Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File:                     S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier:          HiUjp0dmlgWuXP8fn5zq8KYykOTWvtjJSqnTHR+EtgY=
Subject key identifier:   D7:B8:64:58:F4:2E:F1:F4:3E:08:0F:1E:9E:1E:77:3C:D7:B2:56:3B
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer:       /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial:       019D2583CB8128888B0942EBD76898207F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number:          040B
Signing time:             Wed 25 Mar 2026 15:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:27 +0000
Files and hashes:         1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: CRsP6hsLCt6f/3irb4kPzI9FBflWk4KQqD3wlyNoCe0=)
                          2: stwCeWMzGL7ZQca28YuX50xe0DI.roa (hash: UrA8IbR6QSjufOgIOzy59dzg6O9c8YCged1nYroTzqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:cb:81:28:88:8b:09:42:eb:d7:68:98:20:7f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
        Validity
            Not Before: Mar 25 15:01:27 2026 GMT
            Not After : Mar 26 15:01:27 2026 GMT
        Subject: CN=d7b86458f42ef1f43e080f1e9e1e773cd7b2563b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:89:74:69:9b:63:e4:c6:26:48:ff:31:09:
                    c4:17:ce:48:63:ad:aa:3f:c5:02:15:e8:2a:59:14:
                    fe:6f:fe:67:da:32:72:15:1e:48:ed:6e:d3:a6:a6:
                    36:8b:9e:13:76:d8:f5:c1:6a:62:ce:55:9c:2e:d3:
                    b5:43:49:d6:cb:26:de:ca:58:58:07:ac:9f:9b:fa:
                    65:47:5f:56:b0:7d:af:64:93:5e:a6:f0:55:4c:6a:
                    1c:16:a3:be:ce:81:ee:3a:23:61:42:e3:a8:8f:96:
                    a8:93:5d:c3:c3:51:d2:7b:46:b4:72:2d:2a:fd:76:
                    12:84:a1:9f:b8:ba:0f:0b:b7:67:ee:7e:e2:8f:ab:
                    fb:1b:5f:d7:63:54:fe:59:b6:14:62:34:67:8c:46:
                    91:0c:de:31:d9:e3:34:f7:11:6b:16:07:6a:c8:f8:
                    fe:02:76:9e:81:8b:c1:63:3b:33:d2:17:9a:b5:e9:
                    5d:18:ca:76:1d:10:cc:74:66:dd:37:9c:1b:44:c7:
                    60:39:83:e1:44:f7:16:30:b9:b9:78:26:5b:5a:92:
                    52:96:0b:78:ec:8f:34:9c:97:db:00:e0:d1:95:75:
                    73:62:28:31:3d:55:67:1e:4f:f3:19:0a:a9:a0:54:
                    fc:3f:e0:81:61:95:dc:d5:a2:6c:a0:7e:19:06:f0:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:64:58:F4:2E:F1:F4:3E:08:0F:1E:9E:1E:77:3C:D7:B2:56:3B
            X509v3 Authority Key Identifier:
                keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:e9:4b:fa:9a:1d:5a:b5:9d:5f:2c:6a:10:d7:76:a2:d2:
         92:4a:0c:af:9f:43:6f:54:ee:9b:62:b8:97:20:a0:e0:75:ce:
         18:e4:1f:c8:c6:16:e4:4e:c1:d5:e1:44:29:41:df:11:33:ae:
         cf:46:d8:6a:a2:47:18:68:c9:24:af:d8:ab:e5:30:b1:67:ee:
         fb:bf:f6:8b:cc:98:e4:ae:cc:96:c1:6c:ac:3f:0f:d0:22:05:
         78:2b:3f:4c:1b:31:8b:0f:08:0d:5b:ff:00:5d:8e:2f:8b:7a:
         21:df:14:a8:37:d2:b4:bf:e0:95:e8:b4:49:5c:30:45:95:ca:
         f0:07:b5:ea:1a:64:30:bc:10:11:1f:b5:d9:09:8e:2d:aa:b2:
         16:ab:c7:64:2e:23:00:55:58:25:19:ca:52:79:51:57:19:d2:
         e5:5d:6c:c8:62:56:24:56:cd:31:97:ad:24:30:a4:3a:c5:71:
         f8:01:5d:cb:72:5c:d5:80:34:6c:d8:d4:f4:cb:e5:c8:47:61:
         c6:2c:4f:3f:7e:92:5c:f8:b7:60:61:b7:ff:48:5c:23:7e:b9:
         e0:1a:f2:86:0f:4f:f8:79:37:98:19:ee:b1:e1:f6:70:0a:3e:
         1c:6f:cb:f1:c0:df:5e:f4:aa:a1:52:9b:1d:73:35:b7:90:48:
         85:19:99:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg8uBKIiLCULr12iYIH83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh
MmRhNGIwHhcNMjYwMzI1MTUwMTI3WhcNMjYwMzI2MTUwMTI3WjAzMTEwLwYDVQQD
EyhkN2I4NjQ1OGY0MmVmMWY0M2UwODBmMWU5ZTFlNzczY2Q3YjI1NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZmJdGmbY+TGJkj/MQnEF85IY62q
P8UCFegqWRT+b/5n2jJyFR5I7W7TpqY2i54Tdtj1wWpizlWcLtO1Q0nWyybeylhY
B6yfm/plR19WsH2vZJNepvBVTGocFqO+zoHuOiNhQuOoj5aok13Dw1HSe0a0ci0q
/XYShKGfuLoPC7dn7n7ij6v7G1/XY1T+WbYUYjRnjEaRDN4x2eM09xFrFgdqyPj+
AnaegYvBYzsz0heateldGMp2HRDMdGbdN5wbRMdgOYPhRPcWMLm5eCZbWpJSlgt4
7I80nJfbAODRlXVzYigxPVVnHk/zGQqpoFT8P+CBYZXc1aJsoH4ZBvCqrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe4ZFj0LvH0PggPHp4edzzXslY7MB8GA1UdIwQY
MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt
NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1
LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfDpS/qa
HVq1nV8sahDXdqLSkkoMr59Db1Tum2K4lyCg4HXOGOQfyMYW5E7B1eFEKUHfETOu
z0bYaqJHGGjJJK/Yq+UwsWfu+7/2i8yY5K7MlsFsrD8P0CIFeCs/TBsxiw8IDVv/
AF2OL4t6Id8UqDfStL/glei0SVwwRZXK8Ae16hpkMLwQER+12QmOLaqyFqvHZC4j
AFVYJRnKUnlRVxnS5V1syGJWJFbNMZetJDCkOsVx+AFdy3Jc1YA0bNjU9MvlyEdh
xixPP36SXPi3YGG3/0hcI3654Bryhg9P+Hk3mBnuseH2cAo+HG/L8cDfXvSqoVKb
HXM1t5BIhRmZ2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:14 2026 by rpki-client