Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File:                     viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier:          pRWgdLWa4OEcglr3YBgk14Cj+RU3q3/VZb1gnj8mv00=
Subject key identifier:   99:49:E9:96:FC:E5:19:9D:42:8D:23:B7:49:4A:48:C2:3A:AC:2A:5B
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer:       /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial:       019D2703B68AAA28A803743F1F5155CA6087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number:          1599
Signing time:             Wed 25 Mar 2026 22:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:47 +0000
Files and hashes:         1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: bPa2J+D/JuXySyeYHf1MGZWiiJoyuJil01f49PnmDak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:b6:8a:aa:28:a8:03:74:3f:1f:51:55:ca:60:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
        Validity
            Not Before: Mar 25 22:00:47 2026 GMT
            Not After : Mar 26 22:00:47 2026 GMT
        Subject: CN=9949e996fce5199d428d23b7494a48c23aac2a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:17:0f:12:9e:9e:57:58:a9:98:1b:7d:b5:
                    c2:54:ce:28:4b:fd:f8:e1:b6:ba:f5:4a:ba:1d:71:
                    10:4f:23:2b:c3:24:ab:8a:f8:90:cd:ad:62:d3:12:
                    cf:d6:6b:57:c9:e0:ad:6d:58:e7:b1:52:f3:5e:86:
                    09:db:21:ac:51:2e:62:6b:9c:5f:79:9b:1c:20:e3:
                    13:e2:05:39:d0:91:a1:37:e6:54:35:a1:c0:22:d1:
                    c8:a5:4d:6d:ed:13:dd:79:9b:6c:53:72:e7:30:df:
                    12:9b:f6:bf:4f:66:c5:e0:3f:d1:bc:89:c8:03:61:
                    54:4d:32:de:bc:84:48:ea:8c:21:af:11:a1:2a:51:
                    19:b2:49:78:27:2b:a6:13:f2:1e:ea:6f:42:d0:53:
                    b4:2b:4f:61:eb:e4:cc:43:f3:b3:28:65:fc:10:6f:
                    19:f3:4d:bc:30:98:a9:b2:e4:21:3f:1c:bf:8b:ec:
                    b3:9e:b7:43:4c:e3:e6:e8:d3:3e:92:a2:57:af:a0:
                    6e:d9:cb:89:55:f5:fa:a6:6b:56:cc:2c:1e:4d:cb:
                    63:97:1d:e3:a4:5e:a1:94:2d:d2:0b:25:07:db:32:
                    79:15:e0:15:b7:ac:63:eb:ef:c0:94:c4:f8:9b:2f:
                    d7:a5:91:e3:14:22:58:34:12:04:f2:a2:fb:b4:59:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:E9:96:FC:E5:19:9D:42:8D:23:B7:49:4A:48:C2:3A:AC:2A:5B
            X509v3 Authority Key Identifier:
                keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:1d:11:c8:51:21:3c:59:01:34:bb:cd:e7:8b:b3:19:ae:
         af:91:32:8b:70:7e:10:ca:3d:0c:aa:08:1b:c3:3c:44:de:c2:
         44:d3:a5:2d:a5:97:7a:d0:f6:40:04:b5:a0:dd:59:12:a3:e3:
         2e:61:e3:9d:25:af:7c:8e:f2:d6:01:7d:88:ba:67:2c:0c:b0:
         2c:c1:c3:f2:92:a0:8a:a8:41:1d:9e:3c:72:5b:2d:3f:43:86:
         f3:f2:40:e9:ec:f2:43:ed:39:d7:66:e7:63:26:1c:96:f1:e4:
         e4:52:ae:31:a6:d8:a2:b7:82:1b:af:80:b4:f8:40:d3:31:85:
         3b:3d:d1:07:dc:5e:db:6a:0d:f6:1b:95:cb:35:66:40:04:28:
         d0:6f:3f:55:4c:aa:fa:7b:e0:98:17:2f:50:7e:db:a1:d3:80:
         fd:59:d4:78:9c:e5:f2:44:75:e4:60:d6:31:db:20:08:4a:1e:
         dc:ea:48:7b:6d:2e:b9:95:04:57:3a:47:7f:4b:e8:23:af:25:
         41:fd:4f:cb:a2:2c:a2:c6:74:fd:8a:5f:d5:29:f7:29:36:6a:
         fb:9c:c8:c2:07:b9:c6:69:71:99:22:67:84:b7:97:0b:76:59:
         bc:62:db:5c:fa:6c:20:ec:36:b4:37:9b:02:6b:9a:17:5c:7b:
         41:b2:5e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7aKqiioA3Q/H1FVymCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmNhYzc4ZDc1ZGIxOGU3M2NhZTAzZTFhYmU1OTg3NDk1
MjkzMWEwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg5OTQ5ZTk5NmZjZTUxOTlkNDI4ZDIzYjc0OTRhNDhjMjNhYWMyYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvMXDxKenldYqZgbfbXCVM4oS/34
4ba69Uq6HXEQTyMrwySriviQza1i0xLP1mtXyeCtbVjnsVLzXoYJ2yGsUS5ia5xf
eZscIOMT4gU50JGhN+ZUNaHAItHIpU1t7RPdeZtsU3LnMN8Sm/a/T2bF4D/RvInI
A2FUTTLevIRI6owhrxGhKlEZskl4JyumE/Ie6m9C0FO0K09h6+TMQ/OzKGX8EG8Z
8028MJipsuQhPxy/i+yznrdDTOPm6NM+kqJXr6Bu2cuJVfX6pmtWzCweTctjlx3j
pF6hlC3SCyUH2zJ5FeAVt6xj6+/AlMT4my/XpZHjFCJYNBIE8qL7tFkTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlJ6Zb85RmdQo0jt0lKSMI6rCpbMB8GA1UdIwQY
MBaAFL4srHjXXbGOc8rgPhq+WYdJUpMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDct
ODQyMDM4MTI0NzYzLzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDctODQyMDM4MTI0NzYz
LzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLYdEchR
ITxZATS7zeeLsxmur5Eyi3B+EMo9DKoIG8M8RN7CRNOlLaWXetD2QAS1oN1ZEqPj
LmHjnSWvfI7y1gF9iLpnLAywLMHD8pKgiqhBHZ48clstP0OG8/JA6ezyQ+0512bn
YyYclvHk5FKuMabYoreCG6+AtPhA0zGFOz3RB9xe22oN9huVyzVmQAQo0G8/VUyq
+nvgmBcvUH7bodOA/VnUeJzl8kR15GDWMdsgCEoe3OpIe20uuZUEVzpHf0voI68l
Qf1Py6IsosZ0/Ypf1Sn3KTZq+5zIwge5xmlxmSJnhLeXC3ZZvGLbXPpsIOw2tDeb
AmuaF1x7QbJezg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:33 2026 by rpki-client