e8:f5:e6:71:73:58:30:04:e7:
                    df:46:15:79:cd:11:09:fd:2e:48:0a:7c:3c:b3:ba:
                    a8:6c:ce:66:bb:1b:fe:21:5f:bd:7c:88:ff:8c:b7:
                    52:99:a8:f2:3f:b4:68:53:e6:25:c0:5d:59:e3:0c:
                    3d:78:3b:02:0b:d0:bc:a4:f9:de:29:04:95:d4:ec:
                    82:c0:41:55:0a:fd:6e:ec:7f:35:04:54:b6:10:e2:
                    5a:75:61:5f:1e:2c:d7:84:54:9a:bb:ec:7e:de:c2:
                    ab:78:ab:85:d3:8a:27:03:6a:d8:eb:98:f7:5f:87:
                    27:a9:89:16:2d:40:d7:b7:18:08:3b:b9:7d:12:d9:
                    18:b0:be:25:5d:86:5d:52:5d:a5:3a:47:59:e2:be:
                    a0:48:ec:ff:b0:26:db:95:34:f4:3c:b3:c2:35:f8:
                    e9:9f:a7:e4:f8:08:af:e6:a7:14:34:88:d2:14:f4:
                    23:1a:0b:d6:00:b0:bb:ac:5c:29:4f:d2:97:9d:92:
                    53:45:a9:40:28:80:3f:9a:d4:9f:1d:f9:96:fb:7a:
                    c8:4f:ec:b6:6e:1c:1d:27:92:88:4d:6e:72:60:e6:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:24:CE:22:BE:4A:5D:5D:9A:92:D0:24:D9:28:FB:9E:0D:E1:34:95
            X509v3 Authority Key Identifier:
                keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:71:39:1f:55:a4:4b:c2:63:89:41:d6:5b:24:99:99:d4:1d:
         81:85:b0:3d:9f:f5:ee:db:87:80:e7:7f:6b:25:b3:4e:b3:f9:
         6b:71:a5:80:f2:c9:44:81:c6:73:3e:c4:23:43:d3:1a:54:18:
         c7:5e:82:32:38:cf:ea:a8:1e:aa:18:81:0c:e9:83:16:09:60:
         d6:19:14:6d:20:d4:c1:68:00:83:71:cf:41:c0:9e:81:39:96:
         bf:d0:83:1b:3c:7a:b5:db:a5:8b:96:f8:f2:4b:0e:71:c0:ce:
         7f:0a:7e:96:de:89:aa:05:47:5e:a1:98:02:48:ae:f7:29:ff:
         fd:38:ca:13:e7:04:8e:bb:29:1c:ec:40:2c:b1:02:9e:2f:de:
         f4:50:b3:e4:38:74:69:4c:fa:9d:5f:cd:21:63:87:a3:18:2b:
         7f:03:e6:dd:80:74:3c:7d:8f:67:bb:fe:40:75:21:a2:60:6c:
         21:60:54:02:ba:90:8f:ef:6d:fb:6e:28:b3:b4:77:42:c8:e0:
         18:00:6d:0f:ac:fb:68:c2:27:e9:13:2e:59:de:43:07:46:86:
         44:60:c1:b0:7d:66:c6:ae:b8:91:37:6e:b6:64:5c:4b:20:5f:
         2e:84:c0:fa:6e:31:80:0e:8d:84:e5:0a:11:e2:9a:11:b6:ef:
         2b:0b:12:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UbICPD7mESdugu0GeHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjYwMzI1MTcwMTAyWhcNMjYwMzI2MTcwMTAyWjAzMTEwLwYDVQQD
Eyg0NTI0Y2UyMmJlNGE1ZDVkOWE5MmQwMjRkOTI4ZmI5ZTBkZTEzNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoZe5nNyrRTxyQK0yfpdBRcMgOp
GMDJ9pBbtj9kq7W4uljo9eZxc1gwBOffRhV5zREJ/S5ICnw8s7qobM5muxv+IV+9
fIj/jLdSmajyP7RoU+YlwF1Z4ww9eDsCC9C8pPneKQSV1OyCwEFVCv1u7H81BFS2
EOJadWFfHizXhFSau+x+3sKreKuF04onA2rY65j3X4cnqYkWLUDXtxgIO7l9EtkY
sL4lXYZdUl2lOkdZ4r6gSOz/sCbblTT0PLPCNfjpn6fk+Aiv5qcUNIjSFPQjGgvW
ALC7rFwpT9KXnZJTRalAKIA/mtSfHfmW+3rIT+y2bhwdJ5KITW5yYOZXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUkziK+Sl1dmpLQJNko+54N4TSVMB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3E5H1Wk
S8JjiUHWWySZmdQdgYWwPZ/17tuHgOd/ayWzTrP5a3GlgPLJRIHGcz7EI0PTGlQY
x16CMjjP6qgeqhiBDOmDFglg1hkUbSDUwWgAg3HPQcCegTmWv9CDGzx6tduli5b4
8ksOccDOfwp+lt6JqgVHXqGYAkiu9yn//TjKE+cEjrspHOxALLECni/e9FCz5Dh0
aUz6nV/NIWOHoxgrfwPm3YB0PH2PZ7v+QHUhomBsIWBUArqQj+9t+24os7R3Qsjg
GABtD6z7aMIn6RMuWd5DB0aGRGDBsH1mxq64kTdutmRcSyBfLoTA+m4xgA6NhOUK
EeKaEbbvKwsSkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:21 2026 by rpki-client