Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          OHo1a6AW2fRfFt4y4Knt5ZiiPk5BJAsXgdJvjEC5FYk=
Subject key identifier:   B8:57:F5:1B:5D:F2:F5:5B:05:C1:63:13:5F:6E:F7:66:BD:BF:39:CC
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       019D262819DE973C7B647914E44E780DE339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          17DE
Signing time:             Wed 25 Mar 2026 18:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:55 +0000
Files and hashes:         1: 0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa (hash: 2zRsav5IEfSlzcwSQLfdTFA0TTacyX5/9RQCzwFOfMo=)
                          2: 0qaV7J9RK3kRvbrwOrLwGL-59is.roa (hash: UvPJ59WZ0VSeeSOBjE40xguTq+GAWfJ5QMJ5cMTtGWE=)
                          3: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: dPn1V8PB7l+mNJmNOk1KBUK1p+1aia5ese7yas4YEZk=)
                          4: YjNMtDRzs2TGP5-x14XVzmAfxFs.roa (hash: FsTc0fpESg1ct7d6odO1YuCSb5A2XaTydzLOePR872I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:19:de:97:3c:7b:64:79:14:e4:4e:78:0d:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Mar 25 18:00:55 2026 GMT
            Not After : Mar 26 18:00:55 2026 GMT
        Subject: CN=b857f51b5df2f55b05c163135f6ef766bdbf39cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:ee:8c:23:9c:1d:3d:48:a2:aa:f5:97:cc:
                    1f:36:63:6e:4c:54:6b:d4:51:b6:65:7e:3e:a3:4a:
                    30:a8:b5:4e:a6:ce:d3:90:41:0d:8e:2a:30:b5:81:
                    fc:26:2b:62:90:a9:98:d2:55:5f:8a:40:42:24:dc:
                    45:cf:cb:e3:95:54:53:e9:06:9e:e9:a5:21:ac:7d:
                    78:90:05:d9:a8:ad:10:ed:7e:a8:f9:76:9e:50:66:
                    fc:9f:03:f7:08:79:97:fd:12:3f:b7:56:01:7c:12:
                    c5:a9:8c:9a:67:b7:c8:c5:d7:fb:c9:3b:94:c9:60:
                    90:56:08:0e:c8:34:88:d7:2b:c6:cc:1c:af:02:ef:
                    9a:3b:ff:8d:99:9c:ea:10:27:59:99:1c:0d:2d:59:
                    3b:7b:71:72:bf:74:2e:17:94:64:91:0c:06:8b:e7:
                    ff:e9:e1:6a:a7:33:e4:53:63:b6:cd:20:1e:3e:d2:
                    9e:a2:1e:44:c5:29:81:7c:cf:51:22:a9:fb:9a:64:
                    a8:29:fa:93:5b:a5:21:fe:73:1a:c9:67:e1:a3:7b:
                    a3:24:68:df:dd:1a:c5:1b:11:ec:2e:af:8e:6f:6b:
                    8c:47:d9:26:d5:43:7d:de:c0:0c:f0:c7:91:9e:ea:
                    c0:01:15:01:7f:a3:83:e2:44:87:a9:42:04:10:2c:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:F5:1B:5D:F2:F5:5B:05:C1:63:13:5F:6E:F7:66:BD:BF:39:CC
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e2:ab:85:76:16:d0:6b:7a:ac:c2:df:da:73:4f:dc:b1:b7:
         3b:b3:9e:52:51:bc:70:9a:d8:d6:7e:e4:57:3a:dd:2d:37:f4:
         c8:54:5c:f2:fb:0f:d6:fe:2c:bf:1a:05:a8:0b:b4:ac:31:03:
         3e:66:51:0f:03:3a:f7:db:4b:e9:ba:d2:18:5a:fb:4a:d8:9d:
         a7:54:69:43:d0:17:76:f7:60:e2:01:0d:91:96:c0:d6:f9:92:
         e5:75:0c:8f:81:9e:25:1f:17:11:68:1c:4c:40:0d:4f:94:38:
         6c:24:7e:46:c6:7a:f7:5c:cd:d9:34:b4:96:9f:63:e0:5e:3f:
         a8:9f:ea:81:1b:42:ae:91:f6:3a:1b:16:ea:be:71:50:db:70:
         98:9d:a0:52:32:5c:7b:01:d0:9c:de:86:20:ab:7f:55:c5:6b:
         50:f2:4f:59:53:80:0f:7f:d8:cd:86:13:15:f7:8a:4f:0d:ba:
         60:dc:9b:58:cf:7e:b3:55:e3:47:7e:be:61:45:d8:c9:3a:b7:
         5a:b2:0e:dd:ea:f1:b9:1c:62:96:6b:96:b1:1e:52:b0:ff:fa:
         0c:8d:4a:05:96:15:08:7f:54:23:95:21:46:7b:17:fa:41:34:
         1c:45:36:dd:7f:19:e8:dd:4d:28:e7:92:38:cb:70:2b:10:a8:
         46:c8:9a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBnelzx7ZHkU5E54DeM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy
NTkzNDkwHhcNMjYwMzI1MTgwMDU1WhcNMjYwMzI2MTgwMDU1WjAzMTEwLwYDVQQD
EyhiODU3ZjUxYjVkZjJmNTViMDVjMTYzMTM1ZjZlZjc2NmJkYmYzOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySnujCOcHT1Ioqr1l8wfNmNuTFRr
1FG2ZX4+o0owqLVOps7TkEENjiowtYH8JitikKmY0lVfikBCJNxFz8vjlVRT6Qae
6aUhrH14kAXZqK0Q7X6o+XaeUGb8nwP3CHmX/RI/t1YBfBLFqYyaZ7fIxdf7yTuU
yWCQVggOyDSI1yvGzByvAu+aO/+NmZzqECdZmRwNLVk7e3Fyv3QuF5RkkQwGi+f/
6eFqpzPkU2O2zSAePtKeoh5ExSmBfM9RIqn7mmSoKfqTW6Uh/nMayWfho3ujJGjf
3RrFGxHsLq+Ob2uMR9km1UN93sAM8MeRnurAARUBf6OD4kSHqUIEECysUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhX9Rtd8vVbBcFjE19u92a9vznMMB8GA1UdIwQY
MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt
YTkxNjM0ZDJhODA4LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4
LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOKrhXYW
0Gt6rMLf2nNP3LG3O7OeUlG8cJrY1n7kVzrdLTf0yFRc8vsP1v4svxoFqAu0rDED
PmZRDwM699tL6brSGFr7Stidp1RpQ9AXdvdg4gENkZbA1vmS5XUMj4GeJR8XEWgc
TEANT5Q4bCR+RsZ691zN2TS0lp9j4F4/qJ/qgRtCrpH2OhsW6r5xUNtwmJ2gUjJc
ewHQnN6GIKt/VcVrUPJPWVOAD3/YzYYTFfeKTw26YNybWM9+s1XjR36+YUXYyTq3
WrIO3erxuRxilmuWsR5SsP/6DI1KBZYVCH9UI5UhRnsX+kE0HEU23X8Z6N1NKOeS
OMtwKxCoRsiaxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:48 2026 by rpki-client