Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier:          xzk7gBtEX0X/ostV+Sxsp2R9uyxA2K1bVUX3jwarots=
Subject key identifier:   18:D1:94:AC:BF:13:03:BC:57:F3:36:49:D7:F2:9E:D6:4C:4B:D1:52
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       019D2628A070F62024A8F92D649A2424EEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number:          119B
Signing time:             Wed 25 Mar 2026 18:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:29 +0000
Files and hashes:         1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=)
                          2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: lrDL06rfaB7kp2WIKgy5vndzBjy/ABfxRy9O/Ha54Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:a0:70:f6:20:24:a8:f9:2d:64:9a:24:24:ee:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Mar 25 18:01:29 2026 GMT
            Not After : Mar 26 18:01:29 2026 GMT
        Subject: CN=18d194acbf1303bc57f33649d7f29ed64c4bd152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:c0:c4:f5:29:a6:c1:cd:10:fe:2a:2e:02:
                    75:79:ac:8e:e9:a7:9f:eb:f1:ec:da:34:72:ab:48:
                    78:40:e1:82:7a:76:4a:f2:30:03:28:10:3b:76:38:
                    4d:1e:7c:08:ed:f5:ba:24:41:13:b2:72:9b:1a:e2:
                    48:7a:8e:42:c6:ec:cc:e7:e1:34:de:a3:87:48:c4:
                    cf:06:e2:17:f8:dd:a8:72:65:f7:b1:d2:92:f0:53:
                    13:f8:c7:54:26:be:a8:f1:14:9c:37:2b:9b:10:c3:
                    62:25:42:a3:e3:ee:ee:c0:5f:1e:bd:d1:6b:f1:3f:
                    19:ed:ab:af:02:26:9f:9d:a1:ef:a3:74:34:68:a6:
                    6f:ff:5e:41:2b:b6:9b:08:13:36:b0:62:4a:46:f0:
                    72:e8:09:18:61:92:e3:b0:eb:71:c0:f0:a6:88:44:
                    2f:08:ef:0f:ac:01:1e:f4:80:27:00:41:03:dc:be:
                    8e:44:f4:86:fd:90:8d:c1:1c:05:9a:80:40:4b:8b:
                    8d:16:46:97:c5:ce:b7:93:63:f5:5f:b6:48:84:34:
                    6d:31:f6:76:0e:37:75:54:0f:ec:83:b0:06:b6:b6:
                    1b:cd:63:af:3a:27:60:79:6b:a6:30:ff:43:82:33:
                    01:9e:e7:89:f2:ad:50:a4:ae:a8:5d:e5:af:9f:63:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:94:AC:BF:13:03:BC:57:F3:36:49:D7:F2:9E:D6:4C:4B:D1:52
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:16:1b:d2:03:56:08:cf:27:a6:be:c2:47:88:18:f2:b4:
         62:95:04:62:fb:77:ad:33:fc:6c:78:cc:f0:63:67:0c:f7:b1:
         02:1a:e7:2c:c0:01:2f:7b:4a:0b:1f:c0:f2:f6:d2:6a:54:40:
         03:ce:a8:bb:56:c4:83:6b:3c:3b:cc:e5:eb:a2:ef:c4:5c:85:
         d9:79:ea:34:3e:d2:1a:70:a0:c6:57:e7:cd:5f:dc:c0:d1:41:
         58:24:ab:dc:c2:af:a6:41:c5:c6:d1:c9:fb:01:7a:05:95:ca:
         34:0f:65:ca:22:a9:11:ba:e9:b0:64:67:01:bf:40:88:79:4b:
         81:ac:02:e1:05:2b:89:b4:f7:48:b7:52:a2:43:3d:a3:ca:ff:
         63:71:9e:22:90:ad:0f:6d:e3:27:eb:3a:8c:27:c4:81:c0:43:
         00:8d:31:bf:6c:a4:1d:21:47:96:60:aa:3e:ec:df:9f:52:d3:
         ac:65:73:88:59:31:d5:21:21:24:0d:2d:00:fa:f5:e8:d4:80:
         74:ac:f6:b1:5b:3f:e7:8e:27:54:cb:3f:99:77:3c:0d:dc:38:
         02:c9:3b:50:83:2c:a6:c2:52:2a:fb:e8:a0:18:48:63:62:db:
         92:cb:43:73:52:6a:2a:34:bf:3d:32:dd:dc:d9:bc:cc:09:b7:
         6e:66:3c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKKBw9iAkqPktZJokJO7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj
OTUyNjAwHhcNMjYwMzI1MTgwMTI5WhcNMjYwMzI2MTgwMTI5WjAzMTEwLwYDVQQD
EygxOGQxOTRhY2JmMTMwM2JjNTdmMzM2NDlkN2YyOWVkNjRjNGJkMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVTAxPUppsHNEP4qLgJ1eayO6aef
6/Hs2jRyq0h4QOGCenZK8jADKBA7djhNHnwI7fW6JEETsnKbGuJIeo5CxuzM5+E0
3qOHSMTPBuIX+N2ocmX3sdKS8FMT+MdUJr6o8RScNyubEMNiJUKj4+7uwF8evdFr
8T8Z7auvAiafnaHvo3Q0aKZv/15BK7abCBM2sGJKRvBy6AkYYZLjsOtxwPCmiEQv
CO8PrAEe9IAnAEED3L6ORPSG/ZCNwRwFmoBAS4uNFkaXxc63k2P1X7ZIhDRtMfZ2
Djd1VA/sg7AGtrYbzWOvOidgeWumMP9DgjMBnueJ8q1QpK6oXeWvn2NP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjRlKy/EwO8V/M2SdfyntZMS9FSMB8GA1UdIwQY
MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt
ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw
LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHoWG9ID
VgjPJ6a+wkeIGPK0YpUEYvt3rTP8bHjM8GNnDPexAhrnLMABL3tKCx/A8vbSalRA
A86ou1bEg2s8O8zl66LvxFyF2XnqND7SGnCgxlfnzV/cwNFBWCSr3MKvpkHFxtHJ
+wF6BZXKNA9lyiKpEbrpsGRnAb9AiHlLgawC4QUribT3SLdSokM9o8r/Y3GeIpCt
D23jJ+s6jCfEgcBDAI0xv2ykHSFHlmCqPuzfn1LTrGVziFkx1SEhJA0tAPr16NSA
dKz2sVs/544nVMs/mXc8Ddw4Ask7UIMspsJSKvvooBhIY2LbkstDc1JqKjS/PTLd
3Nm8zAm3bmY8og==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:52 2026 by rpki-client