Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          q8zpUbKb93npyGPzaCy2KOFuEEHErqED1ZG11qqJXf8=
Subject key identifier:   D9:BD:BA:BD:F2:8E:2C:6A:FF:E0:1E:F8:AC:01:78:DD:AB:80:EC:5F
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       019D273A965D04CF7606907BDFB4B00AB138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          078E
Signing time:             Wed 25 Mar 2026 23:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:44 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: FIgtULQIUBANZmb9vgiz+M7LrS2nFqDrvZFxYgt12x4=)
                          2: LHIeUVA9wsCM7bmZaVgrPaNNziw.roa (hash: NBcTepDFdXpBgX4qPundU4bCWFb04yiAHriwN4bBQ7M=)
                          3: LvfTa413By2E_F6yYl2dyQqtQ6g.roa (hash: r8Aaf6zbkZr6mR+oKR2km59CiVJuLPU3L/XJZeMBCjE=)
                          4: ZdKh3a8XEvF05LVjsi9wkRymFVg.roa (hash: NE20D4V8pCaAFdHiKB+G1Vp2zobKDlYDSABykJAJbXM=)
                          5: _vmewA9W8DyxXaiP_EZ3cz5dROk.roa (hash: SjnU2OshL4XrUnyu6qZvohhXfN1UkCVyA6v9bEVIxns=)
                          6: fyIb0V5JX6E2tpy_vgKc70A0lK8.roa (hash: wDxZOpTMpfURcZbXhtIPr6kc1LLTPvdz01nZUdR/Qy4=)
                          7: wmVWvi9LFM_1oIUpxrvxMv6hAgI.roa (hash: hSBrwEq4pKXZOmKjFY4p3+D6mzIcmXDbJLyGmD3u4sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:96:5d:04:cf:76:06:90:7b:df:b4:b0:0a:b1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Mar 25 23:00:44 2026 GMT
            Not After : Mar 26 23:00:44 2026 GMT
        Subject: CN=d9bdbabdf28e2c6affe01ef8ac0178ddab80ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:82:0d:7f:8f:d3:39:4d:b6:19:84:27:83:
                    56:14:7e:84:f1:7d:c3:77:de:a8:43:41:84:a4:6e:
                    d0:a0:d9:89:91:62:28:9e:a5:7e:ed:05:76:3f:ca:
                    8d:d3:96:36:af:14:06:71:cf:af:ff:81:93:f3:cf:
                    c4:e1:97:71:02:24:40:c0:e1:93:09:2b:bf:69:a0:
                    64:80:61:98:af:34:e9:9f:93:9b:75:89:70:3f:c9:
                    f7:0c:5c:60:6b:57:1f:d8:30:58:07:47:e1:05:29:
                    39:03:41:1a:40:8e:dc:99:61:f5:34:98:06:3a:d1:
                    92:78:9a:83:66:79:00:27:ab:bf:78:91:1a:2a:32:
                    6a:09:87:83:7c:42:29:81:d1:62:8a:33:71:6b:b7:
                    10:f8:6a:4e:1e:72:f9:55:31:54:41:25:ef:29:99:
                    16:21:d1:eb:eb:a0:c9:b4:eb:ef:4f:7a:31:f4:33:
                    e3:0c:21:9d:2d:74:c7:69:4b:6c:d6:12:aa:80:a7:
                    af:3f:69:65:2e:dd:fb:09:c1:0d:74:c3:69:8a:72:
                    f8:cb:02:ef:7f:09:2b:c3:7a:53:cc:3e:81:92:e5:
                    f1:f6:d2:87:60:10:30:de:9f:13:ec:cb:ac:bb:0a:
                    ce:7e:de:ce:a4:dc:d1:ac:c7:61:43:cf:51:b0:52:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:BA:BD:F2:8E:2C:6A:FF:E0:1E:F8:AC:01:78:DD:AB:80:EC:5F
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:30:4a:4d:09:70:27:54:28:bc:c3:f9:aa:16:19:95:9a:
         7c:07:d6:f9:1d:be:15:49:24:9a:e9:6a:0b:6a:a9:5f:16:af:
         52:38:22:9d:f9:86:33:3f:bc:55:4e:0f:16:58:04:47:5b:31:
         95:d9:70:66:16:9f:3b:92:93:02:76:22:81:fa:12:ab:1b:a7:
         f0:71:58:cb:1b:48:96:29:96:1f:8c:d3:c2:9b:d6:9f:8f:8b:
         88:cb:1f:9a:11:52:b4:49:ba:b2:04:22:e6:2c:f8:3b:b6:2d:
         42:52:15:7a:f9:37:20:b7:c2:6f:22:49:01:5a:85:6b:25:0e:
         84:c2:cb:87:f6:0c:5e:7f:86:75:e7:4b:6a:0a:c9:59:ff:de:
         1e:3b:dc:97:77:7e:c7:92:f3:77:39:77:6a:fa:9f:19:de:1c:
         cc:cd:5f:73:8f:17:d1:18:a9:14:fe:c8:d7:5a:5e:6e:1f:9f:
         8b:f9:95:a1:bc:65:17:b5:53:02:7f:f9:50:6f:9a:b4:aa:bb:
         97:07:bf:55:55:69:d1:57:f2:bd:51:ca:0a:8a:03:bc:7f:01:
         a4:55:91:3e:0b:09:57:ad:42:4a:9a:6f:47:66:58:da:55:db:
         09:55:f1:a3:95:94:06:44:27:3c:9b:6f:de:bc:d3:26:3e:10:
         bd:8f:d6:3b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nOpZdBM92BpB737SwCrE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3
MTQxNWIwHhcNMjYwMzI1MjMwMDQ0WhcNMjYwMzI2MjMwMDQ0WjAzMTEwLwYDVQQD
EyhkOWJkYmFiZGYyOGUyYzZhZmZlMDFlZjhhYzAxNzhkZGFiODBlYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQOCDX+P0zlNthmEJ4NWFH6E8X3D
d96oQ0GEpG7QoNmJkWIonqV+7QV2P8qN05Y2rxQGcc+v/4GT88/E4ZdxAiRAwOGT
CSu/aaBkgGGYrzTpn5ObdYlwP8n3DFxga1cf2DBYB0fhBSk5A0EaQI7cmWH1NJgG
OtGSeJqDZnkAJ6u/eJEaKjJqCYeDfEIpgdFiijNxa7cQ+GpOHnL5VTFUQSXvKZkW
IdHr66DJtOvvT3ox9DPjDCGdLXTHaUts1hKqgKevP2llLt37CcENdMNpinL4ywLv
fwkrw3pTzD6BkuXx9tKHYBAw3p8T7MusuwrOft7OpNzRrMdhQ89RsFLA+QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNm9ur3yjixq/+Ae+KwBeN2rgOxfMB8GA1UdIwQY
MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw
LTU4YjY0ZDU1N2MwYy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlmLzhhMzIyZi1kYzI4LTQyMmYtYjU3MC01OGI2NGQ1NTdj
MGMvMS8xLWVBS3ZoaEtZbHQyLU5IN3p1LUJlcTl4UVZzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6Uw
Sk0JcCdUKLzD+aoWGZWafAfW+R2+FUkkmulqC2qpXxavUjginfmGMz+8VU4PFlgE
R1sxldlwZhafO5KTAnYigfoSqxun8HFYyxtIlimWH4zTwpvWn4+LiMsfmhFStEm6
sgQi5iz4O7YtQlIVevk3ILfCbyJJAVqFayUOhMLLh/YMXn+GdedLagrJWf/eHjvc
l3d+x5Lzdzl3avqfGd4czM1fc48X0RipFP7I11pebh+fi/mVobxlF7VTAn/5UG+a
tKq7lwe/VVVp0VfyvVHKCooDvH8BpFWRPgsJV61CSppvR2ZY2lXbCVXxo5WUBkQn
PJtv3rzTJj4QvY/WOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:29 2026 by rpki-client