Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
File:                     51B9sIinyBoNvsjxrdtS-VvRAUM.mft (raw, json)
Hash identifier:          zk1fwtceDtUp931G1zI5nMt8+B1SQU79phDQQgB4z3k=
Subject key identifier:   BC:43:8F:2D:26:1B:97:19:D3:D7:DC:D8:8F:3B:23:36:96:F0:18:3B
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Certificate issuer:       /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial:       019D25F0FCB80604F9C37E41123ED08562C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 17:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:43 +0000
Files and hashes:         1: 51B9sIinyBoNvsjxrdtS-VvRAUM.crl (hash: /AqJaTIXqAX59lG1oN71d4p75aHoF74yjXq82mcXFKg=)
                          2: 7kYVFuyM-RfK26RLFo6DMjfTwzk.roa (hash: KbmoPpiA6XOiH7OL5wKdZhHaSYMgcT7lmpKJIFLFmlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f0:fc:b8:06:04:f9:c3:7e:41:12:3e:d0:85:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
        Validity
            Not Before: Mar 25 17:00:43 2026 GMT
            Not After : Mar 26 17:00:43 2026 GMT
        Subject: CN=bc438f2d261b9719d3d7dcd88f3b233696f0183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:5a:fe:c7:e3:68:8b:6b:83:09:dc:5e:f5:
                    d0:96:6d:7d:47:1d:1c:30:31:e5:83:62:7c:9d:a4:
                    81:f8:9b:36:59:0b:56:2b:43:cc:8d:a0:98:82:65:
                    9b:fd:7c:a0:3c:a2:b5:86:65:19:7b:a0:4f:71:3b:
                    4a:85:69:03:af:90:49:e1:00:ec:41:e6:1d:2b:06:
                    51:15:e1:06:45:2d:fe:dd:b8:1c:1d:01:a8:5b:d8:
                    11:83:40:d6:e2:ab:2c:f8:29:31:da:f2:02:e2:fb:
                    42:ca:41:2b:1c:3d:9d:08:3c:e1:a3:6e:97:54:56:
                    ef:3b:8b:5c:b7:52:09:93:a4:e9:f2:d1:3b:fb:3a:
                    4e:9b:67:f7:bf:3e:ea:be:3b:55:42:25:63:0d:23:
                    62:86:4e:bd:32:8d:64:6a:3c:3b:85:99:4d:f1:84:
                    92:30:0c:2f:58:78:38:ca:04:0c:ff:71:4d:4e:be:
                    af:80:5f:02:21:36:e7:12:2d:58:a8:33:52:31:47:
                    7e:9f:c2:50:c2:47:67:10:c1:12:89:78:1f:ad:88:
                    fb:68:a8:86:64:c1:64:44:f9:71:ed:5c:c1:7b:ce:
                    5f:e4:6b:dc:74:45:d1:87:74:5d:a1:ad:6b:56:7a:
                    38:97:45:bb:e8:91:25:97:84:fc:3a:88:9a:2a:88:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:8F:2D:26:1B:97:19:D3:D7:DC:D8:8F:3B:23:36:96:F0:18:3B
            X509v3 Authority Key Identifier:
                keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:04:1d:85:cd:34:f7:07:92:64:0c:18:22:6b:3b:00:60:
         ef:78:7b:36:75:bc:9b:5d:ba:00:5e:19:0d:06:2b:8d:6d:af:
         33:92:7e:5c:f3:58:13:a5:a4:86:e2:f3:b3:49:16:7c:6c:96:
         0e:22:c8:d2:01:db:b3:42:4f:c1:d8:65:8c:1c:2d:13:47:d2:
         8f:79:07:4c:23:ef:c7:90:cd:07:90:b9:a0:cd:c5:28:85:64:
         5a:c2:5b:5c:c6:3d:5a:5c:e6:e9:21:5e:bb:30:3e:c3:62:29:
         19:79:e1:8e:91:d3:ac:91:85:f4:6e:c7:10:41:cd:40:33:6e:
         9b:31:02:64:2e:2e:a4:f5:cc:e0:c3:31:5d:7d:e1:0a:1c:cc:
         d4:49:5c:85:c6:d7:5b:29:9a:c2:83:66:e7:c8:2b:67:40:8e:
         77:29:83:0f:5e:b3:37:d8:89:2b:90:b8:8b:59:d3:bc:fc:38:
         be:a5:bb:3a:f0:e9:07:e5:60:c4:22:00:37:17:64:7e:a0:f5:
         f6:80:b0:fb:bb:50:1c:f7:57:23:a9:19:d3:a5:5d:7c:93:66:
         12:6e:c5:6f:15:99:00:73:79:80:22:92:34:7b:2d:2a:63:74:
         72:49:0d:e7:84:a1:b0:66:75:c6:7f:3b:96:b2:ed:a4:f7:44:
         48:2e:8b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Py4BgT5w35BEj7QhWLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTA3ZGIwODhhN2M4MWEwZGJlYzhmMWFkZGI1MmY5NWJk
MTAxNDMwHhcNMjYwMzI1MTcwMDQzWhcNMjYwMzI2MTcwMDQzWjAzMTEwLwYDVQQD
EyhiYzQzOGYyZDI2MWI5NzE5ZDNkN2RjZDg4ZjNiMjMzNjk2ZjAxODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm71a/sfjaItrgwncXvXQlm19Rx0c
MDHlg2J8naSB+Js2WQtWK0PMjaCYgmWb/XygPKK1hmUZe6BPcTtKhWkDr5BJ4QDs
QeYdKwZRFeEGRS3+3bgcHQGoW9gRg0DW4qss+Ckx2vIC4vtCykErHD2dCDzho26X
VFbvO4tct1IJk6Tp8tE7+zpOm2f3vz7qvjtVQiVjDSNihk69Mo1kajw7hZlN8YSS
MAwvWHg4ygQM/3FNTr6vgF8CITbnEi1YqDNSMUd+n8JQwkdnEMESiXgfrYj7aKiG
ZMFkRPlx7VzBe85f5GvcdEXRh3Rdoa1rVno4l0W76JEll4T8OoiaKogcnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxDjy0mG5cZ09fc2I87IzaW8Bg7MB8GA1UdIwQY
MBaAFOdQfbCIp8gaDb7I8a3bUvlb0QFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUt
NWQ4NjM0YWI3ZDkxLzEvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUtNWQ4NjM0YWI3ZDkx
LzEvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF8EHYXN
NPcHkmQMGCJrOwBg73h7NnW8m126AF4ZDQYrjW2vM5J+XPNYE6WkhuLzs0kWfGyW
DiLI0gHbs0JPwdhljBwtE0fSj3kHTCPvx5DNB5C5oM3FKIVkWsJbXMY9Wlzm6SFe
uzA+w2IpGXnhjpHTrJGF9G7HEEHNQDNumzECZC4upPXM4MMxXX3hChzM1ElchcbX
WymawoNm58grZ0COdymDD16zN9iJK5C4i1nTvPw4vqW7OvDpB+VgxCIANxdkfqD1
9oCw+7tQHPdXI6kZ06VdfJNmEm7FbxWZAHN5gCKSNHstKmN0ckkN54ShsGZ1xn87
lrLtpPdESC6LZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:32 2026 by rpki-client