Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          IJVjdFU8S9jT+nDMRxkL5nlw5zDo/CAHjR+PSlHKQ0o=
Subject key identifier:   A1:19:27:B8:F8:38:0F:FF:BD:4A:6D:8B:7C:F4:84:BD:95:AA:C7:95
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019D277257E5BA0624FD3D1B5F232A5D7FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 00:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:38 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: RfcU3PAuuUUAAiXzEST7SKLN7KOeM9yDX5ek5pA1dq8=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:57:e5:ba:06:24:fd:3d:1b:5f:23:2a:5d:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Mar 26 00:01:38 2026 GMT
            Not After : Mar 27 00:01:38 2026 GMT
        Subject: CN=a11927b8f8380fffbd4a6d8b7cf484bd95aac795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:2e:da:c9:40:03:41:35:5a:59:01:1c:32:
                    0b:50:b5:f0:19:f4:93:b3:c3:f0:78:4b:a1:4d:2f:
                    f4:ea:a4:30:1d:51:fb:d8:65:b2:3f:64:f1:96:92:
                    c6:20:9d:50:d0:6d:88:1e:11:0a:dd:01:a6:62:fe:
                    b0:eb:a7:ad:05:ce:d1:6f:fd:4f:d5:51:c8:ce:af:
                    3b:9e:01:da:b8:e6:ba:77:b4:31:d7:39:d9:f3:6c:
                    ac:4e:11:d6:66:ab:70:2a:06:46:ac:ec:33:34:3c:
                    b3:f3:55:65:5b:05:c6:73:40:05:c1:29:1d:39:a4:
                    26:c3:28:08:2c:54:85:03:59:ff:b8:b5:5a:95:dd:
                    3a:43:94:27:33:fc:44:7a:46:0d:e2:c2:d8:44:5e:
                    d9:51:33:11:3a:18:ca:52:8b:23:eb:6c:ba:16:33:
                    31:0a:91:fd:6f:b5:95:2b:09:2f:3c:21:b3:e8:01:
                    7a:01:1a:2b:b1:67:61:a3:95:25:ec:f0:90:b5:1c:
                    27:40:0c:79:17:c8:12:0c:ed:63:5c:3c:b1:85:47:
                    f1:ea:51:0d:b9:5d:ba:2a:d5:dd:ae:8d:6e:b4:3b:
                    af:d5:5f:d6:57:47:89:69:e1:b9:d7:d7:3c:64:67:
                    75:a1:b6:09:56:d7:44:2e:1e:a7:0f:b7:33:5e:f4:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:27:B8:F8:38:0F:FF:BD:4A:6D:8B:7C:F4:84:BD:95:AA:C7:95
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d7:6a:03:5e:7c:bd:2a:a2:71:b1:e9:b6:9e:87:fe:b6:dc:
         95:11:06:1f:c0:50:bf:70:bc:a0:3a:20:ae:dd:32:e7:1c:38:
         cc:06:f9:f5:64:50:75:8d:a8:44:40:ce:15:ac:8c:65:c3:d5:
         ae:ec:1a:b2:5f:ae:ab:7e:ba:dc:98:ec:5b:72:9d:ae:cf:47:
         48:bb:5d:79:0e:0b:d9:8d:f1:c9:c0:2c:28:d8:2f:76:f3:8b:
         a9:c8:f3:c6:d1:de:88:ae:2f:b5:b1:da:1e:e4:55:ab:78:aa:
         a2:35:3f:3f:99:6e:e9:20:89:bd:4e:67:92:79:24:1a:32:ba:
         8d:6c:09:ac:88:25:a7:10:a9:b1:63:a4:fd:90:2c:d6:7c:1e:
         c7:80:75:b3:23:8e:cb:a5:94:e0:31:22:ca:1b:33:2d:20:5f:
         b2:2f:30:1b:3a:f0:2f:8e:29:f7:9f:c7:5b:a2:3c:17:07:ef:
         37:18:c5:e5:1c:3d:2c:cc:ee:e4:bb:bc:14:76:c9:79:4e:e6:
         8a:c4:1f:43:9b:b3:20:70:0f:10:6c:50:61:c1:54:b1:fc:83:
         41:92:f8:af:24:31:2e:5d:66:c4:68:96:b2:a5:cb:d9:43:b2:
         0b:15:d6:bf:df:7f:08:aa:72:d7:6c:ef:c8:59:f6:fb:7f:52:
         92:f4:f3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nclflugYk/T0bXyMqXX+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODliOGNmNDdmN2M0ODVkNjI4ZDBhMzU5YTE2YTgxNWNk
MDA0YWIwHhcNMjYwMzI2MDAwMTM4WhcNMjYwMzI3MDAwMTM4WjAzMTEwLwYDVQQD
EyhhMTE5MjdiOGY4MzgwZmZmYmQ0YTZkOGI3Y2Y0ODRiZDk1YWFjNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dwu2slAA0E1WlkBHDILULXwGfST
s8PweEuhTS/06qQwHVH72GWyP2TxlpLGIJ1Q0G2IHhEK3QGmYv6w66etBc7Rb/1P
1VHIzq87ngHauOa6d7Qx1znZ82ysThHWZqtwKgZGrOwzNDyz81VlWwXGc0AFwSkd
OaQmwygILFSFA1n/uLVald06Q5QnM/xEekYN4sLYRF7ZUTMROhjKUosj62y6FjMx
CpH9b7WVKwkvPCGz6AF6ARorsWdho5Ul7PCQtRwnQAx5F8gSDO1jXDyxhUfx6lEN
uV26KtXdro1utDuv1V/WV0eJaeG519c8ZGd1obYJVtdELh6nD7czXvSv9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEZJ7j4OA//vUpti3z0hL2VqseVMB8GA1UdIwQY
MBaAFJuJuM9H98SF1ijQo1mhaoFc0ASrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDct
NjJlMjYwMzEzZTRjLzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDctNjJlMjYwMzEzZTRj
LzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9dqA158
vSqicbHptp6H/rbclREGH8BQv3C8oDogrt0y5xw4zAb59WRQdY2oREDOFayMZcPV
ruwasl+uq3663JjsW3Kdrs9HSLtdeQ4L2Y3xycAsKNgvdvOLqcjzxtHeiK4vtbHa
HuRVq3iqojU/P5lu6SCJvU5nknkkGjK6jWwJrIglpxCpsWOk/ZAs1nwex4B1syOO
y6WU4DEiyhszLSBfsi8wGzrwL44p95/HW6I8FwfvNxjF5Rw9LMzu5Lu8FHbJeU7m
isQfQ5uzIHAPEGxQYcFUsfyDQZL4ryQxLl1mxGiWsqXL2UOyCxXWv99/CKpy12zv
yFn2+39SkvTzrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:13 2026 by rpki-client