Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          5+avBEEYlkta2i5dj/fVkz22dJuFfzFYOEzod5V4l2E=
Subject key identifier:   A7:00:1C:70:71:B2:40:CC:AA:70:33:6F:4B:AC:96:59:48:37:97:FC
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       019D265F7AC0B70A5B18EED2BA8AB0F808AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 19:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:24 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: Fv86yho0o2rKD7qs41y+Ku18X8k9LLK9S24LFu/tJ1k=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:7a:c0:b7:0a:5b:18:ee:d2:ba:8a:b0:f8:08:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Mar 25 19:01:24 2026 GMT
            Not After : Mar 26 19:01:24 2026 GMT
        Subject: CN=a7001c7071b240ccaa70336f4bac9659483797fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:7b:04:11:a9:b1:d9:ef:e7:34:4a:a8:6c:
                    27:f5:4c:23:d6:0c:eb:1a:f0:09:e2:84:6e:75:17:
                    0a:b1:03:7d:db:5a:f3:3f:14:c1:66:21:01:4b:35:
                    b7:b3:86:a5:e1:b7:3b:ee:ca:87:87:3f:34:03:8e:
                    3b:0e:26:1f:16:2c:ea:88:e7:47:77:e8:a4:89:19:
                    d8:2f:e3:e4:35:22:93:92:1c:ca:9e:41:22:74:d6:
                    9a:cf:13:0c:f7:87:5f:e3:87:c1:5e:23:12:2c:72:
                    f2:dd:49:b9:10:12:80:80:21:c1:9f:d9:bf:83:e7:
                    67:a6:78:dc:db:31:72:0a:18:fd:f7:72:64:31:1e:
                    70:a1:33:76:02:39:12:54:58:0b:28:3c:a3:a6:1a:
                    10:19:a9:8b:0a:17:82:39:55:22:8a:bc:7b:62:92:
                    d1:33:d6:56:cf:b7:69:8f:19:46:74:88:e5:3d:d0:
                    fe:74:75:33:25:f0:46:40:88:2d:98:d4:19:d1:6e:
                    fc:e4:be:18:20:df:66:b3:26:12:57:d3:f4:7d:bd:
                    b5:20:e6:3e:ac:fc:0d:d7:3e:b4:4b:b8:c0:d7:c9:
                    98:47:f6:82:2a:fa:2d:80:81:a6:b0:fc:e4:90:47:
                    c7:ad:38:36:fc:a1:ca:c8:e2:6f:b6:84:5e:f4:53:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:1C:70:71:B2:40:CC:AA:70:33:6F:4B:AC:96:59:48:37:97:FC
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:42:87:65:96:83:9b:7d:52:69:5e:ee:98:ed:05:d9:7b:
         27:0a:33:ea:33:c6:40:b2:4e:24:15:e4:03:71:39:ef:b6:ff:
         fc:7f:8f:87:81:06:c0:ba:3f:7d:a9:b5:d6:3f:e5:19:3c:30:
         fe:0d:07:5e:a9:d2:8f:08:ff:80:50:2b:4d:a7:b8:fc:12:08:
         c4:0d:55:39:92:39:4d:8d:50:72:1f:c6:28:4d:90:ab:bc:c2:
         ad:dc:16:6b:4f:d3:7e:7f:92:31:53:74:cf:d0:be:96:b6:0b:
         70:74:d7:02:8b:52:23:b6:17:fe:d4:ac:ab:78:60:40:1c:9c:
         2a:be:2f:57:17:c2:e8:aa:0c:f1:fb:0c:80:55:e0:e6:91:c2:
         ad:58:3a:02:30:6e:30:59:9b:f6:c8:40:f0:5b:d0:e3:92:ed:
         dc:62:ac:d0:f4:26:b3:53:da:28:23:be:f1:e5:e6:94:0a:6e:
         27:64:9e:34:67:6e:bc:4f:0a:6b:1e:72:28:21:79:34:e5:f7:
         df:1d:38:52:cb:e8:41:c5:fb:ed:17:00:43:63:a5:d5:22:f5:
         b7:9d:20:e1:86:e5:49:06:2f:98:8a:ea:2f:66:6d:03:c3:04:
         d9:62:13:61:da:91:06:08:f3:04:ed:31:64:89:10:60:7a:63:
         73:17:e5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3rAtwpbGO7Suoqw+AitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk
MTBkZmYwHhcNMjYwMzI1MTkwMTI0WhcNMjYwMzI2MTkwMTI0WjAzMTEwLwYDVQQD
EyhhNzAwMWM3MDcxYjI0MGNjYWE3MDMzNmY0YmFjOTY1OTQ4Mzc5N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTp7BBGpsdnv5zRKqGwn9Uwj1gzr
GvAJ4oRudRcKsQN921rzPxTBZiEBSzW3s4al4bc77sqHhz80A447DiYfFizqiOdH
d+ikiRnYL+PkNSKTkhzKnkEidNaazxMM94df44fBXiMSLHLy3Um5EBKAgCHBn9m/
g+dnpnjc2zFyChj993JkMR5woTN2AjkSVFgLKDyjphoQGamLCheCOVUiirx7YpLR
M9ZWz7dpjxlGdIjlPdD+dHUzJfBGQIgtmNQZ0W785L4YIN9msyYSV9P0fb21IOY+
rPwN1z60S7jA18mYR/aCKvotgIGmsPzkkEfHrTg2/KHKyOJvtoRe9FOnVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcAHHBxskDMqnAzb0uslllIN5f8MB8GA1UdIwQY
MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt
NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz
LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRJCh2WW
g5t9Umle7pjtBdl7Jwoz6jPGQLJOJBXkA3E577b//H+Ph4EGwLo/fam11j/lGTww
/g0HXqnSjwj/gFArTae4/BIIxA1VOZI5TY1Qch/GKE2Qq7zCrdwWa0/Tfn+SMVN0
z9C+lrYLcHTXAotSI7YX/tSsq3hgQBycKr4vVxfC6KoM8fsMgFXg5pHCrVg6AjBu
MFmb9shA8FvQ45Lt3GKs0PQms1PaKCO+8eXmlApuJ2SeNGduvE8Kax5yKCF5NOX3
3x04UsvoQcX77RcAQ2Ol1SL1t50g4YblSQYvmIrqL2ZtA8ME2WITYdqRBgjzBO0x
ZIkQYHpjcxflUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:03 2026 by rpki-client