Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          02s/EnIupag5w+KADRmax9wHyXvQa5J8fPgjht6zU1g=
Subject key identifier:   E7:91:BF:53:98:A1:06:D1:3E:48:77:BE:9C:B5:14:62:EE:42:C7:23
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019D25F149946E2AFABF0B3F2CC932259817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          07F6
Signing time:             Wed 25 Mar 2026 17:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:03 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: TiVasoGVzbHiAOjEBUvKQjzodmr3ir79WB/gTyv9pwk=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:49:94:6e:2a:fa:bf:0b:3f:2c:c9:32:25:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Mar 25 17:01:03 2026 GMT
            Not After : Mar 26 17:01:03 2026 GMT
        Subject: CN=e791bf5398a106d13e4877be9cb51462ee42c723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:c8:99:2d:9c:20:cb:59:55:60:a7:06:4c:
                    79:4d:1e:dd:c4:0d:29:c0:40:81:7e:9d:d6:73:d4:
                    9d:4b:ad:f9:e4:0e:fc:b3:31:7f:67:87:d3:58:c9:
                    1c:c0:0b:68:2a:16:da:3e:b5:e6:63:9a:ad:a2:f1:
                    c4:9c:0f:c7:ce:36:09:2f:cc:3d:b4:79:b1:3f:4c:
                    0c:2a:c4:29:f3:c2:76:60:4d:e9:17:03:21:e2:a3:
                    07:6e:44:e3:f6:cd:1a:00:2b:ce:8d:d4:ca:73:32:
                    c4:2c:61:a5:b2:b3:8f:db:a5:93:64:16:36:4f:b2:
                    79:01:2a:a8:1e:8e:3b:60:09:b6:c8:d1:c2:21:15:
                    15:42:01:09:6f:08:fe:e9:82:e6:0d:bf:04:d7:ee:
                    92:52:fb:fd:10:65:1d:e1:d7:6c:9b:a4:5c:2c:88:
                    84:b9:7f:17:c6:bb:1e:ec:34:69:2a:1e:94:36:ce:
                    ac:37:1b:6a:bd:5c:b2:6c:85:c6:72:c8:d7:83:08:
                    39:02:28:96:eb:91:93:c1:09:9c:08:df:5c:e3:ab:
                    3b:9f:67:15:c2:df:c5:6e:40:04:b8:4e:27:d4:24:
                    9a:8f:5b:ec:a0:db:f3:99:b1:6a:03:03:7e:a7:d6:
                    25:be:d6:a9:62:83:27:bf:3b:ac:ab:eb:bf:91:01:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:BF:53:98:A1:06:D1:3E:48:77:BE:9C:B5:14:62:EE:42:C7:23
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:65:a3:83:74:e9:ee:d8:d7:e6:ea:c7:8a:a3:c0:7e:cd:20:
         31:80:b3:0f:3b:e4:63:49:10:b7:3a:26:7c:87:32:a9:a4:50:
         80:e8:e3:a1:6c:ba:f0:3f:8e:82:a1:46:41:4e:14:e5:c1:0e:
         7e:d5:8d:a4:de:6d:66:c5:b3:31:3d:b5:88:e4:fb:4d:c2:49:
         e9:1b:7a:fe:c4:2b:de:71:1b:67:98:70:00:75:4f:ae:f1:43:
         91:8a:cd:e1:15:26:9f:80:c9:36:fb:5a:da:e7:b6:1f:f6:45:
         f8:8c:a5:32:2b:31:89:9d:68:5f:a0:46:d5:7e:77:c6:ea:d1:
         01:4e:74:23:6c:d1:f1:84:0c:0c:f4:3b:3b:6f:7e:34:47:07:
         47:d1:2d:0a:17:7b:c1:37:3e:d0:35:95:c9:d5:4e:d7:2c:39:
         12:13:83:02:10:14:5b:d3:56:3f:b8:b9:31:8d:79:ab:cd:0a:
         e5:78:e2:d3:83:04:4c:2a:dc:d7:56:b5:b1:b1:1b:bb:31:a2:
         af:78:9b:18:b5:bb:28:8a:1a:d5:7c:f4:cc:9a:ab:c7:c7:fb:
         1a:dc:22:c3:7f:49:f4:2d:4b:6a:86:f9:83:0a:8d:31:88:3c:
         74:74:93:ef:95:75:49:fb:53:4d:ba:f1:d1:e9:75:b1:49:c3:
         7e:45:04:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UmUbir6vws/LMkyJZgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5
MjlkMzEwHhcNMjYwMzI1MTcwMTAzWhcNMjYwMzI2MTcwMTAzWjAzMTEwLwYDVQQD
EyhlNzkxYmY1Mzk4YTEwNmQxM2U0ODc3YmU5Y2I1MTQ2MmVlNDJjNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYTImS2cIMtZVWCnBkx5TR7dxA0p
wECBfp3Wc9SdS6355A78szF/Z4fTWMkcwAtoKhbaPrXmY5qtovHEnA/HzjYJL8w9
tHmxP0wMKsQp88J2YE3pFwMh4qMHbkTj9s0aACvOjdTKczLELGGlsrOP26WTZBY2
T7J5ASqoHo47YAm2yNHCIRUVQgEJbwj+6YLmDb8E1+6SUvv9EGUd4ddsm6RcLIiE
uX8Xxrse7DRpKh6UNs6sNxtqvVyybIXGcsjXgwg5AiiW65GTwQmcCN9c46s7n2cV
wt/FbkAEuE4n1CSaj1vsoNvzmbFqAwN+p9YlvtapYoMnvzusq+u/kQFrZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeRv1OYoQbRPkh3vpy1FGLuQscjMB8GA1UdIwQY
MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt
OTAwZDFjYTMyZDdlLzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl
LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2Wjg3Tp
7tjX5urHiqPAfs0gMYCzDzvkY0kQtzomfIcyqaRQgOjjoWy68D+OgqFGQU4U5cEO
ftWNpN5tZsWzMT21iOT7TcJJ6Rt6/sQr3nEbZ5hwAHVPrvFDkYrN4RUmn4DJNvta
2ue2H/ZF+IylMisxiZ1oX6BG1X53xurRAU50I2zR8YQMDPQ7O29+NEcHR9EtChd7
wTc+0DWVydVO1yw5EhODAhAUW9NWP7i5MY15q80K5Xji04METCrc11a1sbEbuzGi
r3ibGLW7KIoa1Xz0zJqrx8f7Gtwiw39J9C1Laob5gwqNMYg8dHST75V1SftTTbrx
0el1sUnDfkUEgw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:29 2026 by rpki-client