Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File:                     9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier:          zY+cYi4V8mjGdsUvlwTtthtR5QFqBN10NbV0aDZ8l8E=
Subject key identifier:   91:18:46:8B:6D:64:04:3C:F9:50:F6:FA:18:0A:D7:F2:93:60:93:D1
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer:       /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial:       019D2C60F124411EACCB91AF0E71F71FC6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number:          027C
Signing time:             Thu 26 Mar 2026 23:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 23:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 23:00:43 +0000
Files and hashes:         1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: iJfYgpbUdhoTzXoUm8NSEToLJHBfksiu3mvUdwQdLlY=)
                          2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:60:f1:24:41:1e:ac:cb:91:af:0e:71:f7:1f:c6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
        Validity
            Not Before: Mar 26 23:00:43 2026 GMT
            Not After : Mar 27 23:00:43 2026 GMT
        Subject: CN=9118468b6d64043cf950f6fa180ad7f2936093d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:6e:aa:86:eb:da:83:de:e3:85:6f:10:22:
                    08:b3:b3:b3:a8:09:c8:8c:1f:a5:1d:81:60:e5:0f:
                    ed:ae:5c:ef:dc:f9:e3:19:b4:71:7c:9a:06:fe:24:
                    88:92:06:31:e8:96:83:c2:ec:22:81:3d:9b:3c:93:
                    f9:35:f3:4d:d4:b5:72:37:97:31:bb:1f:97:03:1d:
                    83:e3:56:cf:a4:5b:4d:f4:c4:1e:88:26:a1:39:dc:
                    6b:74:22:f8:76:24:f6:f1:1c:6d:c3:96:ea:e1:cd:
                    0c:69:4f:de:0e:b6:9e:82:4e:c6:4a:7c:ad:ed:7d:
                    b2:f7:9f:bf:52:5e:1c:71:43:e2:3e:0a:3b:c8:b9:
                    30:d2:cf:0e:45:0d:9c:6e:45:2c:2f:19:f9:62:c8:
                    c8:83:f6:36:90:ed:82:25:bd:b8:7e:8c:5b:da:fb:
                    cf:d8:bd:d7:ca:8b:9d:47:8b:25:41:81:37:2c:fa:
                    36:f3:3b:5f:83:6c:a3:8b:3c:de:c3:23:72:fb:60:
                    d8:32:36:10:30:a7:8c:f1:fd:2c:d0:d3:17:cd:8a:
                    04:be:8c:78:73:fd:d6:88:50:56:96:05:89:88:aa:
                    73:8b:0a:5e:85:27:14:14:98:a8:27:de:46:21:d1:
                    d5:a1:a6:e0:0c:33:d2:a7:f1:95:63:bb:d6:b6:bc:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:46:8B:6D:64:04:3C:F9:50:F6:FA:18:0A:D7:F2:93:60:93:D1
            X509v3 Authority Key Identifier:
                keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:11:4a:4e:57:3c:04:60:3a:05:42:9b:6d:2f:bf:35:0e:15:
         f5:3d:af:58:2d:87:cf:ef:50:94:55:b1:d4:7b:91:79:61:63:
         27:b8:95:a3:f8:c5:5d:03:fc:bf:40:10:a5:2a:de:99:41:f9:
         e0:64:f8:43:31:a1:a9:2b:ad:c5:00:e3:a0:52:ed:22:ac:84:
         90:54:17:61:46:69:a1:7e:e4:ef:9b:6f:2a:58:06:e8:3a:81:
         34:c1:b8:c7:3b:89:4c:eb:28:58:ff:b8:cf:65:3e:b6:e3:0b:
         66:41:ed:d4:ae:c1:81:65:bb:ae:e8:bc:57:df:6f:32:b4:b1:
         14:33:20:5a:9a:89:76:ce:70:8a:d8:87:ce:85:68:04:cd:b7:
         39:de:f8:28:fa:5f:5e:39:db:eb:33:f5:7b:6c:8b:a0:fa:48:
         a2:87:af:b2:a0:23:21:3d:91:66:d9:65:aa:3d:15:9a:5a:f6:
         05:84:13:65:e3:b7:eb:81:6f:fc:45:f0:a9:ca:f7:5a:15:2e:
         85:1a:97:34:44:a2:65:44:be:24:68:de:11:2c:7a:59:48:c3:
         aa:a2:e7:e6:35:fd:8d:03:ee:ff:3b:11:a0:a3:34:36:52:be:
         28:8c:26:ec:18:26:4a:ff:66:03:f1:c0:d3:23:64:31:06:34:
         91:87:2d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYPEkQR6sy5GvDnH3H8bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk
NGZiMzAwHhcNMjYwMzI2MjMwMDQzWhcNMjYwMzI3MjMwMDQzWjAzMTEwLwYDVQQD
Eyg5MTE4NDY4YjZkNjQwNDNjZjk1MGY2ZmExODBhZDdmMjkzNjA5M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA671uqobr2oPe44VvECIIs7OzqAnI
jB+lHYFg5Q/trlzv3PnjGbRxfJoG/iSIkgYx6JaDwuwigT2bPJP5NfNN1LVyN5cx
ux+XAx2D41bPpFtN9MQeiCahOdxrdCL4diT28Rxtw5bq4c0MaU/eDraegk7GSnyt
7X2y95+/Ul4ccUPiPgo7yLkw0s8ORQ2cbkUsLxn5YsjIg/Y2kO2CJb24foxb2vvP
2L3XyoudR4slQYE3LPo28ztfg2yjizzewyNy+2DYMjYQMKeM8f0s0NMXzYoEvox4
c/3WiFBWlgWJiKpziwpehScUFJioJ95GIdHVoabgDDPSp/GVY7vWtryZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEYRottZAQ8+VD2+hgK1/KTYJPRMB8GA1UdIwQY
MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt
YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz
LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxFKTlc8
BGA6BUKbbS+/NQ4V9T2vWC2Hz+9QlFWx1HuReWFjJ7iVo/jFXQP8v0AQpSremUH5
4GT4QzGhqSutxQDjoFLtIqyEkFQXYUZpoX7k75tvKlgG6DqBNMG4xzuJTOsoWP+4
z2U+tuMLZkHt1K7BgWW7rui8V99vMrSxFDMgWpqJds5witiHzoVoBM23Od74KPpf
Xjnb6zP1e2yLoPpIooevsqAjIT2RZtllqj0Vmlr2BYQTZeO364Fv/EXwqcr3WhUu
hRqXNESiZUS+JGjeESx6WUjDqqLn5jX9jQPu/zsRoKM0NlK+KIwm7BgmSv9mA/HA
0yNkMQY0kYct9w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:38:04 2026 by rpki-client