Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          amzXiOBYy0AdsXJXCfxepyoMUqmfPnTCYXUzXMnQRc8=
Subject key identifier:   66:27:6A:73:A3:7B:72:5B:54:D1:D9:94:C0:85:D6:08:12:0C:B0:7E
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       019D265F82147FF0431B2259BE96EA700E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          1519
Signing time:             Wed 25 Mar 2026 19:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:26 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: QuheqKD7Qd1uuEoXYStWoaGKFVB2Vyl9RVM/wicSmOY=)
                          2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:82:14:7f:f0:43:1b:22:59:be:96:ea:70:0e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Mar 25 19:01:26 2026 GMT
            Not After : Mar 26 19:01:26 2026 GMT
        Subject: CN=66276a73a37b725b54d1d994c085d608120cb07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:07:f2:45:7a:ef:1e:08:ed:d5:b0:15:a3:
                    6e:03:aa:c7:e3:27:19:b4:30:48:7c:bf:3a:f9:40:
                    45:07:d6:37:d2:f6:9a:27:75:ff:db:cc:85:6d:cf:
                    d8:01:57:a9:1c:cd:08:2f:02:37:0e:83:cc:56:1a:
                    6b:ce:d6:33:cb:18:99:ff:99:d2:a0:92:34:a9:94:
                    ff:22:5a:0e:85:68:18:4b:f9:62:2e:5a:e8:57:9e:
                    85:59:a3:da:c1:0e:ac:56:74:85:c7:3c:18:6d:9b:
                    4b:36:3a:bf:b4:78:df:d7:9e:26:1c:fb:92:ff:58:
                    4c:77:3c:c3:0b:d1:62:38:2a:ee:37:90:6e:7d:33:
                    1f:00:49:10:7f:0e:6b:83:8e:3a:be:88:49:68:59:
                    49:b6:ba:db:a4:c6:9d:21:4a:03:37:da:c5:03:49:
                    0d:2e:49:91:01:d7:2d:df:9a:eb:25:72:b2:b7:b2:
                    96:d2:6d:88:51:c2:2b:19:93:7a:33:84:89:53:05:
                    fd:6d:19:f9:14:46:9f:a2:be:50:67:73:9f:32:b4:
                    12:35:4a:08:fd:21:df:98:5d:ea:8d:4f:8f:94:6a:
                    3f:99:d4:dd:41:79:9e:ef:26:9f:ef:01:7b:26:fb:
                    be:3a:4f:b0:93:80:d0:d2:38:d6:a6:94:54:2b:70:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:6A:73:A3:7B:72:5B:54:D1:D9:94:C0:85:D6:08:12:0C:B0:7E
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:cf:7c:d2:6f:6c:1a:e0:6d:d1:a5:75:fc:9b:12:1b:53:
         f4:87:76:d4:28:06:b4:58:90:d3:aa:7b:73:22:0b:26:11:f5:
         e6:c7:70:de:f7:b7:b2:e1:b8:ba:ed:d9:db:cc:d9:0e:95:59:
         a7:8e:2b:dc:ec:b8:19:76:d8:ec:a9:a5:f6:32:66:0d:bf:12:
         72:f8:c5:a9:25:fa:d5:dc:b1:27:57:90:d6:65:1b:07:ff:22:
         d4:b6:54:e1:ad:c2:e5:cb:05:e2:8f:af:84:23:f8:be:62:2d:
         c9:ed:2c:96:3c:99:25:6d:e3:95:d1:76:71:c3:b0:26:9f:89:
         0f:ae:23:75:3e:9c:1a:92:bb:32:d9:8f:38:5f:7b:2b:48:b6:
         cd:db:c4:11:9d:41:44:50:60:f1:7e:aa:b8:6a:90:b9:0c:42:
         da:27:71:20:ae:fe:d4:de:2b:61:52:27:96:70:60:d3:01:a3:
         24:86:e5:91:32:ae:3f:e0:1c:df:d4:85:0f:dc:3c:8f:c4:2c:
         02:8a:61:1f:17:6f:16:44:b2:c4:87:b3:c5:cc:04:07:36:20:
         b7:f4:21:0c:4f:71:3d:d0:78:01:dc:b3:a5:60:2e:33:f7:66:
         06:3a:cf:37:ed:46:da:68:e5:c3:69:f3:ab:e9:2f:23:04:cd:
         d7:ce:f5:86
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0mX4IUf/BDGyJZvpbqcA6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk
ZWQ0YjQwHhcNMjYwMzI1MTkwMTI2WhcNMjYwMzI2MTkwMTI2WjAzMTEwLwYDVQQD
Eyg2NjI3NmE3M2EzN2I3MjViNTRkMWQ5OTRjMDg1ZDYwODEyMGNiMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYIH8kV67x4I7dWwFaNuA6rH4ycZ
tDBIfL86+UBFB9Y30vaaJ3X/28yFbc/YAVepHM0ILwI3DoPMVhprztYzyxiZ/5nS
oJI0qZT/IloOhWgYS/liLlroV56FWaPawQ6sVnSFxzwYbZtLNjq/tHjf154mHPuS
/1hMdzzDC9FiOCruN5BufTMfAEkQfw5rg446vohJaFlJtrrbpMadIUoDN9rFA0kN
LkmRAdct35rrJXKyt7KW0m2IUcIrGZN6M4SJUwX9bRn5FEafor5QZ3OfMrQSNUoI
/SHfmF3qjU+PlGo/mdTdQXme7yaf7wF7Jvu+Ok+wk4DQ0jjWppRUK3BXfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGYnanOje3JbVNHZlMCF1ggSDLB+MB8GA1UdIwQY
MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx
LTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UxLzczMzE3NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2
NDgvMS8xLTZBRk8yaWtPWV9WTHdldjNXclRFSl9lMUxRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgz3P
fNJvbBrgbdGldfybEhtT9Id21CgGtFiQ06p7cyILJhH15sdw3ve3suG4uu3Z28zZ
DpVZp44r3Oy4GXbY7Kml9jJmDb8ScvjFqSX61dyxJ1eQ1mUbB/8i1LZU4a3C5csF
4o+vhCP4vmItye0sljyZJW3jldF2ccOwJp+JD64jdT6cGpK7MtmPOF97K0i2zdvE
EZ1BRFBg8X6quGqQuQxC2idxIK7+1N4rYVInlnBg0wGjJIblkTKuP+Ac39SFD9w8
j8QsAophHxdvFkSyxIezxcwEBzYgt/QhDE9xPdB4AdyzpWAuM/dmBjrPN+1G2mjl
w2nzq+kvIwTN1871hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:00 2026 by rpki-client