Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File:                     RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier:          E2cZx78kKBc1F4GRLoL6FRzm8iOFiBlqnIB3lVZf4HI=
Subject key identifier:   98:93:C4:E6:A5:6E:53:B1:C8:7A:00:DD:C5:A2:7A:0D:A3:EC:FF:2D
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer:       /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial:       019D292998666A3FC4AD12C639D5DC55A9E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number:          1797
Signing time:             Thu 26 Mar 2026 08:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:24 +0000
Files and hashes:         1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: jMJwI6HVeGrOhgBY0WuQ8yXYz+vL6MytUG1DtVdsaNU=)
                          2: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (hash: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:98:66:6a:3f:c4:ad:12:c6:39:d5:dc:55:a9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
        Validity
            Not Before: Mar 26 08:01:24 2026 GMT
            Not After : Mar 27 08:01:24 2026 GMT
        Subject: CN=9893c4e6a56e53b1c87a00ddc5a27a0da3ecff2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:84:ff:e9:56:3f:05:11:12:a8:56:88:40:
                    67:66:1e:6f:ff:b3:62:ca:ec:47:49:62:93:73:ea:
                    91:21:21:f1:8d:f5:62:e5:16:18:e4:d2:f6:bc:17:
                    c0:46:1f:b1:79:e9:64:0e:15:ff:06:29:de:01:f3:
                    e8:8d:bd:9f:7b:3c:b6:d6:07:eb:b9:3b:19:bf:23:
                    c3:9d:2e:7e:6e:a7:91:40:9b:04:0f:be:4c:12:27:
                    14:15:98:85:0c:cb:22:f7:aa:14:81:9a:e3:39:bb:
                    c0:90:35:39:14:28:8c:25:01:5b:d3:c8:2c:42:fa:
                    de:7e:55:28:68:da:39:f7:a1:b0:0f:7e:c0:83:e8:
                    14:4a:a2:06:4a:b5:94:66:36:dd:41:9c:89:4f:47:
                    0f:0a:0a:6f:a7:41:7e:48:25:e2:b4:26:fa:7f:cc:
                    30:12:6d:7b:79:d5:2d:c6:23:5d:e2:98:3f:89:c4:
                    56:5b:14:00:1f:3b:e1:f2:d3:eb:03:24:10:aa:8b:
                    a7:76:0a:41:be:16:fb:11:bc:ea:97:2a:95:40:96:
                    8e:03:fa:ce:c2:71:ff:e4:61:91:6f:00:fd:0c:e3:
                    65:ed:e4:a6:01:3e:59:50:0b:e5:8c:2d:ac:6c:b8:
                    ab:5d:8d:ad:48:e0:58:c0:aa:63:41:c1:b5:4e:f8:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:93:C4:E6:A5:6E:53:B1:C8:7A:00:DD:C5:A2:7A:0D:A3:EC:FF:2D
            X509v3 Authority Key Identifier:
                keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:36:64:cb:6a:ab:d9:b7:33:14:30:80:04:9c:92:69:59:
         aa:e0:10:29:8a:ba:f5:a2:9f:ea:c9:49:77:cb:30:8d:d4:2a:
         8f:10:09:31:58:6d:56:cb:e6:b1:9e:03:66:04:88:c9:c0:f3:
         35:17:54:fb:52:55:36:df:62:f3:ae:a2:7f:46:d4:92:9c:30:
         a1:b9:0a:a1:16:a4:76:4c:1e:13:12:c1:3f:c4:d6:55:f4:d8:
         76:7f:ae:f9:72:77:0d:86:cc:1b:91:c5:84:7f:80:81:b7:c2:
         56:ff:ca:46:29:6a:15:2a:08:c8:d9:c3:1c:f3:3f:93:80:33:
         86:24:97:86:a5:74:7a:fa:8e:04:4d:c5:67:a0:e9:67:73:74:
         28:40:da:ff:02:7b:09:43:d9:d0:68:16:fa:f6:8b:c5:ef:fe:
         bb:32:cb:9d:fa:84:6f:f2:94:41:82:34:57:9d:35:4b:c0:e4:
         96:ff:31:15:84:68:2c:f3:20:3f:60:fc:7a:b4:f9:b3:86:84:
         55:1a:2b:69:e1:1b:00:4f:4f:e2:74:4a:7b:cc:9b:80:0a:cc:
         d2:86:82:28:96:73:d7:53:5c:f0:44:35:07:e9:b0:3c:dc:dd:
         2b:b2:8d:74:69:c4:c3:e4:5d:ba:7a:d9:16:f0:4d:45:1c:90:
         a3:fc:c3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKZhmaj/ErRLGOdXcVanoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjYwMzI2MDgwMTI0WhcNMjYwMzI3MDgwMTI0WjAzMTEwLwYDVQQD
Eyg5ODkzYzRlNmE1NmU1M2IxYzg3YTAwZGRjNWEyN2EwZGEzZWNmZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmWE/+lWPwUREqhWiEBnZh5v/7Ni
yuxHSWKTc+qRISHxjfVi5RYY5NL2vBfARh+xeelkDhX/BineAfPojb2fezy21gfr
uTsZvyPDnS5+bqeRQJsED75MEicUFZiFDMsi96oUgZrjObvAkDU5FCiMJQFb08gs
QvreflUoaNo596GwD37Ag+gUSqIGSrWUZjbdQZyJT0cPCgpvp0F+SCXitCb6f8ww
Em17edUtxiNd4pg/icRWWxQAHzvh8tPrAyQQqoundgpBvhb7EbzqlyqVQJaOA/rO
wnH/5GGRbwD9DONl7eSmAT5ZUAvljC2sbLirXY2tSOBYwKpjQcG1TvhE3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiTxOalblOxyHoA3cWieg2j7P8tMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/Q2ZMtq
q9m3MxQwgASckmlZquAQKYq69aKf6slJd8swjdQqjxAJMVhtVsvmsZ4DZgSIycDz
NRdU+1JVNt9i866if0bUkpwwobkKoRakdkweExLBP8TWVfTYdn+u+XJ3DYbMG5HF
hH+AgbfCVv/KRilqFSoIyNnDHPM/k4AzhiSXhqV0evqOBE3FZ6DpZ3N0KEDa/wJ7
CUPZ0GgW+vaLxe/+uzLLnfqEb/KUQYI0V501S8Dklv8xFYRoLPMgP2D8erT5s4aE
VRoraeEbAE9P4nRKe8ybgArM0oaCKJZz11Nc8EQ1B+mwPNzdK7KNdGnEw+RdunrZ
FvBNRRyQo/zDTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:09 2026 by rpki-client