Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File:                     1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier:          28P826B8Q+XVMKAT4jw4hbGdKVCRvGJO/jw8xPySmY4=
Subject key identifier:   04:21:ED:AC:4C:C6:A4:38:A8:47:94:45:D5:E0:8B:39:90:61:F2:C2
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer:       /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial:       019D270440386004B425D21648ADBEB01D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:23 +0000
Files and hashes:         1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: 9cLDGobDValYb0xP/uUC2NvcgNuDzjZOUwMuDHkommc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:40:38:60:04:b4:25:d2:16:48:ad:be:b0:1d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
        Validity
            Not Before: Mar 25 22:01:23 2026 GMT
            Not After : Mar 26 22:01:23 2026 GMT
        Subject: CN=0421edac4cc6a438a8479445d5e08b399061f2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:fa:8e:fd:0b:be:bb:be:04:48:53:1a:97:
                    2d:0f:d5:5b:ad:e6:96:2c:a0:71:c3:ad:d8:1a:45:
                    05:f0:a3:c6:84:23:dc:b3:a4:13:62:38:14:ae:62:
                    ed:cf:01:43:b7:af:da:06:e5:41:87:09:0c:72:ab:
                    cd:c9:1b:ac:4c:aa:d5:63:84:0a:ba:38:02:ab:52:
                    2b:fc:62:45:9b:ec:de:e6:6e:af:74:7a:b1:3e:d0:
                    0b:19:c8:63:12:9b:59:3d:b9:a1:a1:97:8c:3c:0b:
                    09:fa:9a:f5:d7:04:0f:5e:8b:9b:3c:22:8c:c4:64:
                    64:f5:50:67:e1:41:35:93:ba:48:ed:bb:55:34:29:
                    db:a6:2b:9c:2b:a4:ab:b3:34:86:e0:39:8f:f1:e3:
                    46:7e:a6:0c:74:5a:b2:7e:52:58:07:76:ce:fb:d4:
                    00:9a:44:6d:6d:ea:0d:36:c7:5c:f4:4e:8f:30:62:
                    c8:09:94:a9:b4:83:81:bb:ec:97:31:e3:cd:82:d7:
                    ac:aa:51:93:85:cb:d3:0d:38:3e:f0:b5:89:e2:a6:
                    c3:ad:fb:b6:78:b3:44:90:a6:6e:02:c0:40:8a:03:
                    06:96:39:c4:86:00:63:4c:da:f8:96:12:0c:08:f4:
                    18:22:76:bc:94:fc:58:64:ea:38:a1:b4:f1:8f:6e:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:ED:AC:4C:C6:A4:38:A8:47:94:45:D5:E0:8B:39:90:61:F2:C2
            X509v3 Authority Key Identifier:
                keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:3e:67:9d:6b:4b:5b:30:23:89:33:7d:bf:c9:3b:31:75:
         4b:68:fa:bb:06:c5:35:f8:bb:55:b2:a8:26:62:a1:56:7e:e9:
         e1:84:67:18:e2:db:fb:95:c5:60:8d:92:a9:29:f1:05:44:de:
         df:d4:47:69:8c:9e:04:a8:57:1a:09:5c:e7:50:d0:17:2d:be:
         ae:d6:6c:75:86:dc:f3:fe:b9:5e:c5:32:ba:53:c2:33:7b:b3:
         f2:a3:f5:52:99:cb:d0:18:1f:c2:a3:c6:e2:db:82:1a:a4:88:
         59:b0:48:c5:f7:2c:cf:d2:67:57:48:cb:a4:57:1f:3f:cd:8f:
         0c:8c:b3:f9:67:90:2a:78:7e:22:e9:c0:6a:ae:5c:24:3e:53:
         63:17:5a:dd:b9:b6:02:6a:e2:e0:cd:9c:02:c2:c4:52:8a:2c:
         2a:7b:cb:fb:a5:18:73:ae:42:22:a0:eb:df:8e:e4:08:b6:fc:
         41:dd:69:07:dd:7d:65:a7:40:44:15:64:0d:96:b9:6e:d3:d3:
         bf:65:df:5b:59:23:4c:7b:a0:0d:58:97:aa:02:e0:00:63:13:
         5b:0e:f7:e3:6d:90:7d:23:9f:83:79:00:94:a8:e7:26:1f:c3:
         8a:f5:e6:73:4b:db:40:db:fa:14:86:1b:57:51:d9:ca:98:8b:
         e8:0b:05:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nBEA4YAS0JdIWSK2+sB0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm
ZTY0MTIwHhcNMjYwMzI1MjIwMTIzWhcNMjYwMzI2MjIwMTIzWjAzMTEwLwYDVQQD
EygwNDIxZWRhYzRjYzZhNDM4YTg0Nzk0NDVkNWUwOGIzOTkwNjFmMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/6jv0Lvru+BEhTGpctD9VbreaW
LKBxw63YGkUF8KPGhCPcs6QTYjgUrmLtzwFDt6/aBuVBhwkMcqvNyRusTKrVY4QK
ujgCq1Ir/GJFm+ze5m6vdHqxPtALGchjEptZPbmhoZeMPAsJ+pr11wQPXoubPCKM
xGRk9VBn4UE1k7pI7btVNCnbpiucK6SrszSG4DmP8eNGfqYMdFqyflJYB3bO+9QA
mkRtbeoNNsdc9E6PMGLICZSptIOBu+yXMePNgtesqlGThcvTDTg+8LWJ4qbDrfu2
eLNEkKZuAsBAigMGljnEhgBjTNr4lhIMCPQYIna8lPxYZOo4obTxj27vowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAQh7axMxqQ4qEeURdXgizmQYfLCMB8GA1UdIwQY
MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm
LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi
M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3A+
Z51rS1swI4kzfb/JOzF1S2j6uwbFNfi7VbKoJmKhVn7p4YRnGOLb+5XFYI2SqSnx
BUTe39RHaYyeBKhXGglc51DQFy2+rtZsdYbc8/65XsUyulPCM3uz8qP1UpnL0Bgf
wqPG4tuCGqSIWbBIxfcsz9JnV0jLpFcfP82PDIyz+WeQKnh+IunAaq5cJD5TYxda
3bm2Amri4M2cAsLEUoosKnvL+6UYc65CIqDr347kCLb8Qd1pB919ZadARBVkDZa5
btPTv2XfW1kjTHugDViXqgLgAGMTWw73422QfSOfg3kAlKjnJh/DivXmc0vbQNv6
FIYbV1HZypiL6AsF9g==
-----END CERTIFICATE-----