Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          mej+IwO9YTLANZkOa65b9OmpxzK6rvTEkao9h200ziE=
Subject key identifier:   BB:B7:8F:AD:0A:07:8E:E3:33:76:66:0F:10:EC:F5:AF:59:EF:5A:DD
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019D2A727824FD9B16EF618BEEE46E2AFF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          1587
Signing time:             Thu 26 Mar 2026 14:00:37 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:37 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:37 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: wIwfRguPm6ji/QUJDuYs4qfvFpsCu/5lMMT8k+g7JSk=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:78:24:fd:9b:16:ef:61:8b:ee:e4:6e:2a:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Mar 26 14:00:37 2026 GMT
            Not After : Mar 27 14:00:37 2026 GMT
        Subject: CN=bbb78fad0a078ee33376660f10ecf5af59ef5add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:84:1a:c3:df:d0:b4:18:3e:ac:44:53:26:
                    7e:60:20:8d:b4:d8:64:a5:e6:dd:40:f1:e2:95:5f:
                    e3:34:66:81:8d:cc:ee:f2:5f:a8:ac:cd:32:08:50:
                    9a:31:98:4e:d0:14:ab:fb:7f:e7:68:85:7a:b4:2b:
                    a9:0c:32:73:dc:44:e4:0c:ca:5f:a2:52:ab:f7:2a:
                    c6:4b:3c:4e:d1:73:1a:be:6d:8d:19:68:2d:48:16:
                    63:de:dc:29:c3:ea:74:fc:50:06:ad:47:61:83:b9:
                    c8:4d:ba:f6:65:01:87:de:2f:06:9a:26:39:c0:8b:
                    8e:3c:14:33:2b:56:b2:e7:e1:61:57:71:c9:e3:ba:
                    a7:71:3c:d4:b2:72:4f:73:b3:be:1c:97:ca:6d:6d:
                    d6:75:6c:65:8e:f0:40:6d:2a:ad:f4:5a:54:3a:25:
                    5a:d5:a5:bf:35:9d:a4:e5:3f:f4:fa:80:52:ce:b7:
                    91:f8:5b:9f:20:ba:ed:9e:e0:71:3a:62:67:8e:cf:
                    41:2f:09:e6:f7:d1:68:c3:da:ab:27:73:0b:b7:27:
                    3e:b4:29:ef:83:5d:8b:3c:d2:d5:3f:60:56:83:bb:
                    b5:32:39:b1:04:74:39:a0:46:61:40:39:e3:eb:ef:
                    f0:ec:d2:41:4f:05:83:ae:1a:0f:47:06:1a:62:11:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:8F:AD:0A:07:8E:E3:33:76:66:0F:10:EC:F5:AF:59:EF:5A:DD
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:74:9d:d8:e7:50:8e:ff:8b:c6:fc:2b:d7:c2:e9:2d:a1:f6:
         14:fe:02:3b:99:ad:41:1a:13:04:7e:fd:ba:e0:54:61:1d:65:
         bb:a6:8f:a2:6f:63:7d:e8:3a:87:31:d2:10:f3:9a:1b:15:64:
         9f:e6:4e:ae:21:cc:1e:ea:21:f7:5b:41:42:44:47:8e:02:d2:
         94:9b:03:bd:32:fe:83:85:55:14:39:1f:33:3f:96:02:e9:85:
         7d:48:3c:39:47:72:dc:5f:cc:72:a3:38:3f:03:2f:5c:e7:19:
         17:2a:1d:b9:4b:ef:60:c0:0f:d9:f4:9a:08:72:af:c2:04:c5:
         e3:d2:4c:b9:a8:e8:a0:b6:22:8e:6a:b8:5c:29:17:b0:60:36:
         f7:f1:83:7a:7a:2f:71:9c:a9:49:74:06:6f:39:c9:d9:94:cd:
         cd:3b:10:a2:d3:33:93:90:d3:66:08:c0:13:60:27:27:2a:db:
         e6:0d:6d:09:20:53:05:df:db:89:d6:71:27:f1:a6:21:e6:f6:
         5b:08:51:a9:de:37:8a:75:4a:a8:5b:f7:0e:52:5f:63:a1:3a:
         ea:e6:fb:95:45:5e:cb:b4:c3:59:f0:e8:31:f5:61:99:f1:63:
         d5:7a:e4:6b:27:1d:a9:55:1b:3f:1c:9a:cd:aa:d7:d8:94:0e:
         c5:b4:8d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcngk/ZsW72GL7uRuKv9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwMzI2MTQwMDM3WhcNMjYwMzI3MTQwMDM3WjAzMTEwLwYDVQQD
EyhiYmI3OGZhZDBhMDc4ZWUzMzM3NjY2MGYxMGVjZjVhZjU5ZWY1YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgSEGsPf0LQYPqxEUyZ+YCCNtNhk
pebdQPHilV/jNGaBjczu8l+orM0yCFCaMZhO0BSr+3/naIV6tCupDDJz3ETkDMpf
olKr9yrGSzxO0XMavm2NGWgtSBZj3twpw+p0/FAGrUdhg7nITbr2ZQGH3i8GmiY5
wIuOPBQzK1ay5+FhV3HJ47qncTzUsnJPc7O+HJfKbW3WdWxljvBAbSqt9FpUOiVa
1aW/NZ2k5T/0+oBSzreR+FufILrtnuBxOmJnjs9BLwnm99Fow9qrJ3MLtyc+tCnv
g12LPNLVP2BWg7u1MjmxBHQ5oEZhQDnj6+/w7NJBTwWDrhoPRwYaYhFChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu3j60KB47jM3ZmDxDs9a9Z71rdMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3Sd2OdQ
jv+Lxvwr18LpLaH2FP4CO5mtQRoTBH79uuBUYR1lu6aPom9jfeg6hzHSEPOaGxVk
n+ZOriHMHuoh91tBQkRHjgLSlJsDvTL+g4VVFDkfMz+WAumFfUg8OUdy3F/McqM4
PwMvXOcZFyoduUvvYMAP2fSaCHKvwgTF49JMuajooLYijmq4XCkXsGA29/GDenov
cZypSXQGbznJ2ZTNzTsQotMzk5DTZgjAE2AnJyrb5g1tCSBTBd/bidZxJ/GmIeb2
WwhRqd43inVKqFv3DlJfY6E66ub7lUVey7TDWfDoMfVhmfFj1XrkaycdqVUbPxya
zarX2JQOxbSNuQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:36:41 2026 by rpki-client