Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          Nmz7Suxjx2rjR23I6zD2F5dIyh8IZPjFkK0+8cwZIpQ=
Subject key identifier:   AA:FD:6E:59:89:B4:E3:60:AA:D0:B8:79:3E:90:8A:B8:03:2A:BB:3A
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019D284D72F60510EBD96766E4F45A4A0A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 04:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:57 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: M9CBANi34ajniDcrhPtnUFdFdNpOnbbk3Pq3CydfefE=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:72:f6:05:10:eb:d9:67:66:e4:f4:5a:4a:0a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Mar 26 04:00:57 2026 GMT
            Not After : Mar 27 04:00:57 2026 GMT
        Subject: CN=aafd6e5989b4e360aad0b8793e908ab8032abb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:d8:c4:d0:5a:0e:0e:59:2a:1d:92:45:b1:
                    1e:06:46:75:7b:02:07:35:47:a3:7d:74:de:4e:e0:
                    bb:ec:2e:29:86:f5:56:f2:17:31:81:cd:b6:7e:47:
                    19:cd:0d:89:93:bc:09:e6:85:18:81:09:18:1a:8e:
                    a3:54:96:48:e8:6f:56:8b:6a:7b:a2:19:96:30:0b:
                    1f:2d:0a:ff:0c:45:71:f2:e1:ba:3e:51:e2:3c:4e:
                    ec:5f:70:87:59:6e:5e:e1:d4:94:9c:ad:b7:93:0c:
                    b4:ba:2c:05:8e:40:f4:f7:08:1f:9d:fe:3e:a2:8e:
                    2e:40:74:d2:62:c4:3f:7e:25:3a:db:1d:52:49:e6:
                    9e:f2:78:1a:81:de:2d:62:fa:87:fc:43:e8:44:6e:
                    d3:73:33:ba:f8:a7:0a:59:fe:7c:8f:07:01:ed:0a:
                    55:31:db:93:47:b7:8f:e7:b3:47:a2:9e:3a:ba:99:
                    28:1e:fd:3e:23:ea:5b:8d:9c:6c:e9:6c:50:e7:21:
                    64:c8:19:92:3c:a0:35:fe:3a:53:33:4d:f2:28:f5:
                    39:43:8e:a6:b9:05:00:d7:98:4e:da:d1:2b:61:92:
                    1d:e9:e3:c8:aa:6b:08:d9:f1:7b:b0:1e:46:f0:de:
                    56:62:c4:9f:32:ef:fc:77:8c:9a:3a:79:3d:b1:dc:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:6E:59:89:B4:E3:60:AA:D0:B8:79:3E:90:8A:B8:03:2A:BB:3A
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:96:fe:01:53:f7:58:d3:c0:cb:4f:f2:82:db:94:01:39:
         4d:db:79:d9:c3:51:b0:3a:4d:e6:cb:7c:21:c7:79:b9:1d:e6:
         a6:2b:14:72:7b:95:c7:aa:42:f3:b8:a5:3e:35:eb:d7:f0:be:
         e2:b0:d2:cc:f5:bc:4c:a3:8e:0b:87:a7:36:ae:2e:7d:ab:dc:
         d7:65:45:d1:d2:d0:57:ec:19:14:fb:d9:73:b3:ad:b9:fe:fa:
         65:66:24:7f:42:10:64:2a:aa:b2:c1:2d:00:8e:10:f9:a3:7e:
         da:94:3f:46:cc:51:46:02:fb:67:74:d1:ce:97:fa:f1:a6:7f:
         bc:79:cc:ee:6f:f7:a7:03:f6:65:3d:8d:b7:c4:86:34:cf:33:
         92:6d:6d:71:9d:be:cf:0a:8c:24:83:ef:54:de:03:c2:09:51:
         5a:d9:31:cb:9c:d7:9d:09:bf:b2:7a:3f:ba:ac:8f:c8:ae:0c:
         49:84:61:22:e3:c6:cc:ad:67:44:ec:2d:c7:d4:95:af:11:bc:
         c5:08:5d:32:4c:b5:4f:cd:7a:50:c7:21:05:79:60:98:31:e0:
         7b:78:3d:14:fd:18:b8:04:13:a8:e8:af:12:ee:f3:28:77:42:
         48:5d:18:20:3e:60:38:1b:cc:dc:48:25:ad:34:06:79:b9:a5:
         cf:38:e5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXL2BRDr2Wdm5PRaSgpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5
ZjVmZWIwHhcNMjYwMzI2MDQwMDU3WhcNMjYwMzI3MDQwMDU3WjAzMTEwLwYDVQQD
EyhhYWZkNmU1OTg5YjRlMzYwYWFkMGI4NzkzZTkwOGFiODAzMmFiYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAperYxNBaDg5ZKh2SRbEeBkZ1ewIH
NUejfXTeTuC77C4phvVW8hcxgc22fkcZzQ2Jk7wJ5oUYgQkYGo6jVJZI6G9Wi2p7
ohmWMAsfLQr/DEVx8uG6PlHiPE7sX3CHWW5e4dSUnK23kwy0uiwFjkD09wgfnf4+
oo4uQHTSYsQ/fiU62x1SSeae8ngagd4tYvqH/EPoRG7TczO6+KcKWf58jwcB7QpV
MduTR7eP57NHop46upkoHv0+I+pbjZxs6WxQ5yFkyBmSPKA1/jpTM03yKPU5Q46m
uQUA15hO2tErYZId6ePIqmsI2fF7sB5G8N5WYsSfMu/8d4yaOnk9sdyPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr9blmJtONgqtC4eT6QirgDKrs6MB8GA1UdIwQY
MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt
NmExZTBlYzcxZGE4LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4
LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY2W/gFT
91jTwMtP8oLblAE5Tdt52cNRsDpN5st8Icd5uR3mpisUcnuVx6pC87ilPjXr1/C+
4rDSzPW8TKOOC4enNq4ufavc12VF0dLQV+wZFPvZc7Otuf76ZWYkf0IQZCqqssEt
AI4Q+aN+2pQ/RsxRRgL7Z3TRzpf68aZ/vHnM7m/3pwP2ZT2Nt8SGNM8zkm1tcZ2+
zwqMJIPvVN4DwglRWtkxy5zXnQm/sno/uqyPyK4MSYRhIuPGzK1nROwtx9SVrxG8
xQhdMky1T816UMchBXlgmDHge3g9FP0YuAQTqOivEu7zKHdCSF0YID5gOBvM3Egl
rTQGebmlzzjlNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:55 2026 by rpki-client