Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          Yay8uUUmaVrJARzX8MrzFH5erPEw5sP9WC+vhhzCs6w=
Subject key identifier:   07:D6:9A:EB:3D:74:42:58:B6:CA:95:2B:48:66:99:A9:53:AE:5A:EE
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       019D277217480D8D1E33AC10DF1F0B77D5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          1877
Signing time:             Thu 26 Mar 2026 00:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:21 +0000
Files and hashes:         1: IyNfqK6r6C44ZKUOjpsqwGqNLn4.roa (hash: i1F/CBsSeizAbprduVI+teSZOLat2WKPm0oJOLuFBk4=)
                          2: M0_rGFwgXXSdHfCzKEO9BOlix9c.roa (hash: fZLICEeiLA/SDAmG+PVRFTyZGZVXgSOHKJmkPXD26do=)
                          3: bNGihk3TftyiQuIrhTcptDsg-yc.roa (hash: ihRAevNfvjcE/941xyu47E7ucBkaCCtVOZGixpsTOrg=)
                          4: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: 6bNrFy73mihLwVgqhl+2tqjxizZpo/KxRfgj7Yyfq3k=)
                          5: kGnavoxmmZYIHcjKwJNxPG0Ktzk.roa (hash: siZcIUlonw/wkGDUXfskCTpBjBAR7kzTju6ObIq5uGI=)
                          6: sm3iYgOtqN6nnym3it3jySvolrU.roa (hash: lZ/OmmYi4r8mf5j3sK31bIT6Hooge+fXxyDeDEKgkMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:17:48:0d:8d:1e:33:ac:10:df:1f:0b:77:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Mar 26 00:01:21 2026 GMT
            Not After : Mar 27 00:01:21 2026 GMT
        Subject: CN=07d69aeb3d744258b6ca952b486699a953ae5aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:9d:fb:d7:0c:62:cb:00:17:40:69:06:bd:
                    f8:b5:7c:ae:4b:e2:1b:e2:8b:c4:ca:94:23:07:42:
                    c4:c9:44:f6:b5:f9:5b:c0:b3:6a:85:a3:8e:86:55:
                    c4:c1:b6:55:27:4b:e2:98:e1:45:ad:33:7f:52:0f:
                    83:54:56:e9:43:6a:e2:ff:86:c4:94:ee:8a:3c:0b:
                    27:a0:66:87:c7:d6:59:1c:42:48:24:1c:15:1b:e1:
                    ca:43:2c:2e:48:ea:86:b7:22:27:b3:27:a7:89:b5:
                    62:eb:44:b4:9c:d8:36:15:71:2e:d5:23:5f:18:d2:
                    5e:7c:b9:07:45:96:77:85:b3:50:a9:08:80:6e:95:
                    73:cb:e1:8f:be:d6:c3:25:ee:e8:84:03:f7:2c:e1:
                    37:65:3b:ee:2f:5c:5b:e3:4f:d3:35:e4:cb:ef:cf:
                    cb:93:d1:a0:e2:2a:37:ee:88:5f:a8:36:b7:0d:29:
                    30:d6:31:74:39:c0:20:17:a1:20:a7:f6:a4:e1:5e:
                    05:8b:80:25:5b:35:e9:35:26:a7:60:27:5e:9b:4b:
                    8d:a4:c6:da:a8:3d:a9:cf:fb:50:9e:91:32:49:65:
                    fc:a7:d4:d2:9b:1f:95:a1:ae:c6:72:af:b6:58:4d:
                    97:fe:85:f6:f4:41:f8:65:a5:cb:9f:d2:81:e4:2b:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:9A:EB:3D:74:42:58:B6:CA:95:2B:48:66:99:A9:53:AE:5A:EE
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:c4:db:40:16:ed:0e:3b:b9:61:7c:48:d5:d1:52:bf:9b:
         f5:51:b0:15:62:86:70:57:ff:5d:80:e8:0c:07:3e:2a:55:94:
         c0:5e:91:29:3a:b4:80:99:15:7f:ed:18:99:65:02:46:be:8f:
         14:6f:6a:de:80:44:81:8f:be:62:7e:34:97:64:54:ba:71:4a:
         fa:43:4f:b3:32:ba:3f:38:ad:c0:fb:5c:67:b7:b5:fa:e2:e6:
         04:bc:35:7e:05:96:79:62:f0:f3:28:b7:88:26:e1:af:35:62:
         19:5e:32:70:68:1d:95:1c:93:3e:34:27:39:6a:19:5b:7f:b5:
         cf:9d:2a:e4:f7:15:8e:12:05:ff:ef:4c:41:f9:cf:0e:3c:e4:
         52:f0:b6:e8:3c:9c:7b:99:b9:73:79:0d:1c:c9:0a:c9:e6:21:
         cc:6c:39:36:88:06:64:04:8e:c6:03:4d:f5:96:ac:29:b7:f1:
         d9:69:7f:db:26:18:15:f6:dc:7b:ac:51:85:d2:82:55:3f:63:
         7d:6b:16:7d:55:8a:37:ec:d0:fa:ab:82:84:f7:19:df:40:25:
         75:55:f7:92:73:e5:c9:18:6b:60:09:8b:af:d0:28:60:e0:67:
         9a:03:7d:d8:37:1e:5c:81:7b:38:9e:18:60:f5:f9:23:b9:da:
         30:8d:6f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nchdIDY0eM6wQ3x8Ld9XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGJmODBlNzJmNTBmMDliZjU2MzQ5M2ViZGIxMWEzNGJi
YTMxMmQwHhcNMjYwMzI2MDAwMTIxWhcNMjYwMzI3MDAwMTIxWjAzMTEwLwYDVQQD
EygwN2Q2OWFlYjNkNzQ0MjU4YjZjYTk1MmI0ODY2OTlhOTUzYWU1YWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhud+9cMYssAF0BpBr34tXyuS+Ib
4ovEypQjB0LEyUT2tflbwLNqhaOOhlXEwbZVJ0vimOFFrTN/Ug+DVFbpQ2ri/4bE
lO6KPAsnoGaHx9ZZHEJIJBwVG+HKQywuSOqGtyInsyenibVi60S0nNg2FXEu1SNf
GNJefLkHRZZ3hbNQqQiAbpVzy+GPvtbDJe7ohAP3LOE3ZTvuL1xb40/TNeTL78/L
k9Gg4io37ohfqDa3DSkw1jF0OcAgF6Egp/ak4V4Fi4AlWzXpNSanYCdem0uNpMba
qD2pz/tQnpEySWX8p9TSmx+Voa7Gcq+2WE2X/oX29EH4ZaXLn9KB5Cs2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfWmus9dEJYtsqVK0hmmalTrlruMB8GA1UdIwQY
MBaAFIhL+A5y9Q8Jv1Y0k+vbEaNLujEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGIt
MzZmOTg0N2FjMzViLzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGItMzZmOTg0N2FjMzVi
LzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6bE20AW
7Q47uWF8SNXRUr+b9VGwFWKGcFf/XYDoDAc+KlWUwF6RKTq0gJkVf+0YmWUCRr6P
FG9q3oBEgY++Yn40l2RUunFK+kNPszK6PzitwPtcZ7e1+uLmBLw1fgWWeWLw8yi3
iCbhrzViGV4ycGgdlRyTPjQnOWoZW3+1z50q5PcVjhIF/+9MQfnPDjzkUvC26Dyc
e5m5c3kNHMkKyeYhzGw5NogGZASOxgNN9ZasKbfx2Wl/2yYYFfbce6xRhdKCVT9j
fWsWfVWKN+zQ+quChPcZ30AldVX3knPlyRhrYAmLr9AoYOBnmgN92DceXIF7OJ4Y
YPX5I7naMI1vbA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:39 2026 by rpki-client