Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File:                     Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier:          SgoIP0Abj4E9CvSjndn+aurf3JGqKzGPDccCMonS1j8=
Subject key identifier:   F7:4D:7F:DF:5B:15:BF:49:AE:91:71:33:FF:6F:3B:72:96:F2:EC:33
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer:       /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial:       019D28F3151C7CE4C7FCACFB08BC834C0355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 07:01:52 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:52 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:52 +0000
Files and hashes:         1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: qkWO92Ti5Sj0+JaDHU8pi507fj+MlEdD/alsu8lb+W0=)
                          2: SCZWeTcny1exQiE_olJpPnFUZXw.roa (hash: ShsK8qUgrWWSGaOdyvhtHxdpcqEgIl3SH1rRA+O7v4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:15:1c:7c:e4:c7:fc:ac:fb:08:bc:83:4c:03:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
        Validity
            Not Before: Mar 26 07:01:52 2026 GMT
            Not After : Mar 27 07:01:52 2026 GMT
        Subject: CN=f74d7fdf5b15bf49ae917133ff6f3b7296f2ec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:16:80:42:6f:f6:06:91:61:4d:26:de:07:
                    0d:ee:f2:eb:68:85:3e:ce:bd:28:af:5f:73:36:60:
                    a4:23:dd:fd:a7:ae:4f:f5:05:38:92:2c:7c:3b:e5:
                    59:6d:58:26:79:1e:4d:3f:ab:b0:80:d7:31:18:3e:
                    d2:38:37:7e:2b:ca:dd:fb:2e:2b:54:d4:58:fb:90:
                    1e:e1:30:6d:ad:cd:c0:8a:15:5d:31:fa:df:85:13:
                    9a:c7:c1:dc:61:a9:63:33:35:f9:4a:e1:9c:ac:7d:
                    e6:84:1a:84:a1:49:49:a2:a3:65:f4:04:fc:d6:86:
                    ae:88:c2:e2:51:03:ff:a6:a5:40:80:77:a6:e5:6d:
                    35:c0:81:84:b2:87:c5:2c:8f:de:c5:1a:a1:ad:98:
                    c7:2d:ec:84:da:35:89:2b:73:c6:bb:66:50:93:d7:
                    ab:a3:3a:79:e3:17:b8:22:a2:48:4f:4a:b6:40:2d:
                    d1:64:cf:57:96:38:25:8f:9b:44:0e:b3:4e:03:dc:
                    85:60:e9:bd:45:4a:76:f1:7b:b8:94:a5:c1:d0:e7:
                    15:b2:d3:80:9f:3c:ee:4d:fd:79:ca:37:5a:12:a1:
                    9a:5e:6b:cd:74:96:d9:8d:df:09:85:71:5e:8d:0a:
                    26:bd:49:ee:92:e0:d4:1c:da:16:8c:32:0c:0a:a0:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:7F:DF:5B:15:BF:49:AE:91:71:33:FF:6F:3B:72:96:F2:EC:33
            X509v3 Authority Key Identifier:
                keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:c7:50:62:10:aa:91:ac:84:7c:5e:99:ba:ea:b8:49:12:
         af:a0:bc:44:21:6d:e4:50:4c:80:3c:cb:0d:bd:b2:a3:8d:a4:
         91:5a:1d:62:4c:55:a5:ae:fe:02:a9:6d:80:a9:8c:2d:49:d0:
         09:83:f3:92:7d:eb:1b:4c:9d:80:56:13:22:a0:92:84:cf:76:
         e0:21:db:d0:a3:ad:9d:a0:f4:61:96:af:15:5c:02:11:b0:89:
         1a:af:d6:57:20:dd:d3:b9:15:6a:7b:d4:45:03:76:27:ee:dc:
         30:d7:88:e4:70:9f:f3:c5:7b:4b:07:6f:a9:a1:9c:4e:56:2d:
         ce:76:a4:1a:da:9c:7d:eb:b1:89:36:c9:54:ea:e2:91:11:30:
         de:56:31:4e:52:46:e3:a6:49:79:bd:35:f9:ca:c4:fb:ca:a6:
         24:d5:a3:06:6b:41:6e:4e:1d:fa:3b:b4:cd:ed:82:b7:a5:95:
         ac:0a:53:c9:96:db:15:91:21:82:0e:99:b8:33:2a:56:ba:b0:
         96:08:97:46:7d:ea:21:01:5a:c0:70:99:08:09:3b:7a:58:78:
         92:3c:34:81:fe:1b:89:a9:87:ea:98:b5:ae:ef:57:4e:34:ab:
         bb:c2:b8:17:52:f2:5e:41:2f:7f:3a:58:fc:23:c1:4d:1d:53:
         93:6e:9b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8xUcfOTH/Kz7CLyDTANVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDdiZWY5NTM3ZGUxNjRiZmJhYmE1MTY2YmUwMmFjZjdl
ZDgyZGEwHhcNMjYwMzI2MDcwMTUyWhcNMjYwMzI3MDcwMTUyWjAzMTEwLwYDVQQD
EyhmNzRkN2ZkZjViMTViZjQ5YWU5MTcxMzNmZjZmM2I3Mjk2ZjJlYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEWgEJv9gaRYU0m3gcN7vLraIU+
zr0or19zNmCkI939p65P9QU4kix8O+VZbVgmeR5NP6uwgNcxGD7SODd+K8rd+y4r
VNRY+5Ae4TBtrc3AihVdMfrfhROax8HcYaljMzX5SuGcrH3mhBqEoUlJoqNl9AT8
1oauiMLiUQP/pqVAgHem5W01wIGEsofFLI/exRqhrZjHLeyE2jWJK3PGu2ZQk9er
ozp54xe4IqJIT0q2QC3RZM9Xljglj5tEDrNOA9yFYOm9RUp28Xu4lKXB0OcVstOA
nzzuTf15yjdaEqGaXmvNdJbZjd8JhXFejQomvUnukuDUHNoWjDIMCqB2SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdNf99bFb9JrpFxM/9vO3KW8uwzMB8GA1UdIwQY
MBaAFDJHvvlTfeFkv7q6UWa+Aqz37YLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2Njct
MGFiOTYxNjNjNDcxLzEvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2NjctMGFiOTYxNjNjNDcx
LzEvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgzHUGIQ
qpGshHxembrquEkSr6C8RCFt5FBMgDzLDb2yo42kkVodYkxVpa7+AqltgKmMLUnQ
CYPzkn3rG0ydgFYTIqCShM924CHb0KOtnaD0YZavFVwCEbCJGq/WVyDd07kVanvU
RQN2J+7cMNeI5HCf88V7SwdvqaGcTlYtznakGtqcfeuxiTbJVOrikREw3lYxTlJG
46ZJeb01+crE+8qmJNWjBmtBbk4d+ju0ze2Ct6WVrApTyZbbFZEhgg6ZuDMqVrqw
lgiXRn3qIQFawHCZCAk7elh4kjw0gf4biamH6pi1ru9XTjSru8K4F1LyXkEvfzpY
/CPBTR1Tk26b4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:49 2026 by rpki-client