Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File:                     V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier:          /s/3j9CWK/Nl04gxmaZ8LQInocFS+JZykWolSmGl5tk=
Subject key identifier:   77:5A:A2:91:80:6F:49:85:98:DD:AF:5F:69:B6:AA:F2:C5:0B:D0:BD
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer:       /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial:       019D25F1FFB27473A7CFE3981DB2DF39BF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number:          07C9
Signing time:             Wed 25 Mar 2026 17:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:49 +0000
Files and hashes:         1: 4XP7HiVkwJb7VBFxlRqtJUdrlkY.roa (hash: OOEInEqutnloYStbQZqNgEuL98Agm2HcQLCCh/vFSb4=)
                          2: LcnRPWMP0InV3_yP2jprbNChb0s.roa (hash: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8=)
                          3: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: 6VXNFmiSa3BZCNHpFn+BmFAdzk+93SqrVLihcoUPH5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:ff:b2:74:73:a7:cf:e3:98:1d:b2:df:39:bf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
        Validity
            Not Before: Mar 25 17:01:49 2026 GMT
            Not After : Mar 26 17:01:49 2026 GMT
        Subject: CN=775aa291806f498598ddaf5f69b6aaf2c50bd0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:b2:d4:06:5a:f7:88:d4:40:b3:a5:64:3c:
                    3a:76:90:6c:4a:af:9f:07:82:73:78:ac:62:dc:e5:
                    ff:c1:cd:7c:59:82:06:a8:dc:67:2b:a4:f7:8d:07:
                    e0:8e:32:99:02:59:14:b0:88:36:bd:8b:6f:9a:20:
                    a2:e6:ed:28:37:b2:3d:12:7b:f8:cd:9b:0a:1b:27:
                    fd:fe:1e:0d:a3:a9:74:f9:63:97:8f:b7:ed:69:7c:
                    3d:54:be:33:e0:f1:48:b9:3a:ad:fc:df:7e:aa:60:
                    a8:09:fc:b9:85:e0:93:7b:4f:f5:83:68:04:7b:ba:
                    45:87:2f:a5:9d:5a:72:14:1b:69:25:c8:88:a7:b8:
                    fe:7f:70:f7:81:92:4f:d8:b8:94:9b:4d:cf:9d:fa:
                    f6:e5:13:41:02:85:ac:df:41:b0:c3:75:70:93:32:
                    f9:48:42:ec:cc:70:9c:9f:a1:9f:96:e6:33:7f:17:
                    e3:f2:e3:19:24:ef:f5:96:6b:2c:45:fc:00:c3:a5:
                    fb:aa:6e:6a:80:a0:a9:88:c0:91:69:f1:a0:e3:93:
                    55:59:7a:77:80:c0:2f:ef:7d:24:0e:62:3a:2c:fb:
                    17:67:6a:3a:3c:cf:71:e4:c0:5a:68:cc:f7:52:fd:
                    69:d1:35:41:af:cc:6d:2b:dd:c4:43:33:8a:3f:62:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:A2:91:80:6F:49:85:98:DD:AF:5F:69:B6:AA:F2:C5:0B:D0:BD
            X509v3 Authority Key Identifier:
                keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:72:0c:4b:b0:b1:2e:07:6a:a7:48:bb:9a:60:b3:c8:ef:
         10:32:c7:4a:92:d1:a1:01:38:13:85:fa:dc:e3:f7:81:e5:27:
         e4:c0:5b:34:4f:92:c8:63:0e:99:6e:66:64:fc:9b:e6:6f:55:
         f3:2f:22:f4:b8:58:3f:e3:5b:84:98:9e:43:1f:df:05:fa:cd:
         2b:9a:cb:35:fd:f6:2f:e6:2a:3a:d1:bd:41:8f:ed:54:b0:3a:
         54:67:ba:9a:8b:40:ca:c9:0d:12:b7:4f:f0:6b:92:30:6a:7e:
         85:e6:e2:5a:f5:8f:0f:97:5c:d0:01:ae:63:c4:29:de:c2:17:
         ce:ee:10:1a:80:4e:4e:74:4b:ec:9c:fc:09:20:91:c6:af:34:
         a3:98:92:95:40:b2:e4:b1:25:86:a9:41:83:1f:1c:15:36:31:
         13:13:75:79:a6:92:f0:e4:34:81:53:26:18:dd:f4:d5:64:f1:
         40:11:8b:4a:2d:68:82:e7:f7:35:5b:49:5a:25:70:62:9a:5c:
         e3:9c:a8:7b:da:f8:7b:cf:2a:c1:0e:ef:05:57:24:71:4b:07:
         bc:0e:58:14:20:4b:a8:52:2d:49:c2:06:27:c9:16:1c:e3:24:
         b3:53:a5:3e:1f:e4:fc:7a:fa:6d:b2:b3:e8:be:3d:96:5a:f6:
         41:5a:0f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8f+ydHOnz+OYHbLfOb96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmIyMmYyNzkwNTk3NDg0YmY5NjkxNWE4MzU0M2MxOTRi
M2ZkMWUwHhcNMjYwMzI1MTcwMTQ5WhcNMjYwMzI2MTcwMTQ5WjAzMTEwLwYDVQQD
Eyg3NzVhYTI5MTgwNmY0OTg1OThkZGFmNWY2OWI2YWFmMmM1MGJkMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNSy1AZa94jUQLOlZDw6dpBsSq+f
B4JzeKxi3OX/wc18WYIGqNxnK6T3jQfgjjKZAlkUsIg2vYtvmiCi5u0oN7I9Env4
zZsKGyf9/h4No6l0+WOXj7ftaXw9VL4z4PFIuTqt/N9+qmCoCfy5heCTe0/1g2gE
e7pFhy+lnVpyFBtpJciIp7j+f3D3gZJP2LiUm03Pnfr25RNBAoWs30Gww3VwkzL5
SELszHCcn6GfluYzfxfj8uMZJO/1lmssRfwAw6X7qm5qgKCpiMCRafGg45NVWXp3
gMAv730kDmI6LPsXZ2o6PM9x5MBaaMz3Uv1p0TVBr8xtK93EQzOKP2LJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdaopGAb0mFmN2vX2m2qvLFC9C9MB8GA1UdIwQY
MBaAFFdrIvJ5BZdIS/lpFag1Q8GUs/0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTct
YWVlNmViMjg1MTRkLzEvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTctYWVlNmViMjg1MTRk
LzEvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ9yDEuw
sS4HaqdIu5pgs8jvEDLHSpLRoQE4E4X63OP3geUn5MBbNE+SyGMOmW5mZPyb5m9V
8y8i9LhYP+NbhJieQx/fBfrNK5rLNf32L+YqOtG9QY/tVLA6VGe6motAyskNErdP
8GuSMGp+hebiWvWPD5dc0AGuY8Qp3sIXzu4QGoBOTnRL7Jz8CSCRxq80o5iSlUCy
5LElhqlBgx8cFTYxExN1eaaS8OQ0gVMmGN301WTxQBGLSi1oguf3NVtJWiVwYppc
45yoe9r4e88qwQ7vBVckcUsHvA5YFCBLqFItScIGJ8kWHOMks1OlPh/k/Hr6bbKz
6L49llr2QVoPNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:27 2026 by rpki-client