Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File:                     5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier:          72yvEg0SBkT59kZit2F+dNiR+pxdTM33B4RF1+mlrfg=
Subject key identifier:   E7:29:78:32:99:00:4A:88:85:E2:28:BD:CB:90:4C:BA:1C:35:9D:BC
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       019D25F14C50B2C4A7AA1C7BB9A5D1B4EAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:03 +0000
Files and hashes:         1: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: 3/ZvK5GlKvzLj50EAlNjZ5NayfnQK9rmHQg+jhR3RL0=)
                          2: 8enyMWor3_lYLKCjn1VyH8Tmvvo.roa (hash: DXWyK0t3vYkJHhUpLWAQ4emSxTNzSh9hNAKfoEpHYRo=)
                          3: JeNUkUBnpSW-vlRNGpNwNRUA7lY.roa (hash: BiO9H+K+d0OkI09wy+9OSVdZztlHwZneYZ1DCzlG8SU=)
                          4: vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa (hash: CpHPotO66LaiTXBrpXnTFyDFuhRN5pLaJobhuRza6R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:4c:50:b2:c4:a7:aa:1c:7b:b9:a5:d1:b4:ea:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Mar 25 17:01:03 2026 GMT
            Not After : Mar 26 17:01:03 2026 GMT
        Subject: CN=e729783299004a8885e228bdcb904cba1c359dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:20:a0:1f:7d:bf:2f:f8:bc:4f:cf:88:86:
                    cf:5e:62:da:66:49:10:78:15:81:9b:a3:75:9b:4f:
                    5e:6a:fd:a2:ca:a5:79:b8:16:a8:b0:12:71:b4:29:
                    02:84:27:2c:cb:12:41:31:f5:82:43:63:3b:29:d7:
                    87:0f:b6:f9:38:d9:d1:89:c1:11:57:e6:14:c2:f1:
                    e5:ad:3b:22:da:4c:74:59:de:e3:00:b9:ce:c0:4c:
                    9f:82:f5:11:e1:35:15:ac:3f:93:0b:1f:68:13:78:
                    1c:c9:4c:16:c9:91:6b:1f:df:a5:a5:41:2c:74:56:
                    52:b8:89:a3:c0:68:1c:94:23:9c:4c:f3:6a:07:a8:
                    a1:13:73:68:c3:2e:3d:6a:67:5d:fc:18:0b:7f:8b:
                    79:e6:fa:ab:31:70:5d:35:c8:70:2f:be:cc:a6:21:
                    33:1c:8f:aa:ab:c2:b7:85:4e:21:a9:34:54:6e:f1:
                    b2:ec:5d:73:6f:81:09:b0:ac:59:db:c5:68:61:4e:
                    26:53:02:01:52:b6:94:48:d6:78:e8:91:04:08:ea:
                    6a:6e:2c:81:98:db:fa:3e:b9:6d:e1:9c:91:b8:73:
                    03:20:78:29:cc:47:35:76:f6:27:e7:5e:2d:80:0b:
                    86:bb:2e:c5:6a:ff:9e:42:02:c7:31:bc:65:d2:63:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:78:32:99:00:4A:88:85:E2:28:BD:CB:90:4C:BA:1C:35:9D:BC
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:78:e7:d1:f4:0b:70:c6:e3:8a:03:2b:40:e6:91:0d:86:
         8d:17:7c:82:82:cb:df:df:a5:00:db:b9:98:10:f5:de:fb:38:
         83:ba:9c:6b:59:01:4e:32:f0:e9:da:4b:3f:b2:33:28:b3:d0:
         ba:99:b6:37:65:28:ba:3d:b8:53:84:0c:1d:f2:91:26:fb:38:
         d7:48:66:f5:72:63:c9:7d:7c:60:d5:c4:c1:8c:f5:39:5e:a8:
         7c:18:d6:8c:68:65:22:5e:29:fa:25:af:91:08:17:f7:46:f2:
         c7:24:cf:31:8a:7b:ec:94:ea:6a:3a:85:10:ef:11:0a:9c:b7:
         1e:cd:2f:fd:16:85:f7:08:0f:be:02:ed:80:cd:85:56:93:55:
         f1:bc:92:fa:f2:27:fa:05:24:0f:38:11:ad:bf:c1:d0:48:6a:
         b8:0c:d7:cd:4d:b8:d6:e3:1d:9e:42:03:92:4e:bc:c6:6b:16:
         63:23:d7:3a:12:cb:e5:8a:f1:3a:30:d8:33:41:11:90:4c:0b:
         15:97:8c:e6:eb:89:78:b4:f4:6d:74:fd:e0:e6:7d:94:29:4d:
         82:38:16:55:00:38:d7:dc:d2:5b:45:63:3c:0f:52:db:2c:87:
         2e:31:6f:e1:85:99:d7:29:49:cb:bf:a6:e4:46:a1:f4:42:bd:
         9a:77:74:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UxQssSnqhx7uaXRtOrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYzRhMWJiYmE1NmNjNDM0ODYxYTRjNzY5ZmY5Y2Uy
ZDE1ZWMwHhcNMjYwMzI1MTcwMTAzWhcNMjYwMzI2MTcwMTAzWjAzMTEwLwYDVQQD
EyhlNzI5NzgzMjk5MDA0YTg4ODVlMjI4YmRjYjkwNGNiYTFjMzU5ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xYgoB99vy/4vE/PiIbPXmLaZkkQ
eBWBm6N1m09eav2iyqV5uBaosBJxtCkChCcsyxJBMfWCQ2M7KdeHD7b5ONnRicER
V+YUwvHlrTsi2kx0Wd7jALnOwEyfgvUR4TUVrD+TCx9oE3gcyUwWyZFrH9+lpUEs
dFZSuImjwGgclCOcTPNqB6ihE3Nowy49amdd/BgLf4t55vqrMXBdNchwL77MpiEz
HI+qq8K3hU4hqTRUbvGy7F1zb4EJsKxZ28VoYU4mUwIBUraUSNZ46JEECOpqbiyB
mNv6Prlt4ZyRuHMDIHgpzEc1dvYn514tgAuGuy7Fav+eQgLHMbxl0mPiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcpeDKZAEqIheIovcuQTLocNZ28MB8GA1UdIwQY
MBaAFOQ7rEobu6VsxDSGGkx2n/nOLRXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEt
MWNkM2NiMDdlZjVkLzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEtMWNkM2NiMDdlZjVk
LzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8R459H0
C3DG44oDK0DmkQ2GjRd8goLL39+lANu5mBD13vs4g7qca1kBTjLw6dpLP7IzKLPQ
upm2N2Uouj24U4QMHfKRJvs410hm9XJjyX18YNXEwYz1OV6ofBjWjGhlIl4p+iWv
kQgX90byxyTPMYp77JTqajqFEO8RCpy3Hs0v/RaF9wgPvgLtgM2FVpNV8byS+vIn
+gUkDzgRrb/B0EhquAzXzU241uMdnkIDkk68xmsWYyPXOhLL5YrxOjDYM0ERkEwL
FZeM5uuJeLT0bXT94OZ9lClNgjgWVQA419zSW0VjPA9S2yyHLjFv4YWZ1ylJy7+m
5Eah9EK9mnd03Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:43 2026 by rpki-client