Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File:                     19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier:          fLtqnxatHvsh2C+wQSqekcFIrV7xdUDcowUWGG/2Kcw=
Subject key identifier:   49:4E:8E:02:DE:C5:B5:2C:34:B2:D0:D4:3C:D5:82:C5:A2:9E:5E:53
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       019D26CD5FE1AD36A90DEFBA9DA22DA53972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number:          09C3
Signing time:             Wed 25 Mar 2026 21:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:26 +0000
Files and hashes:         1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: BcaSu3Re163mhAz2T7rQwXTTLFLJB+DUP+y7Pe0LhE8=)
                          2: Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa (hash: zmUzBEXw7msOBYr3VGkxq3D1/a+XrxaT8Frd+PDSbhs=)
                          3: b5B5fVg5JQFI93o_bkGxYqBgTcA.roa (hash: KxD2Oza9P8EtKAvqi17xlL2B0ma0zo5mB3KiOChLdyg=)
                          4: oE6r51K-Hn36jEQK9rwYznVcluY.roa (hash: ktgHZDZ0XBs6bzgGz/KVT3sjiszOsWQkRn5c+F0Z0G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:5f:e1:ad:36:a9:0d:ef:ba:9d:a2:2d:a5:39:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Mar 25 21:01:26 2026 GMT
            Not After : Mar 26 21:01:26 2026 GMT
        Subject: CN=494e8e02dec5b52c34b2d0d43cd582c5a29e5e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:9d:6a:e7:b8:ea:41:68:4f:12:65:3d:75:
                    59:81:0e:56:d9:4c:22:7f:18:b4:e6:2e:a4:e3:0f:
                    3f:25:76:23:7f:db:14:74:17:ad:46:49:50:14:91:
                    73:b6:2a:e2:b2:6c:5e:62:e2:24:a6:f5:12:e1:c5:
                    a9:f5:66:72:e0:f9:41:d5:a5:28:87:f4:d1:12:1e:
                    bd:70:1b:e2:16:98:6c:33:f9:27:10:a8:f1:e1:cc:
                    4a:53:9e:15:0a:a2:fd:b5:ab:04:f3:af:97:bd:4e:
                    63:e0:e4:f2:8d:a4:3f:42:32:0e:c2:99:33:1f:49:
                    37:42:ec:ff:6e:01:56:d7:d1:ab:35:93:7e:a7:6a:
                    b9:97:89:2e:6a:ab:d6:ab:56:30:e0:41:24:58:2d:
                    1f:f4:42:32:32:7c:0c:b3:4f:b0:87:da:ec:ea:eb:
                    99:48:cf:98:03:34:80:d2:6d:28:23:7a:a4:62:32:
                    d7:34:5a:1e:eb:b8:2f:c1:f1:71:91:64:ef:15:08:
                    5a:75:14:47:78:e0:4f:62:7b:0e:43:e3:7c:69:16:
                    47:c8:ee:60:b1:1d:3f:b0:20:22:04:3d:06:f6:c3:
                    74:3c:52:b7:48:ac:a3:95:e5:a1:d9:cd:c9:e1:0c:
                    a2:dc:37:75:e1:f8:da:91:1e:f1:6b:bc:2e:3c:6a:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:8E:02:DE:C5:B5:2C:34:B2:D0:D4:3C:D5:82:C5:A2:9E:5E:53
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:86:7f:5e:bf:34:97:2d:48:17:15:69:9b:1d:71:66:af:3e:
         13:67:b5:cc:41:e5:a5:a6:47:d9:5e:cf:93:cd:64:16:4e:94:
         07:98:ca:c2:bc:92:53:e0:de:fd:a9:0f:f2:95:f2:b5:6e:e2:
         b3:fd:b0:d4:78:dd:86:e5:df:9a:e4:08:d7:d3:54:a8:92:6e:
         70:f1:32:19:0d:38:68:76:6a:cd:43:ae:00:75:97:23:7f:f6:
         6f:eb:cd:b2:5f:60:26:06:90:dc:1d:06:26:b2:20:e4:d6:93:
         fc:fe:63:ef:00:83:02:55:50:fa:49:66:dc:6d:26:04:9f:8a:
         e0:c0:79:c0:19:0c:d4:0e:4e:c1:8b:9e:f7:cc:7e:bc:32:b2:
         e9:e8:65:b0:ad:1f:3a:2b:9f:a9:b3:ea:b1:17:fc:91:37:c6:
         48:b0:bf:3e:f6:4c:e2:6d:3b:93:76:53:25:c9:56:f7:38:0d:
         29:36:3e:23:73:c8:99:76:fa:5b:03:17:bf:f1:02:63:cb:59:
         b7:0c:f7:70:b4:0d:00:11:88:0a:5e:32:35:c0:59:0e:a3:c2:
         62:f4:28:a4:22:a0:13:25:5b:7d:a5:11:41:3e:5a:88:b2:db:
         a8:07:8a:9a:78:0f:05:83:f5:ab:b0:94:fc:5f:3b:c3:60:bb:
         90:bd:d3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzV/hrTapDe+6naItpTlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm
NmMwYWYwHhcNMjYwMzI1MjEwMTI2WhcNMjYwMzI2MjEwMTI2WjAzMTEwLwYDVQQD
Eyg0OTRlOGUwMmRlYzViNTJjMzRiMmQwZDQzY2Q1ODJjNWEyOWU1ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Cdaue46kFoTxJlPXVZgQ5W2Uwi
fxi05i6k4w8/JXYjf9sUdBetRklQFJFztirismxeYuIkpvUS4cWp9WZy4PlB1aUo
h/TREh69cBviFphsM/knEKjx4cxKU54VCqL9tasE86+XvU5j4OTyjaQ/QjIOwpkz
H0k3Quz/bgFW19GrNZN+p2q5l4kuaqvWq1Yw4EEkWC0f9EIyMnwMs0+wh9rs6uuZ
SM+YAzSA0m0oI3qkYjLXNFoe67gvwfFxkWTvFQhadRRHeOBPYnsOQ+N8aRZHyO5g
sR0/sCAiBD0G9sN0PFK3SKyjleWh2c3J4Qyi3Dd14fjakR7xa7wuPGr9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElOjgLexbUsNLLQ1DzVgsWinl5TMB8GA1UdIwQY
MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It
ODIzMmZhM2U2MjlkLzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk
LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4Z/Xr80
ly1IFxVpmx1xZq8+E2e1zEHlpaZH2V7Pk81kFk6UB5jKwrySU+De/akP8pXytW7i
s/2w1HjdhuXfmuQI19NUqJJucPEyGQ04aHZqzUOuAHWXI3/2b+vNsl9gJgaQ3B0G
JrIg5NaT/P5j7wCDAlVQ+klm3G0mBJ+K4MB5wBkM1A5OwYue98x+vDKy6ehlsK0f
OiufqbPqsRf8kTfGSLC/PvZM4m07k3ZTJclW9zgNKTY+I3PImXb6WwMXv/ECY8tZ
twz3cLQNABGICl4yNcBZDqPCYvQopCKgEyVbfaURQT5aiLLbqAeKmngPBYP1q7CU
/F87w2C7kL3T9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:33 2026 by rpki-client