Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          U10f0sy7CcLmc+XX2GslFuTBgQYy520aQiZf0bGXkPw=
Subject key identifier:   8B:2A:B1:BD:03:6E:68:A6:FC:74:EC:FF:62:CD:ED:43:D2:59:F5:F9
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       019D26CCEE28D3703BB14AB6099AA35E9233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          1284
Signing time:             Wed 25 Mar 2026 21:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:57 +0000
Files and hashes:         1: 1m9vhqXwy7CGqJjqRjUuXJx7INY.roa (hash: qE04gkM/s7vX8p51u5m0unnrB0JoxCvsTSSShhmlhmI=)
                          2: G-RbIUzq1PlvE-q3SCybhunvJKI.roa (hash: opq2WoRARYg0RhIa4g9HMBvHxIPBPs39AMNusR3Lt3w=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: 7v4BpIR1KlJ2LyOZD0lINAAqO7PyirUnKj5CJ8kA7bc=)
                          4: SSSB_UVGJCKdh7PPz0qaSyXW7lc.roa (hash: CRGt/HquFvCmfw30kehUPdqDR7YReCJJSXwsQnL4oU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:ee:28:d3:70:3b:b1:4a:b6:09:9a:a3:5e:92:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Mar 25 21:00:57 2026 GMT
            Not After : Mar 26 21:00:57 2026 GMT
        Subject: CN=8b2ab1bd036e68a6fc74ecff62cded43d259f5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:13:fd:d8:63:57:72:55:68:ee:68:38:b2:
                    1c:a8:9b:38:21:44:78:17:fb:55:89:12:c4:ee:df:
                    aa:4a:e6:3c:8e:1b:44:a6:7c:91:36:03:5d:a9:a3:
                    96:d2:4b:3d:43:c6:38:60:fb:e4:90:b8:96:39:3b:
                    7d:42:31:19:ef:e0:49:17:d4:78:03:db:92:90:10:
                    7b:d3:cc:87:78:74:17:9c:b9:e4:35:4e:28:6a:85:
                    05:76:23:29:c8:36:90:be:95:d0:34:93:b6:35:f5:
                    1c:e4:01:f9:34:e9:7a:64:28:22:04:cd:36:66:af:
                    da:71:82:60:04:e4:06:46:e2:da:f4:a7:5d:e3:cc:
                    67:ab:4f:18:50:b4:a0:b6:08:e2:26:dc:66:81:ad:
                    67:da:ee:db:6b:60:b1:d7:54:85:47:19:f4:28:16:
                    04:54:5f:2f:f9:87:63:59:6d:29:60:2e:d6:9a:39:
                    4b:0a:92:ac:4b:45:83:78:cf:0d:9f:74:79:f3:1c:
                    e6:0c:9b:0a:83:a9:e8:17:fd:40:72:d6:ab:43:ad:
                    82:67:8d:9d:f9:d3:11:6f:1e:b8:9b:f0:89:46:87:
                    aa:a6:9c:2d:33:dd:94:7d:7e:ee:fc:95:a3:48:74:
                    11:4c:d7:e0:1a:b2:11:6e:e2:29:31:e3:f3:c2:b2:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:B1:BD:03:6E:68:A6:FC:74:EC:FF:62:CD:ED:43:D2:59:F5:F9
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:48:3a:12:88:e1:05:ff:a9:f5:09:da:fb:64:cf:c8:0f:
         a5:01:85:e8:7a:a6:75:46:80:62:e0:79:ef:45:ce:68:8f:70:
         52:a0:bc:67:49:83:32:8c:7e:45:1b:fd:fd:0d:4e:69:70:be:
         0e:f3:49:d3:70:aa:73:4e:df:a4:95:6d:09:d8:a3:d4:fe:89:
         c3:bc:92:0b:ba:8a:ed:c6:1d:90:8f:1f:ba:83:e4:22:f9:30:
         4b:1a:85:8e:16:e1:22:a4:98:f9:94:76:c6:a0:50:ed:3c:8e:
         65:b7:ab:e9:a7:bf:ef:48:fe:5c:d0:20:e6:a2:b9:80:f5:af:
         bf:b7:28:3e:ae:ec:f7:62:f2:d2:c4:0f:ac:f5:58:ca:5c:03:
         4d:9f:50:86:03:f8:8c:ce:3e:47:36:b0:bf:b7:6d:21:04:93:
         a7:13:99:96:36:d6:f3:4a:b4:b1:12:42:0e:40:37:3a:61:67:
         d4:39:4b:17:8a:16:66:43:11:df:64:b7:06:3d:df:6d:43:21:
         5d:fb:e2:89:90:0c:d6:fb:49:91:5b:65:ad:14:d2:29:e4:f2:
         4e:c0:e4:7a:33:8e:72:2a:bc:54:8c:d9:76:78:25:3a:79:db:
         73:10:5e:80:b8:8e:24:b3:16:5e:16:3a:df:88:68:4a:24:a6:
         74:87:d5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzO4o03A7sUq2CZqjXpIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy
ZDUxOWYwHhcNMjYwMzI1MjEwMDU3WhcNMjYwMzI2MjEwMDU3WjAzMTEwLwYDVQQD
Eyg4YjJhYjFiZDAzNmU2OGE2ZmM3NGVjZmY2MmNkZWQ0M2QyNTlmNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRoT/dhjV3JVaO5oOLIcqJs4IUR4
F/tViRLE7t+qSuY8jhtEpnyRNgNdqaOW0ks9Q8Y4YPvkkLiWOTt9QjEZ7+BJF9R4
A9uSkBB708yHeHQXnLnkNU4oaoUFdiMpyDaQvpXQNJO2NfUc5AH5NOl6ZCgiBM02
Zq/acYJgBOQGRuLa9Kdd48xnq08YULSgtgjiJtxmga1n2u7ba2Cx11SFRxn0KBYE
VF8v+YdjWW0pYC7WmjlLCpKsS0WDeM8Nn3R58xzmDJsKg6noF/1ActarQ62CZ42d
+dMRbx64m/CJRoeqppwtM92UfX7u/JWjSHQRTNfgGrIRbuIpMePzwrKshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsqsb0Dbmim/HTs/2LN7UPSWfX5MB8GA1UdIwQY
MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt
MWFhMjc3ZGYzNzY5LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5
LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdopIOhKI
4QX/qfUJ2vtkz8gPpQGF6HqmdUaAYuB570XOaI9wUqC8Z0mDMox+RRv9/Q1OaXC+
DvNJ03Cqc07fpJVtCdij1P6Jw7ySC7qK7cYdkI8fuoPkIvkwSxqFjhbhIqSY+ZR2
xqBQ7TyOZber6ae/70j+XNAg5qK5gPWvv7coPq7s92Ly0sQPrPVYylwDTZ9QhgP4
jM4+Rzawv7dtIQSTpxOZljbW80q0sRJCDkA3OmFn1DlLF4oWZkMR32S3Bj3fbUMh
XfviiZAM1vtJkVtlrRTSKeTyTsDkejOOciq8VIzZdnglOnnbcxBegLiOJLMWXhY6
34hoSiSmdIfVFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:29 2026 by rpki-client