Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File:                     1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier:          FdmKdrPrLzOppXnUEU6+n7kVbx3SGMVNJhz0VS8mhD0=
Subject key identifier:   19:69:BC:6E:8E:6C:87:F5:A2:28:65:05:83:92:F6:35:2C:78:2B:7B
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer:       /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial:       019D2B4F03121D7868E7F26AAEA7BD07C4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 18:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:31 +0000
Files and hashes:         1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: D4uitT5s92kyaw54B9uzPd6IWSDZeYyFENTGdSJShk0=)
                          2: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4f:03:12:1d:78:68:e7:f2:6a:ae:a7:bd:07:c4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
        Validity
            Not Before: Mar 26 18:01:31 2026 GMT
            Not After : Mar 27 18:01:31 2026 GMT
        Subject: CN=1969bc6e8e6c87f5a22865058392f6352c782b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:d1:40:cf:50:d8:52:41:3a:02:dc:0c:d9:
                    e7:43:b2:d8:19:bf:93:c5:20:76:1d:dd:31:da:ea:
                    bb:8e:de:64:9d:2b:bf:04:fc:8c:e6:d3:fa:9e:25:
                    af:f2:d3:f7:64:0f:fd:7a:3e:b5:5e:e5:13:eb:df:
                    d8:d2:5b:3c:57:c7:f0:85:99:25:dc:f3:b9:f0:2e:
                    14:8f:d5:51:fe:8c:5a:15:4a:89:23:81:60:c9:c1:
                    4c:c6:75:40:9e:b2:d9:9b:4d:c8:d6:f2:10:df:2d:
                    9d:3c:a5:b0:b0:f1:d6:a5:ac:ce:a3:a7:b8:fb:84:
                    12:e0:ba:90:32:27:1c:53:b8:53:50:3a:c9:2e:73:
                    db:8c:7d:8e:c0:89:b5:fb:55:01:ac:6b:0d:84:76:
                    7f:ce:28:d7:0e:5d:8a:1a:08:2b:7f:e4:2b:7c:4e:
                    af:22:66:ec:21:d6:f7:76:d3:9e:9f:26:08:74:0f:
                    6f:ec:d9:0c:97:66:5a:f1:e7:27:04:f1:d3:ca:0d:
                    f7:7d:33:c5:82:ab:4f:09:92:99:c6:26:c0:a2:cf:
                    95:d8:7e:a2:5e:10:f2:dd:2c:d8:d1:4f:49:a1:95:
                    2b:e9:b6:18:97:ef:74:13:a8:04:c3:b0:80:3f:45:
                    d0:b5:60:2d:c5:de:31:a1:b6:29:6e:77:c5:68:05:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:69:BC:6E:8E:6C:87:F5:A2:28:65:05:83:92:F6:35:2C:78:2B:7B
            X509v3 Authority Key Identifier:
                keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:93:8e:9d:f8:55:0b:13:37:80:fe:e3:b3:4e:7f:41:02:
         67:4b:5e:4d:d1:0f:36:c8:f4:55:04:93:f3:dc:36:f0:07:7e:
         2d:bc:9d:8e:59:35:17:be:fc:7a:24:9b:47:20:17:a1:38:04:
         88:21:46:4f:6a:6c:ce:35:b0:dc:44:23:c3:7d:ae:79:e3:98:
         91:9e:c8:1d:d1:48:0c:4d:84:0f:bc:80:a4:8e:e8:02:ea:7d:
         d8:f3:4d:2c:16:60:b1:67:ba:bb:2b:44:b0:43:23:47:19:70:
         c9:92:36:d1:2a:14:82:aa:6d:ff:f7:67:9d:a5:9a:40:48:32:
         be:c8:eb:77:c5:ee:98:e3:d2:98:82:d6:bd:7f:cd:e9:7b:52:
         57:f7:ec:fc:86:c0:e8:64:3a:83:40:ce:09:9f:a5:43:b8:f5:
         de:dd:d4:a0:36:83:bb:e8:c1:7a:7a:57:f1:89:47:ff:30:41:
         0b:96:cc:f8:6c:83:e6:d7:a4:50:27:f2:e0:4f:cb:c6:8a:07:
         ae:58:16:a4:be:d4:24:e5:82:15:17:22:22:35:f6:71:50:57:
         29:1c:7f:97:7d:5b:c1:b6:32:bc:3a:6e:40:48:6b:25:69:65:
         ce:90:ac:a3:fe:f6:81:d2:a2:0b:96:78:05:2a:97:ab:ba:a6:
         f4:c8:50:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTwMSHXho5/Jqrqe9B8T6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjYwMzI2MTgwMTMxWhcNMjYwMzI3MTgwMTMxWjAzMTEwLwYDVQQD
EygxOTY5YmM2ZThlNmM4N2Y1YTIyODY1MDU4MzkyZjYzNTJjNzgyYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlrRQM9Q2FJBOgLcDNnnQ7LYGb+T
xSB2Hd0x2uq7jt5knSu/BPyM5tP6niWv8tP3ZA/9ej61XuUT69/Y0ls8V8fwhZkl
3PO58C4Uj9VR/oxaFUqJI4FgycFMxnVAnrLZm03I1vIQ3y2dPKWwsPHWpazOo6e4
+4QS4LqQMiccU7hTUDrJLnPbjH2OwIm1+1UBrGsNhHZ/zijXDl2KGggrf+QrfE6v
ImbsIdb3dtOenyYIdA9v7NkMl2Za8ecnBPHTyg33fTPFgqtPCZKZxibAos+V2H6i
XhDy3SzY0U9JoZUr6bYYl+90E6gEw7CAP0XQtWAtxd4xobYpbnfFaAX7tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlpvG6ObIf1oihlBYOS9jUseCt7MB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2CTjp34
VQsTN4D+47NOf0ECZ0teTdEPNsj0VQST89w28Ad+Lbydjlk1F778eiSbRyAXoTgE
iCFGT2pszjWw3EQjw32ueeOYkZ7IHdFIDE2ED7yApI7oAup92PNNLBZgsWe6uytE
sEMjRxlwyZI20SoUgqpt//dnnaWaQEgyvsjrd8XumOPSmILWvX/N6XtSV/fs/IbA
6GQ6g0DOCZ+lQ7j13t3UoDaDu+jBenpX8YlH/zBBC5bM+GyD5tekUCfy4E/LxooH
rlgWpL7UJOWCFRciIjX2cVBXKRx/l31bwbYyvDpuQEhrJWllzpCso/72gdKiC5Z4
BSqXq7qm9MhQEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:00 2026 by rpki-client