Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          NstFQoGFLd7V7vn5uNAOyzPa+t05Er7k8UQBZ9CSFLM=
Subject key identifier:   76:BF:FC:06:FC:7D:D2:E7:41:7E:A2:3C:80:D2:6B:3A:72:E1:9C:5D
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       019D2AA9897B2485FEE8BC1A82D24D73BF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 15:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:46 +0000
Files and hashes:         1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
                          2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: DSzo4vsy/ia3x+Pztne5n7cbdPmIRJKjBvNA+52iysk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:89:7b:24:85:fe:e8:bc:1a:82:d2:4d:73:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Mar 26 15:00:46 2026 GMT
            Not After : Mar 27 15:00:46 2026 GMT
        Subject: CN=76bffc06fc7dd2e7417ea23c80d26b3a72e19c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:b4:e9:30:b0:d6:7a:59:86:d4:d2:a8:d3:
                    79:7c:57:d1:24:26:ba:b2:db:7b:b9:fe:22:5f:14:
                    6f:05:92:94:5a:b9:22:b5:e1:84:6f:d9:04:43:f9:
                    98:27:7e:03:d7:c2:9e:2b:5d:5e:8e:86:4e:83:66:
                    6f:31:3c:30:6d:e9:27:e8:85:3f:c1:a2:05:74:fe:
                    a4:94:26:bc:67:a6:30:0a:ac:98:70:93:29:40:99:
                    b0:03:b7:d4:5a:61:07:93:0e:85:84:8e:9b:19:1c:
                    24:3c:b5:55:9b:71:a4:99:e5:46:81:c6:90:35:ac:
                    98:38:93:90:39:bc:a6:18:ba:7e:4d:28:d8:52:30:
                    b6:e8:88:2f:7c:d7:4f:a9:34:96:73:a0:44:22:7c:
                    60:4b:25:86:ba:19:fb:e5:58:74:55:dc:97:e9:69:
                    b8:2e:af:00:25:bf:69:c8:c8:fc:96:b3:5b:4c:0f:
                    06:ed:a3:b5:99:28:cb:16:36:ad:e7:ec:43:b2:26:
                    cf:db:f8:05:0b:44:40:2e:72:30:3c:9f:60:98:50:
                    de:33:55:dd:c2:d2:86:76:c2:8c:2b:15:6a:cd:e3:
                    02:8a:50:fe:b5:13:ef:33:3b:8a:d1:d2:91:4b:87:
                    2c:53:fc:8b:69:ca:3f:62:f8:97:8a:de:96:7d:a8:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BF:FC:06:FC:7D:D2:E7:41:7E:A2:3C:80:D2:6B:3A:72:E1:9C:5D
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:3a:3f:e9:a8:dc:c2:77:82:fb:95:f8:83:fb:24:e0:d6:
         aa:c6:02:5a:96:80:e5:66:7c:60:4a:56:12:69:cf:49:92:5c:
         01:10:52:bf:9c:2c:eb:33:fc:e5:ae:12:34:78:3c:7e:af:71:
         07:da:ce:f6:15:aa:ba:42:d5:f1:ae:ed:eb:af:1d:8b:ad:bf:
         1b:01:42:52:6d:19:dd:e4:3a:94:d0:3a:bf:23:ab:f7:cc:dc:
         35:f0:3f:f8:7f:4a:c2:96:0c:6e:30:cc:cf:c5:04:69:d6:9c:
         81:56:7b:ab:52:58:24:8d:f6:69:dd:dd:0a:da:28:e6:4c:c5:
         8c:8a:e8:02:95:a7:c4:2e:0d:bf:bd:24:d7:70:0f:b6:c2:23:
         c7:58:32:7d:3f:1a:7e:7f:a9:4a:e0:49:85:50:c0:1c:69:32:
         06:e6:8e:44:ef:ad:7b:f0:da:cc:06:48:7f:52:66:06:6d:35:
         3e:b0:87:b7:ef:66:b0:3e:5a:6a:ad:bb:03:66:6d:4e:14:83:
         e8:b3:a6:0a:a2:e1:35:6a:a5:50:8d:42:2b:05:82:b9:67:68:
         89:6d:50:6c:84:77:8c:c1:d3:eb:e5:5a:94:44:73:79:16:6e:
         2f:96:c4:9e:47:6e:78:ef:93:d9:e4:60:84:b0:25:d0:43:fa:
         f1:5d:45:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqYl7JIX+6LwagtJNc785MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzEwY2Y4MWQyMTc3N2E5OGQzZDk5OWRjMWU2ZWFlMDU1
ZjdjM2MwHhcNMjYwMzI2MTUwMDQ2WhcNMjYwMzI3MTUwMDQ2WjAzMTEwLwYDVQQD
Eyg3NmJmZmMwNmZjN2RkMmU3NDE3ZWEyM2M4MGQyNmIzYTcyZTE5YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliq06TCw1npZhtTSqNN5fFfRJCa6
stt7uf4iXxRvBZKUWrkiteGEb9kEQ/mYJ34D18KeK11ejoZOg2ZvMTwwbekn6IU/
waIFdP6klCa8Z6YwCqyYcJMpQJmwA7fUWmEHkw6FhI6bGRwkPLVVm3GkmeVGgcaQ
NayYOJOQObymGLp+TSjYUjC26IgvfNdPqTSWc6BEInxgSyWGuhn75Vh0VdyX6Wm4
Lq8AJb9pyMj8lrNbTA8G7aO1mSjLFjat5+xDsibP2/gFC0RALnIwPJ9gmFDeM1Xd
wtKGdsKMKxVqzeMCilD+tRPvMzuK0dKRS4csU/yLaco/YviXit6WfagNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa//Ab8fdLnQX6iPIDSazpy4ZxdMB8GA1UdIwQY
MBaAFDNxDPgdIXd6mNPZmdwebq4FX3w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2Ut
M2I1ZTgzZjYyNmUzLzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2UtM2I1ZTgzZjYyNmUz
LzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkw6P+mo
3MJ3gvuV+IP7JODWqsYCWpaA5WZ8YEpWEmnPSZJcARBSv5ws6zP85a4SNHg8fq9x
B9rO9hWqukLV8a7t668di62/GwFCUm0Z3eQ6lNA6vyOr98zcNfA/+H9KwpYMbjDM
z8UEadacgVZ7q1JYJI32ad3dCtoo5kzFjIroApWnxC4Nv70k13APtsIjx1gyfT8a
fn+pSuBJhVDAHGkyBuaORO+te/DazAZIf1JmBm01PrCHt+9msD5aaq27A2ZtThSD
6LOmCqLhNWqlUI1CKwWCuWdoiW1QbIR3jMHT6+ValERzeRZuL5bEnkdueO+T2eRg
hLAl0EP68V1FEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:32 2026 by rpki-client