Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File:                     M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier:          omoD1c6LHhqCBwNPKav6sMBQy6YKBmJAN+koxbx/LZ4=
Subject key identifier:   38:71:6E:01:AA:66:D0:E1:39:D0:5D:9F:5F:F2:F2:EB:F3:3B:77:8F
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer:       /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial:       019D2884D0092BBEA53CF061FCE83D5158C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 05:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:25 +0000
Files and hashes:         1: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (hash: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U=)
                          2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: k4tgJs3oWmD4xT3pebp14Ohm+20uzktYZ+l32AoAyZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:d0:09:2b:be:a5:3c:f0:61:fc:e8:3d:51:58:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
        Validity
            Not Before: Mar 26 05:01:25 2026 GMT
            Not After : Mar 27 05:01:25 2026 GMT
        Subject: CN=38716e01aa66d0e139d05d9f5ff2f2ebf33b778f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:08:4d:49:53:e5:6b:d4:c6:82:de:f7:2c:
                    52:25:10:58:b8:bd:50:0a:7a:1a:c5:a2:d8:a2:94:
                    7b:64:fe:29:33:21:55:e8:c8:83:3a:6a:2c:b2:c3:
                    c7:90:49:bb:4f:38:66:a3:db:a0:55:d5:a8:a2:39:
                    f5:77:7a:2a:d4:02:f8:51:55:90:ec:76:bd:55:a6:
                    24:c1:b3:1c:c2:5b:a0:aa:3a:50:c7:f8:e6:c9:4c:
                    bf:83:63:4a:57:c2:14:ef:d9:03:78:d4:31:0a:18:
                    9d:51:c5:63:d1:8c:59:b5:64:41:4e:9b:33:90:23:
                    d5:bf:19:d8:8a:2b:a7:09:a9:74:90:b3:2d:59:ba:
                    9d:5d:db:01:c3:82:e4:54:6f:20:ce:14:ec:60:fa:
                    07:7d:8a:87:d8:7e:73:79:27:ac:83:69:1c:64:8b:
                    11:d4:ec:ce:cd:97:1c:18:16:d6:6e:01:0e:be:70:
                    a6:5f:ed:6a:03:43:77:59:c9:2d:2a:ce:60:63:75:
                    7e:c0:6a:de:11:8a:17:49:9d:56:a6:87:c0:98:f6:
                    e2:56:82:10:01:93:f4:03:9f:e6:63:ab:65:88:47:
                    77:e7:73:49:2e:82:a5:c7:61:7f:56:66:76:c3:7b:
                    d4:6b:82:4e:55:fd:dc:f6:5a:83:ae:43:b2:04:6d:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:71:6E:01:AA:66:D0:E1:39:D0:5D:9F:5F:F2:F2:EB:F3:3B:77:8F
            X509v3 Authority Key Identifier:
                keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:83:08:ee:42:98:1a:73:54:c5:9d:fa:89:34:f7:b9:6c:
         7a:6e:19:ca:c7:5f:3a:00:b1:4b:99:7b:de:43:ca:53:90:7c:
         fd:4d:d9:15:40:de:8b:5f:a0:87:e5:aa:7f:22:29:8a:f4:9b:
         b1:5f:7f:78:fa:98:7f:61:cd:54:af:fe:f2:5b:79:84:45:42:
         61:f2:bd:17:4d:80:84:bd:f7:01:4c:05:23:b2:54:f7:19:e8:
         17:3a:18:72:b5:65:1b:5e:46:3d:7b:11:7e:5d:33:c7:e0:69:
         f0:64:cc:f9:dd:db:2f:3e:15:08:05:f7:9c:be:1b:de:a1:7c:
         05:fd:52:de:73:a1:b2:38:f0:a3:6e:2c:c4:e8:50:6f:8c:50:
         59:47:0b:48:3e:0d:ed:a5:a6:f5:52:28:23:3b:8c:d2:ae:2a:
         1e:d5:49:82:ad:aa:23:11:58:31:0c:55:c1:fa:6c:c1:82:d9:
         82:8e:45:82:26:35:7d:56:46:f3:14:5e:fd:3a:18:5e:c0:99:
         c6:2e:3b:8e:19:9a:c5:4f:b4:05:de:ae:56:59:f8:62:5a:78:
         19:fb:2c:ba:87:16:de:c8:71:89:11:6e:c8:87:dd:32:4a:0b:
         b7:ba:68:9b:a0:ae:cd:eb:97:be:00:6c:e9:c4:d6:bd:36:65:
         27:d1:ea:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohNAJK76lPPBh/Og9UVjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx
NjQ5OTMwHhcNMjYwMzI2MDUwMTI1WhcNMjYwMzI3MDUwMTI1WjAzMTEwLwYDVQQD
EygzODcxNmUwMWFhNjZkMGUxMzlkMDVkOWY1ZmYyZjJlYmYzM2I3NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM8ITUlT5WvUxoLe9yxSJRBYuL1Q
CnoaxaLYopR7ZP4pMyFV6MiDOmosssPHkEm7Tzhmo9ugVdWoojn1d3oq1AL4UVWQ
7Ha9VaYkwbMcwlugqjpQx/jmyUy/g2NKV8IU79kDeNQxChidUcVj0YxZtWRBTpsz
kCPVvxnYiiunCal0kLMtWbqdXdsBw4LkVG8gzhTsYPoHfYqH2H5zeSesg2kcZIsR
1OzOzZccGBbWbgEOvnCmX+1qA0N3WcktKs5gY3V+wGreEYoXSZ1WpofAmPbiVoIQ
AZP0A5/mY6tliEd353NJLoKlx2F/VmZ2w3vUa4JOVf3c9lqDrkOyBG0dcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhxbgGqZtDhOdBdn1/y8uvzO3ePMB8GA1UdIwQY
MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct
ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm
LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy2DCO5C
mBpzVMWd+ok097lsem4ZysdfOgCxS5l73kPKU5B8/U3ZFUDei1+gh+WqfyIpivSb
sV9/ePqYf2HNVK/+8lt5hEVCYfK9F02AhL33AUwFI7JU9xnoFzoYcrVlG15GPXsR
fl0zx+Bp8GTM+d3bLz4VCAX3nL4b3qF8Bf1S3nOhsjjwo24sxOhQb4xQWUcLSD4N
7aWm9VIoIzuM0q4qHtVJgq2qIxFYMQxVwfpswYLZgo5FgiY1fVZG8xRe/ToYXsCZ
xi47jhmaxU+0Bd6uVln4Ylp4GfssuocW3shxiRFuyIfdMkoLt7pom6CuzeuXvgBs
6cTWvTZlJ9HqmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:55 2026 by rpki-client