Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          Ps3M5pXDSxKFcB5CP/M6O+Sdk6XZilFq9l8XylJloo8=
Subject key identifier:   00:30:DB:E4:EB:2B:3D:27:DF:9D:79:CC:F9:94:FD:39:5B:6B:7D:18
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       019D284E094EE908573335145F477708A848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          1857
Signing time:             Thu 26 Mar 2026 04:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:35 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: jw4ySG6aGCPNB+6K9LtenSchViMqUddFGgERmGy/xs4=)
                          2: vgtVr70kHPIfAxYDvnSk95pwEEc.roa (hash: 89W5k6eZxucvQF9QfxUPssd3/Izg32hrnMQ2Jj8vRdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:09:4e:e9:08:57:33:35:14:5f:47:77:08:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Mar 26 04:01:35 2026 GMT
            Not After : Mar 27 04:01:35 2026 GMT
        Subject: CN=0030dbe4eb2b3d27df9d79ccf994fd395b6b7d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:d8:78:bc:af:a5:b9:b9:bf:e8:36:97:81:
                    47:2b:1a:2c:e3:23:6a:b6:07:4b:ec:f3:f5:d1:b2:
                    3e:f0:d0:76:3a:23:16:58:19:c0:59:94:bb:5e:10:
                    77:1a:4f:76:34:1f:af:81:d8:49:05:57:3d:91:a2:
                    01:b5:18:d6:05:d7:0b:4b:20:8b:cd:a6:4f:e1:4f:
                    4d:16:24:c6:b1:23:4f:ed:de:f1:70:42:7e:32:2c:
                    53:28:62:8e:40:30:2e:61:98:89:46:7c:51:26:10:
                    21:e9:6f:d1:4e:39:62:eb:00:b8:ff:3b:7c:f5:e7:
                    29:50:f1:7a:08:c8:8c:d4:b5:2d:cc:85:0d:62:e3:
                    72:c3:05:6b:6e:12:75:93:2e:2c:c8:bd:99:f4:61:
                    cb:85:2b:6d:95:55:5b:9d:30:db:b9:35:5e:50:6d:
                    93:27:1a:b0:64:38:8f:33:e1:9e:7a:c1:77:0b:f4:
                    13:de:cf:52:f5:ad:76:92:61:29:73:77:ce:bd:4d:
                    fa:18:76:73:17:1e:09:b1:89:b9:5a:1b:7b:8a:1c:
                    c0:66:70:b6:a6:aa:8e:52:ba:c1:a7:34:dc:75:c8:
                    66:9f:f1:6c:cc:1f:29:78:dd:cb:93:6d:8d:9c:c7:
                    c5:f8:54:05:5c:c8:13:4c:78:44:94:1c:0c:2e:b4:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:30:DB:E4:EB:2B:3D:27:DF:9D:79:CC:F9:94:FD:39:5B:6B:7D:18
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a6:f8:5c:fb:4c:eb:33:7d:a1:6f:ab:80:20:72:e9:f9:0a:
         8b:61:89:be:f8:d0:0d:07:39:b4:a1:19:a4:fc:3b:0e:77:c6:
         98:e4:4a:99:fe:32:db:ae:62:43:a3:31:e0:ab:a2:1d:c6:fb:
         4b:12:0c:29:d7:43:59:64:17:24:7e:71:1c:59:bb:94:ed:0b:
         45:8b:56:aa:22:26:c4:10:e2:c4:cc:f0:01:ec:2d:d2:7d:8f:
         a7:ee:c7:e8:e5:92:c7:ec:84:c2:9f:cb:48:36:b9:aa:24:11:
         05:a5:03:93:6b:1c:f5:e5:2b:e1:c2:6c:75:54:78:8b:c1:b6:
         4a:53:bd:76:9b:e0:f4:33:2f:32:7e:f4:8a:12:c7:a8:8e:60:
         12:16:79:28:32:5e:fc:55:ab:6f:85:f8:83:7e:c1:77:8f:c6:
         5e:1a:fa:8b:55:e5:d7:b9:ea:17:9a:4b:4e:fc:78:46:0e:e2:
         e3:05:55:2b:aa:25:9b:1a:ee:a5:c4:b3:5b:06:2c:8c:20:2c:
         79:89:80:54:b1:d6:aa:f1:6a:7a:2a:21:3f:db:af:33:07:70:
         9f:06:4a:6b:70:dd:03:e4:a9:78:2b:5f:a0:2c:36:56:89:c7:
         68:86:a0:6e:ad:ac:d5:81:3f:10:6d:da:33:36:7c:d7:ae:9f:
         f4:1a:c9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTglO6QhXMzUUX0d3CKhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWQzNzQwOGEyMjVmMWE4OTY0ZjhkNzJiYzk5ZDliYmU1
MzMyMzQwHhcNMjYwMzI2MDQwMTM1WhcNMjYwMzI3MDQwMTM1WjAzMTEwLwYDVQQD
EygwMDMwZGJlNGViMmIzZDI3ZGY5ZDc5Y2NmOTk0ZmQzOTViNmI3ZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDYeLyvpbm5v+g2l4FHKxos4yNq
tgdL7PP10bI+8NB2OiMWWBnAWZS7XhB3Gk92NB+vgdhJBVc9kaIBtRjWBdcLSyCL
zaZP4U9NFiTGsSNP7d7xcEJ+MixTKGKOQDAuYZiJRnxRJhAh6W/RTjli6wC4/zt8
9ecpUPF6CMiM1LUtzIUNYuNywwVrbhJ1ky4syL2Z9GHLhSttlVVbnTDbuTVeUG2T
JxqwZDiPM+GeesF3C/QT3s9S9a12kmEpc3fOvU36GHZzFx4JsYm5Wht7ihzAZnC2
pqqOUrrBpzTcdchmn/FszB8peN3Lk22NnMfF+FQFXMgTTHhElBwMLrTt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAw2+TrKz0n3515zPmU/Tlba30YMB8GA1UdIwQY
MBaAFINdN0CKIl8aiWT41yvJnZu+UzI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQt
Y2I2YzY3NGM1YTNjLzEvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQtY2I2YzY3NGM1YTNj
LzEvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6b4XPtM
6zN9oW+rgCBy6fkKi2GJvvjQDQc5tKEZpPw7DnfGmORKmf4y265iQ6Mx4KuiHcb7
SxIMKddDWWQXJH5xHFm7lO0LRYtWqiImxBDixMzwAewt0n2Pp+7H6OWSx+yEwp/L
SDa5qiQRBaUDk2sc9eUr4cJsdVR4i8G2SlO9dpvg9DMvMn70ihLHqI5gEhZ5KDJe
/FWrb4X4g37Bd4/GXhr6i1Xl17nqF5pLTvx4Rg7i4wVVK6olmxrupcSzWwYsjCAs
eYmAVLHWqvFqeiohP9uvMwdwnwZKa3DdA+SpeCtfoCw2VonHaIagbq2s1YE/EG3a
MzZ8166f9BrJHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:36 2026 by rpki-client