Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          JyC1C6VQ4aXI+Q0De6LI5X7ITEJr78sjdWhRBWzVVFQ=
Subject key identifier:   F9:BB:9F:F9:6E:B3:5C:CD:25:94:32:06:CF:B1:9A:DE:AB:64:D2:45
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       019D265FE75E8587A8565CA0FB5532EFAE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:52 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: B1dEBvTtxrta7kZCWSXAm6Li/Y9HJHIxZp6fUYmUYlE=)
                          2: PlK6Gz_zz8yOe932ySLfbF7lgwo.roa (hash: 7JKBnxpSJYk4FSEy0vtBUc/r6F+DCRSjQcAobLs9g+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e7:5e:85:87:a8:56:5c:a0:fb:55:32:ef:ae:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Mar 25 19:01:52 2026 GMT
            Not After : Mar 26 19:01:52 2026 GMT
        Subject: CN=f9bb9ff96eb35ccd25943206cfb19adeab64d245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:9c:f2:64:e1:d6:c1:f1:57:04:8d:cd:38:
                    9c:66:83:d0:95:49:1e:70:a9:fe:fa:47:d6:f8:b5:
                    c6:1a:dd:29:c1:10:bc:df:99:de:69:d2:aa:da:1c:
                    b7:89:fb:d9:2e:1a:8f:9e:cd:2d:4e:15:c7:50:92:
                    00:57:fb:99:14:d5:c9:47:2c:dc:e4:9b:bb:19:9c:
                    b9:3d:b3:70:bf:1e:31:ab:f5:04:27:69:93:11:61:
                    86:fa:8b:1e:87:da:b8:78:6e:2b:e4:20:7e:b7:6e:
                    71:f1:a5:9e:82:28:01:e1:e1:56:b3:ee:cb:73:88:
                    4f:52:8d:23:68:44:7b:e4:56:7c:9d:62:1b:b4:77:
                    ec:c8:4d:6b:15:bd:c2:7e:9e:d5:3a:c2:b6:40:5c:
                    d9:d2:ea:74:ab:35:30:85:ec:66:af:9e:49:0d:56:
                    a8:7c:b8:8c:3a:78:a8:cb:73:b2:85:58:d1:87:f7:
                    65:61:06:80:e9:bb:53:77:6f:8f:d4:70:87:c9:b7:
                    2a:19:14:de:e8:8a:b6:80:67:73:f7:44:0f:9c:2c:
                    97:6c:5d:4f:84:a7:18:d8:a7:e0:cc:42:14:8d:77:
                    58:cd:34:58:9c:22:e6:a5:52:f9:72:9e:4e:ba:58:
                    b7:90:fa:cd:a8:bc:66:86:91:3e:05:82:2e:bc:1a:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:9F:F9:6E:B3:5C:CD:25:94:32:06:CF:B1:9A:DE:AB:64:D2:45
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:16:77:b8:3f:91:ca:37:4c:3e:e6:65:45:a9:c1:57:7c:
         90:8e:ca:86:0b:e6:7f:d4:ea:d3:19:f5:1c:98:f2:f8:72:b2:
         4e:fb:4e:2f:15:32:dc:ec:9f:c8:3d:de:36:37:c7:28:ae:b1:
         36:45:14:c5:a2:20:37:0c:f5:24:f6:b2:9b:da:53:15:c2:9a:
         45:71:6e:48:e8:0e:ef:ac:89:13:1a:8a:36:5f:16:d5:40:91:
         98:dd:a5:20:88:e3:95:ba:64:e5:de:72:01:eb:8e:b2:cf:21:
         1a:13:57:7b:c8:20:c0:12:11:89:07:34:ce:b0:bc:12:c3:43:
         f2:98:22:32:72:ab:1d:63:0c:f5:0d:c3:e4:86:bd:f8:de:e8:
         8e:17:da:e5:c0:83:cc:52:51:43:d7:94:db:07:73:48:44:14:
         39:54:86:5c:d1:c8:3c:22:68:b7:18:d2:3d:9e:0f:71:a3:02:
         1f:bb:1b:be:72:a2:6f:61:9b:87:48:f6:0f:95:4b:c1:46:6c:
         f1:eb:ca:0b:8d:95:30:89:56:e3:11:ba:c5:6c:5e:e2:6f:e2:
         b7:7d:7f:c3:02:d9:5d:2e:26:4e:54:4c:bb:dc:45:f7:71:7c:
         36:7f:93:18:01:2e:f6:57:67:7a:4c:de:70:3d:d6:b9:37:a5:
         f5:a5:1a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+dehYeoVlyg+1Uy7649MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNWUyOGMyZWZmM2NmMzVjM2MxY2MzZDY3YmFhM2RmMDUw
NTVmOTkwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD
EyhmOWJiOWZmOTZlYjM1Y2NkMjU5NDMyMDZjZmIxOWFkZWFiNjRkMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/mc8mTh1sHxVwSNzTicZoPQlUke
cKn++kfW+LXGGt0pwRC835neadKq2hy3ifvZLhqPns0tThXHUJIAV/uZFNXJRyzc
5Ju7GZy5PbNwvx4xq/UEJ2mTEWGG+oseh9q4eG4r5CB+t25x8aWegigB4eFWs+7L
c4hPUo0jaER75FZ8nWIbtHfsyE1rFb3Cfp7VOsK2QFzZ0up0qzUwhexmr55JDVao
fLiMOnioy3OyhVjRh/dlYQaA6btTd2+P1HCHybcqGRTe6Iq2gGdz90QPnCyXbF1P
hKcY2KfgzEIUjXdYzTRYnCLmpVL5cp5Ouli3kPrNqLxmhpE+BYIuvBqN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm7n/lus1zNJZQyBs+xmt6rZNJFMB8GA1UdIwQY
MBaAFOteKMLv8881w8HMPWe6o98FBV+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTg2MjMtNmRiZS00Njg4LWE0NjUt
Y2VjMjY1ZGRhYzQ3LzEvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTg2MjMtNmRiZS00Njg4LWE0NjUtY2VjMjY1ZGRhYzQ3
LzEvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbAWd7g/
kco3TD7mZUWpwVd8kI7Khgvmf9Tq0xn1HJjy+HKyTvtOLxUy3OyfyD3eNjfHKK6x
NkUUxaIgNwz1JPaym9pTFcKaRXFuSOgO76yJExqKNl8W1UCRmN2lIIjjlbpk5d5y
AeuOss8hGhNXe8ggwBIRiQc0zrC8EsND8pgiMnKrHWMM9Q3D5Ia9+N7ojhfa5cCD
zFJRQ9eU2wdzSEQUOVSGXNHIPCJotxjSPZ4PcaMCH7sbvnKib2Gbh0j2D5VLwUZs
8evKC42VMIlW4xG6xWxe4m/it31/wwLZXS4mTlRMu9xF93F8Nn+TGAEu9ldnekze
cD3WuTel9aUaSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:55 2026 by rpki-client