Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          QnnTwrRlAoicShW6C3ggrcYfLBKMh9HQqjGMwpdex/g=
Subject key identifier:   D8:B3:33:B9:0E:43:49:C0:62:91:4C:F1:8A:4C:8B:1C:25:36:17:48
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       019D2929B20D843A650B0BE79755B09E5129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          050A
Signing time:             Thu 26 Mar 2026 08:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:31 +0000
Files and hashes:         1: ZgmGF0xyruYag3oLwVeIssRnGzA.roa (hash: ZGrhqDqWep/rissiscgLJfcqAEbcRvWxXS2En1y9Bvw=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: H86NULNIOYNLvwoZpNczeqqsVN44n3+VWMOnJ+bsnGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:b2:0d:84:3a:65:0b:0b:e7:97:55:b0:9e:51:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Mar 26 08:01:31 2026 GMT
            Not After : Mar 27 08:01:31 2026 GMT
        Subject: CN=d8b333b90e4349c062914cf18a4c8b1c25361748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:05:5d:00:41:4a:52:12:ef:d2:c8:4a:e0:
                    86:00:01:41:57:dc:7b:07:75:13:bf:98:c8:86:3a:
                    1c:21:10:00:9f:58:a3:e7:ed:40:58:fc:34:70:51:
                    31:41:bd:45:c0:0f:fe:3e:f4:70:57:3d:72:80:26:
                    79:17:d9:04:f9:53:3b:24:0c:07:71:bf:8d:af:a1:
                    76:41:04:f4:ee:af:e5:db:42:94:cb:e0:bc:84:23:
                    9d:31:9f:d4:44:38:8c:9a:70:e9:38:cd:e7:48:df:
                    99:4d:a5:cd:fb:58:6a:04:8a:fa:87:4e:3e:6e:f1:
                    4e:fa:df:28:fd:31:5f:63:69:90:2d:db:dc:14:5a:
                    22:68:7f:49:7f:f9:ab:a2:8f:75:06:8a:18:f2:e2:
                    aa:69:1b:58:8e:ad:61:fe:3f:72:ec:75:27:7b:fd:
                    ee:8b:8e:9a:af:c0:57:78:5e:f5:bf:41:73:20:5a:
                    f5:db:e6:e4:4a:cc:d0:b4:f9:d4:35:84:60:fb:c2:
                    b5:87:fa:47:21:5d:61:e3:01:c0:e9:bf:3e:3d:41:
                    31:fd:9d:45:63:4d:ae:e7:6b:3e:f6:c4:48:51:65:
                    8a:1e:4d:5b:79:79:3b:99:73:99:78:a1:3a:33:3c:
                    de:01:90:30:af:b3:43:10:a9:4f:87:18:7f:33:37:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:33:B9:0E:43:49:C0:62:91:4C:F1:8A:4C:8B:1C:25:36:17:48
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:4f:53:83:99:0e:56:58:82:d0:1e:0f:c3:c7:9a:74:af:
         72:28:b7:02:94:fe:3d:8a:5f:79:f6:70:73:a4:71:a5:41:30:
         0e:cb:45:53:f0:9c:2f:90:fd:0d:cd:44:11:d3:ac:40:8a:27:
         35:1b:2f:f6:43:8f:99:26:cf:f3:f8:f5:ce:bc:02:16:5b:02:
         3f:b5:49:a1:f6:5d:c3:66:cd:7b:55:61:52:5a:4b:50:3d:fa:
         b7:cb:56:74:84:9a:8e:75:e3:f9:16:77:e9:17:1a:e3:85:a1:
         f0:ef:0c:ac:1b:46:3d:9b:d1:fa:0b:b7:b0:6c:39:5e:d3:59:
         98:da:77:ac:63:24:03:89:5a:04:95:8a:ca:0b:fc:d1:65:1e:
         2b:18:ed:b1:17:a5:28:75:40:9e:fd:91:76:96:f7:c0:d3:8e:
         84:f1:03:3a:aa:1a:ce:b5:05:01:1a:77:52:ba:83:c3:f9:cd:
         1b:4f:c1:c2:fb:aa:04:54:a9:9f:39:08:08:4c:dc:2a:2e:8f:
         b6:21:21:71:3b:33:80:8a:1e:d9:36:6b:63:25:d5:7b:7e:11:
         13:45:af:c7:00:76:d2:ad:a6:08:11:1f:69:31:79:18:e5:a8:
         54:86:3f:25:7a:e4:27:89:48:4b:e9:d8:b0:d1:41:de:f0:86:
         98:a6:6c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKbINhDplCwvnl1WwnlEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTRiNDYxMWI4Y2U4Mjg3Mjc1YmM0N2E2OWFmYTM3OGI0
MTQwYmYwHhcNMjYwMzI2MDgwMTMxWhcNMjYwMzI3MDgwMTMxWjAzMTEwLwYDVQQD
EyhkOGIzMzNiOTBlNDM0OWMwNjI5MTRjZjE4YTRjOGIxYzI1MzYxNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1UFXQBBSlIS79LISuCGAAFBV9x7
B3UTv5jIhjocIRAAn1ij5+1AWPw0cFExQb1FwA/+PvRwVz1ygCZ5F9kE+VM7JAwH
cb+Nr6F2QQT07q/l20KUy+C8hCOdMZ/URDiMmnDpOM3nSN+ZTaXN+1hqBIr6h04+
bvFO+t8o/TFfY2mQLdvcFFoiaH9Jf/mroo91BooY8uKqaRtYjq1h/j9y7HUne/3u
i46ar8BXeF71v0FzIFr12+bkSszQtPnUNYRg+8K1h/pHIV1h4wHA6b8+PUEx/Z1F
Y02u52s+9sRIUWWKHk1beXk7mXOZeKE6MzzeAZAwr7NDEKlPhxh/MzdCuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNizM7kOQ0nAYpFM8YpMixwlNhdIMB8GA1UdIwQY
MBaAFLFUtGEbjOgocnW8R6aa+jeLQUC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iZjJjMjUtNjkyOC00YmNiLTg0ZmIt
NGIxMjQ3NTg1MWI4LzEvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iZjJjMjUtNjkyOC00YmNiLTg0ZmItNGIxMjQ3NTg1MWI4
LzEvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANONPU4OZ
DlZYgtAeD8PHmnSvcii3ApT+PYpfefZwc6RxpUEwDstFU/CcL5D9Dc1EEdOsQIon
NRsv9kOPmSbP8/j1zrwCFlsCP7VJofZdw2bNe1VhUlpLUD36t8tWdISajnXj+RZ3
6Rca44Wh8O8MrBtGPZvR+gu3sGw5XtNZmNp3rGMkA4laBJWKygv80WUeKxjtsRel
KHVAnv2Rdpb3wNOOhPEDOqoazrUFARp3UrqDw/nNG0/BwvuqBFSpnzkICEzcKi6P
tiEhcTszgIoe2TZrYyXVe34RE0WvxwB20q2mCBEfaTF5GOWoVIY/JXrkJ4lIS+nY
sNFB3vCGmKZstQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:22:26 2026 by rpki-client