Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File:                     CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier:          1RACwwtdvuRiR00grglHaPPuLrF+ZAGDGo0qVvv9w4U=
Subject key identifier:   7C:DF:C6:73:63:21:53:49:88:5C:B2:11:12:E2:77:EF:1E:2D:03:26
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer:       /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial:       019D27723B5AC00ECA8E9846C37D9EC65F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number:          1714
Signing time:             Thu 26 Mar 2026 00:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:30 +0000
Files and hashes:         1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: Zamox3pvtud21mRo2+9mbjYOLwPH1PV+3vkrioEqQGY=)
                          2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:3b:5a:c0:0e:ca:8e:98:46:c3:7d:9e:c6:5f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
        Validity
            Not Before: Mar 26 00:01:30 2026 GMT
            Not After : Mar 27 00:01:30 2026 GMT
        Subject: CN=7cdfc67363215349885cb21112e277ef1e2d0326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:90:8e:3c:07:a9:45:31:05:00:88:e5:6a:
                    70:b2:5c:c8:b4:9d:84:6b:3e:f8:7a:47:2c:ea:09:
                    f3:7f:4a:3f:0a:64:46:94:ca:a9:09:eb:8e:eb:3d:
                    c3:9c:4e:3e:11:f9:77:f7:ea:20:3a:9f:88:ed:38:
                    bd:ae:9b:f2:1e:5c:a6:da:f5:31:77:bb:ad:90:28:
                    a9:85:af:44:a7:65:78:94:be:98:02:c1:e0:a8:f3:
                    77:ed:70:9b:eb:dc:d7:6b:fc:45:69:f3:60:76:ac:
                    89:25:fb:00:72:c7:d1:54:66:96:67:79:46:64:ab:
                    33:1f:75:23:72:74:2b:31:22:44:2b:b6:d6:11:6b:
                    0a:a7:64:89:40:c7:ed:a9:9b:73:85:b0:1e:6d:bb:
                    47:6f:14:1d:d7:38:e9:15:d4:ae:18:0b:4d:45:72:
                    36:e5:bc:a5:22:51:b9:b7:ac:f1:52:f9:b1:a1:9d:
                    ec:16:18:a0:e7:bd:ec:d1:89:80:e8:92:ab:e6:de:
                    cc:52:cc:7b:6f:c6:47:b6:42:5d:c9:29:95:3f:a4:
                    63:f3:8a:b1:79:b9:84:88:c5:a5:e7:bf:32:94:84:
                    e9:18:56:f9:b7:59:74:9b:e4:bf:70:44:5b:33:84:
                    74:e3:3a:cc:68:d4:2c:d0:6d:4e:51:a8:ad:79:1f:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:C6:73:63:21:53:49:88:5C:B2:11:12:E2:77:EF:1E:2D:03:26
            X509v3 Authority Key Identifier:
                keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:17:ab:27:9c:a8:cc:74:de:74:33:9b:3b:2a:ba:22:bc:
         16:7b:18:25:9d:ba:01:0a:0e:33:ee:b0:11:28:0e:69:bb:73:
         10:a9:b7:fa:1e:4d:ff:8d:7d:c4:2c:8c:3d:07:30:c3:27:9a:
         b7:46:49:c3:e0:fb:e6:aa:4b:3c:c9:14:4a:64:ad:21:3e:c5:
         72:7b:54:99:99:f9:8a:94:95:4f:be:4f:a3:84:8f:89:3b:bb:
         d4:94:7f:ea:62:d6:1d:a9:ac:41:9e:d2:a4:1a:9c:46:80:0a:
         5b:e9:c7:02:e5:a0:c4:63:58:da:9a:c6:86:a2:0f:68:2e:54:
         7c:34:2b:56:2e:6a:42:1e:fb:48:c3:96:c7:56:2f:22:39:b8:
         97:40:0e:d6:e7:4c:13:66:87:2c:6d:11:2f:d0:b8:e1:2a:18:
         66:69:92:c1:cf:44:7d:7e:5b:63:dc:38:db:de:28:d9:a8:2b:
         b4:8a:ba:87:b6:ba:59:6d:75:00:bd:d4:c1:b1:1e:2a:54:8d:
         d7:59:0d:5e:40:ca:d5:8f:54:8e:48:3f:e1:a7:bb:0e:d9:af:
         90:58:11:cf:47:60:70:b9:cd:75:a3:9c:56:30:5f:6d:ac:01:
         88:b8:05:40:df:ac:12:2c:74:13:2c:24:68:d0:b3:da:b1:7b:
         ae:16:fe:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjtawA7KjphGw32exl+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh
MDI2NzgwHhcNMjYwMzI2MDAwMTMwWhcNMjYwMzI3MDAwMTMwWjAzMTEwLwYDVQQD
Eyg3Y2RmYzY3MzYzMjE1MzQ5ODg1Y2IyMTExMmUyNzdlZjFlMmQwMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XmQjjwHqUUxBQCI5WpwslzItJ2E
az74ekcs6gnzf0o/CmRGlMqpCeuO6z3DnE4+Efl39+ogOp+I7Ti9rpvyHlym2vUx
d7utkCipha9Ep2V4lL6YAsHgqPN37XCb69zXa/xFafNgdqyJJfsAcsfRVGaWZ3lG
ZKszH3UjcnQrMSJEK7bWEWsKp2SJQMftqZtzhbAebbtHbxQd1zjpFdSuGAtNRXI2
5bylIlG5t6zxUvmxoZ3sFhig573s0YmA6JKr5t7MUsx7b8ZHtkJdySmVP6Rj84qx
ebmEiMWl578ylITpGFb5t1l0m+S/cERbM4R04zrMaNQs0G1OUaiteR/g8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzfxnNjIVNJiFyyERLid+8eLQMmMB8GA1UdIwQY
MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt
ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx
LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ0Xqyec
qMx03nQzmzsquiK8FnsYJZ26AQoOM+6wESgOabtzEKm3+h5N/419xCyMPQcwwyea
t0ZJw+D75qpLPMkUSmStIT7FcntUmZn5ipSVT75Po4SPiTu71JR/6mLWHamsQZ7S
pBqcRoAKW+nHAuWgxGNY2prGhqIPaC5UfDQrVi5qQh77SMOWx1YvIjm4l0AO1udM
E2aHLG0RL9C44SoYZmmSwc9EfX5bY9w4294o2agrtIq6h7a6WW11AL3UwbEeKlSN
11kNXkDK1Y9Ujkg/4ae7DtmvkFgRz0dgcLnNdaOcVjBfbawBiLgFQN+sEix0Eywk
aNCz2rF7rhb+ZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:45 2026 by rpki-client