Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          vwQUY0IfzmENfo4uiPHij5UjwXXVp15F0eB2mCHWIfc=
Subject key identifier:   2B:99:1C:18:BF:A8:A3:72:0E:AC:98:8D:FF:65:86:2E:E5:37:B2:1C
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       019D2771D817FECEEA2F7A84F6E70F4ED30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          1882
Signing time:             Thu 26 Mar 2026 00:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:05 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: 4WD6Co8xsKhOYCG09/5tCqLghh2slrIESs0FtFbU33E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:d8:17:fe:ce:ea:2f:7a:84:f6:e7:0f:4e:d3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Mar 26 00:01:05 2026 GMT
            Not After : Mar 27 00:01:05 2026 GMT
        Subject: CN=2b991c18bfa8a3720eac988dff65862ee537b21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:56:f2:bf:ab:5d:43:52:6c:87:cf:ed:b6:
                    4a:06:34:73:96:3c:95:93:b5:7d:2e:1d:4e:4e:b1:
                    4b:ee:15:ee:8e:c3:dd:75:0d:7d:94:75:98:c4:8d:
                    a3:dd:d2:96:91:ae:ec:2c:0f:0f:89:62:83:4f:e6:
                    c4:72:74:83:e0:b4:96:0e:12:03:fa:3e:a1:c8:db:
                    1b:f8:15:bb:c9:96:93:85:13:10:d8:a9:7c:1f:ca:
                    30:f3:06:92:7e:c5:c4:c9:58:54:ab:3e:a8:d0:d9:
                    d0:89:69:53:80:ee:c4:f3:6e:a0:14:42:22:40:fa:
                    29:4f:83:09:7a:24:80:75:90:e6:db:4b:70:75:09:
                    0f:cd:3c:c4:b8:25:e7:f5:16:03:88:38:e8:12:18:
                    4c:ae:16:21:0b:dd:71:4e:5c:1a:a2:7d:17:44:8a:
                    bb:8d:0b:ec:34:ec:df:dd:8f:b9:72:a4:ba:98:e6:
                    a6:be:29:6c:ba:78:ae:8f:7a:1b:19:cb:36:4a:43:
                    4c:24:8e:3e:99:7d:3d:2f:7b:4f:91:03:de:d7:ca:
                    11:b8:60:e8:55:ef:3d:b0:a3:88:66:c7:ad:50:0a:
                    df:6b:4b:8a:87:fe:12:76:c4:90:0d:4a:1b:1c:3f:
                    26:7a:55:de:2a:e8:6d:76:04:8a:f6:ce:ed:66:3a:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:99:1C:18:BF:A8:A3:72:0E:AC:98:8D:FF:65:86:2E:E5:37:B2:1C
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:92:40:53:47:7f:15:6c:b9:a1:52:f7:92:cc:9f:6d:ef:8f:
         c9:cf:b4:18:b0:7a:8b:67:b8:30:22:6e:1a:06:1d:49:e8:1e:
         8d:b0:9a:5d:34:13:46:3d:0a:4f:54:16:93:a2:df:3a:a9:29:
         81:d0:66:f0:86:7f:e2:0c:f8:5c:bb:1d:d2:f5:6d:a2:01:a0:
         3f:60:70:20:80:3c:35:55:49:44:75:48:2e:b4:d8:3f:cf:44:
         27:89:0d:bd:ac:81:1e:cf:42:af:6c:ff:fc:94:ea:30:66:84:
         14:b6:42:80:76:eb:69:06:5a:ba:5b:e2:e0:d4:31:cd:19:3e:
         48:c6:94:1d:95:c5:2b:62:c5:58:75:aa:cd:f8:f9:22:b7:e9:
         e5:78:e3:ee:a7:90:55:e4:f4:1a:d5:42:70:d5:7c:c8:b3:0b:
         d4:e1:55:3f:91:c8:61:3f:a5:6b:0d:c9:cf:f2:fd:37:99:cb:
         44:3f:8d:34:0b:65:f0:a5:eb:83:d5:cf:67:43:7e:0f:f1:7a:
         77:19:a2:f6:28:a4:f2:67:9a:73:60:d4:a0:0d:65:e5:23:eb:
         2d:e9:d6:83:2f:1c:dc:c7:ba:78:40:6c:bf:2b:e1:57:af:d4:
         1f:33:00:60:00:17:c2:50:b6:e1:f3:14:ad:08:4d:0f:0b:b2:
         a3:6c:8e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdgX/s7qL3qE9ucPTtMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmY2RkNDEwZTEyNTAyMmRlMDdjYTU5NjNmOTJmNzhlOGY4
OTQ4NmUwHhcNMjYwMzI2MDAwMTA1WhcNMjYwMzI3MDAwMTA1WjAzMTEwLwYDVQQD
EygyYjk5MWMxOGJmYThhMzcyMGVhYzk4OGRmZjY1ODYyZWU1MzdiMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45W8r+rXUNSbIfP7bZKBjRzljyV
k7V9Lh1OTrFL7hXujsPddQ19lHWYxI2j3dKWka7sLA8PiWKDT+bEcnSD4LSWDhID
+j6hyNsb+BW7yZaThRMQ2Kl8H8ow8waSfsXEyVhUqz6o0NnQiWlTgO7E826gFEIi
QPopT4MJeiSAdZDm20twdQkPzTzEuCXn9RYDiDjoEhhMrhYhC91xTlwaon0XRIq7
jQvsNOzf3Y+5cqS6mOamvilsuniuj3obGcs2SkNMJI4+mX09L3tPkQPe18oRuGDo
Ve89sKOIZsetUArfa0uKh/4SdsSQDUobHD8melXeKuhtdgSK9s7tZjpBAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuZHBi/qKNyDqyYjf9lhi7lN7IcMB8GA1UdIwQY
MBaAFB/N1BDhJQIt4Hyllj+S946PiUhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUt
YWI2OWRhOGYzN2VjLzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUtYWI2OWRhOGYzN2Vj
LzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZJAU0d/
FWy5oVL3ksyfbe+Pyc+0GLB6i2e4MCJuGgYdSegejbCaXTQTRj0KT1QWk6LfOqkp
gdBm8IZ/4gz4XLsd0vVtogGgP2BwIIA8NVVJRHVILrTYP89EJ4kNvayBHs9Cr2z/
/JTqMGaEFLZCgHbraQZaulvi4NQxzRk+SMaUHZXFK2LFWHWqzfj5Irfp5Xjj7qeQ
VeT0GtVCcNV8yLML1OFVP5HIYT+law3Jz/L9N5nLRD+NNAtl8KXrg9XPZ0N+D/F6
dxmi9iik8meac2DUoA1l5SPrLenWgy8c3Me6eEBsvyvhV6/UHzMAYAAXwlC24fMU
rQhNDwuyo2yOHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:08 2026 by rpki-client