Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          04g9cPi+n8VBc0EGFV0FZLXlMDq/EkL5PjtBlKzvoJA=
Subject key identifier:   DA:2F:86:58:B3:07:50:2B:D5:F1:6C:C6:98:33:A7:5A:CE:E3:CD:20
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019D2928F070346E5A27AFDED78F30707113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          1898
Signing time:             Thu 26 Mar 2026 08:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:41 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: I6NOMhTsMbLbsj2nNt6E1Zqkc4P8cvKamP3xp1VGb9c=)
                          2: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (hash: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE=)
                          3: U1oh_8Ho8r1k2j-nGFoU_RDlNoE.roa (hash: NZ8sSZ9siHhWGPZhK1C3U7mz9zhYVNPsOY9uQbWP0to=)
                          4: baXaAX1rxYa_2y57T1wari4SNRQ.roa (hash: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:f0:70:34:6e:5a:27:af:de:d7:8f:30:70:71:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Mar 26 08:00:41 2026 GMT
            Not After : Mar 27 08:00:41 2026 GMT
        Subject: CN=da2f8658b307502bd5f16cc69833a75acee3cd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:ab:0f:ce:b9:02:cb:0f:ef:b2:ac:1f:ee:
                    68:10:cb:b5:62:08:c3:9f:0f:f7:68:b4:a4:b0:81:
                    79:ba:93:cb:a4:d5:2b:3e:98:ec:f0:3c:e7:ea:12:
                    61:f3:2f:69:bf:8c:33:c9:07:89:6b:99:bb:de:25:
                    3b:27:2d:9a:46:ff:34:76:12:2c:2b:c7:1b:8e:d3:
                    0c:5c:66:aa:2c:94:a4:35:f1:59:36:a9:a1:b9:a9:
                    2c:8e:b0:af:f5:aa:ee:c4:17:3c:45:16:09:3d:1d:
                    c9:40:55:12:a5:d4:83:45:a2:49:25:84:f3:72:18:
                    cf:dc:f8:71:cc:90:67:01:5f:12:80:7a:49:3a:5d:
                    7d:61:75:79:74:8c:7e:ac:c6:d2:83:45:bd:23:cf:
                    86:3e:6a:e6:7e:b2:f9:bd:f6:4b:12:07:14:c9:d5:
                    8f:4c:c1:f7:53:c9:2e:ad:f4:5a:14:69:e1:c4:ac:
                    d2:21:00:28:0a:c9:4f:96:65:aa:36:39:37:0f:e4:
                    5f:ee:ed:0a:5e:d8:3f:2f:58:ad:4d:6d:d3:79:a8:
                    00:93:fd:40:63:e3:46:cb:c2:7a:a0:30:b9:dc:e2:
                    b7:f7:dc:ea:c2:26:15:95:3b:b0:27:5e:c4:01:f8:
                    2c:34:b6:e6:5d:9d:59:23:d7:15:00:f1:6b:6e:96:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:86:58:B3:07:50:2B:D5:F1:6C:C6:98:33:A7:5A:CE:E3:CD:20
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:96:53:82:21:ff:53:2d:c9:ba:19:7f:6e:7d:d5:da:92:
         67:6e:da:bf:a4:c6:68:7b:7a:b9:b3:58:ad:25:36:10:d9:15:
         be:a9:c1:95:01:90:06:99:3f:b6:21:b1:c1:15:26:03:84:57:
         dc:dd:bf:b6:76:f6:3c:41:62:b4:b5:4b:34:b1:95:7a:b3:4a:
         83:4e:76:b6:e2:59:c8:d9:0b:af:fb:5b:b6:d7:ec:0a:c7:69:
         9a:fa:91:49:15:9f:af:3c:cd:c5:6d:65:79:2b:51:c2:b5:3c:
         12:d5:74:da:9d:c8:29:46:51:e3:03:3b:5e:34:bb:ec:89:06:
         50:0e:61:ba:16:fb:eb:a3:96:25:22:07:0c:25:0d:ea:39:8b:
         5d:2a:e3:8f:b8:77:be:eb:99:38:03:df:c0:c8:71:d8:02:5b:
         30:cc:eb:b9:1d:db:3d:ff:a7:8d:60:f9:92:ac:10:f2:17:c6:
         a0:c5:18:f7:e0:d9:52:08:3a:eb:be:72:9f:b0:45:b5:f5:16:
         97:b8:b4:48:94:9c:56:95:fe:3a:b5:aa:20:4a:9b:76:cf:15:
         62:cf:0c:6f:5e:a2:11:5c:c2:9e:9d:14:8e:9b:cb:c2:1e:e9:
         ff:3b:5a:dc:0f:98:d5:3a:41:dd:a4:bf:6c:9b:ce:49:0f:f6:
         fa:6c:e1:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKPBwNG5aJ6/e148wcHETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj
NTgwOTAwHhcNMjYwMzI2MDgwMDQxWhcNMjYwMzI3MDgwMDQxWjAzMTEwLwYDVQQD
EyhkYTJmODY1OGIzMDc1MDJiZDVmMTZjYzY5ODMzYTc1YWNlZTNjZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qrD865AssP77KsH+5oEMu1YgjD
nw/3aLSksIF5upPLpNUrPpjs8Dzn6hJh8y9pv4wzyQeJa5m73iU7Jy2aRv80dhIs
K8cbjtMMXGaqLJSkNfFZNqmhuaksjrCv9aruxBc8RRYJPR3JQFUSpdSDRaJJJYTz
chjP3PhxzJBnAV8SgHpJOl19YXV5dIx+rMbSg0W9I8+GPmrmfrL5vfZLEgcUydWP
TMH3U8kurfRaFGnhxKzSIQAoCslPlmWqNjk3D+Rf7u0KXtg/L1itTW3TeagAk/1A
Y+NGy8J6oDC53OK399zqwiYVlTuwJ17EAfgsNLbmXZ1ZI9cVAPFrbpZLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNovhlizB1Ar1fFsxpgzp1rO480gMB8GA1UdIwQY
MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt
OTcwNDI4OTFlYjk5LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5
LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpKWU4Ih
/1MtyboZf2591dqSZ27av6TGaHt6ubNYrSU2ENkVvqnBlQGQBpk/tiGxwRUmA4RX
3N2/tnb2PEFitLVLNLGVerNKg052tuJZyNkLr/tbttfsCsdpmvqRSRWfrzzNxW1l
eStRwrU8EtV02p3IKUZR4wM7XjS77IkGUA5huhb766OWJSIHDCUN6jmLXSrjj7h3
vuuZOAPfwMhx2AJbMMzruR3bPf+njWD5kqwQ8hfGoMUY9+DZUgg6675yn7BFtfUW
l7i0SJScVpX+OrWqIEqbds8VYs8Mb16iEVzCnp0UjpvLwh7p/zta3A+Y1TpB3aS/
bJvOSQ/2+mzhSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:47 2026 by rpki-client