Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          5uGZpVe/fc1YpHGkUPP9R1E7oGiR8dvTW6OND1a8npw=
Subject key identifier:   C3:5A:FF:1F:05:53:F3:FB:DE:86:7B:78:CB:65:08:7C:C0:DC:11:F7
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019D27E05B486530E81893ADEF1FEB493024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 02:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:47 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: tUW0++YxrAvMBPAdewICE4fSTQl19cX+kc6mP4HY1Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:5b:48:65:30:e8:18:93:ad:ef:1f:eb:49:30:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Mar 26 02:01:47 2026 GMT
            Not After : Mar 27 02:01:47 2026 GMT
        Subject: CN=c35aff1f0553f3fbde867b78cb65087cc0dc11f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:4f:b9:24:0f:cf:85:a5:18:61:aa:69:20:
                    aa:79:23:30:07:fe:57:42:40:64:6c:8a:8b:f9:fe:
                    f9:cc:b1:8b:ff:f5:3f:8c:74:cb:e2:78:df:24:0c:
                    fb:5c:10:6e:1d:4b:80:bc:fd:c9:fd:52:54:00:92:
                    29:fa:1a:b0:4d:99:71:5d:43:c4:aa:4b:f7:4f:ed:
                    90:4f:6b:d3:ef:03:b4:ef:d9:59:ce:31:8a:2e:2c:
                    76:f4:f9:7f:43:ee:be:65:38:95:4b:69:ce:95:34:
                    0e:d2:69:01:9a:b5:d9:4b:cf:0c:82:71:f8:1f:d9:
                    17:b6:00:c9:55:c5:8f:bb:53:4b:9d:8c:bf:e6:ef:
                    e6:c1:2c:3b:49:18:03:08:8f:e8:2c:39:cc:85:35:
                    fd:76:e6:c9:72:af:8d:a5:77:38:68:85:d2:37:d6:
                    39:78:0a:50:b7:ff:79:63:62:9b:1d:70:4f:38:df:
                    b2:c5:0c:ee:7f:4a:5a:91:d6:f2:ae:a9:a9:6b:f5:
                    e3:5c:55:22:e6:ca:7c:96:72:a1:91:28:4e:55:5f:
                    a0:ad:50:6c:ca:61:a6:85:c5:c5:67:a3:f2:4a:80:
                    34:6d:db:74:4a:21:cf:a7:81:f2:18:d8:cd:a6:49:
                    79:d3:cf:c3:5c:d0:94:eb:13:da:54:dd:72:38:91:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5A:FF:1F:05:53:F3:FB:DE:86:7B:78:CB:65:08:7C:C0:DC:11:F7
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:c0:96:14:dd:10:01:12:8e:1e:b2:fd:13:a6:8e:01:16:
         39:ce:3f:d3:ee:58:3e:96:8a:3a:f9:9d:40:63:b4:04:ab:f4:
         b1:90:1b:95:2d:0f:26:b4:1d:29:cb:a5:d6:6f:31:3b:e3:19:
         b8:1b:e8:07:c0:c4:75:38:df:75:6e:fb:67:db:6a:aa:e6:e6:
         ef:fb:e3:8f:9d:36:c9:55:5e:c4:53:b2:41:c0:93:c0:73:98:
         5b:f0:0d:8e:00:b6:f7:44:81:98:6b:3d:34:1f:fc:cd:e9:8a:
         0e:b7:88:bf:36:17:9b:76:e2:82:b2:a2:bc:da:24:cd:4c:c0:
         f9:0a:66:54:0a:35:6e:e4:d3:da:dd:0f:56:7c:18:a6:06:1a:
         8d:73:20:86:b5:fe:ea:e2:0d:aa:f9:40:e1:09:a9:d0:59:45:
         7d:ae:7e:89:36:8b:f6:88:61:f8:7a:1c:87:fb:4e:a9:8b:19:
         52:df:16:b5:e3:5a:34:ca:de:f9:3c:cd:92:4d:c7:e5:21:29:
         6c:e6:8c:da:79:14:2e:f4:66:0b:4d:4b:f0:2e:ab:ec:e5:62:
         49:a6:a8:15:d6:27:58:6b:96:6f:91:c7:c1:22:ce:8a:3d:4f:
         fe:63:97:e4:d9:fd:d9:3c:eb:5f:f0:d1:33:3b:4a:be:3e:d9:
         e3:73:30:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4FtIZTDoGJOt7x/rSTAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjYwMzI2MDIwMTQ3WhcNMjYwMzI3MDIwMTQ3WjAzMTEwLwYDVQQD
EyhjMzVhZmYxZjA1NTNmM2ZiZGU4NjdiNzhjYjY1MDg3Y2MwZGMxMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP5PuSQPz4WlGGGqaSCqeSMwB/5X
QkBkbIqL+f75zLGL//U/jHTL4njfJAz7XBBuHUuAvP3J/VJUAJIp+hqwTZlxXUPE
qkv3T+2QT2vT7wO079lZzjGKLix29Pl/Q+6+ZTiVS2nOlTQO0mkBmrXZS88MgnH4
H9kXtgDJVcWPu1NLnYy/5u/mwSw7SRgDCI/oLDnMhTX9dubJcq+NpXc4aIXSN9Y5
eApQt/95Y2KbHXBPON+yxQzuf0pakdbyrqmpa/XjXFUi5sp8lnKhkShOVV+grVBs
ymGmhcXFZ6PySoA0bdt0SiHPp4HyGNjNpkl508/DXNCU6xPaVN1yOJHmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNa/x8FU/P73oZ7eMtlCHzA3BH3MB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl3AlhTd
EAESjh6y/ROmjgEWOc4/0+5YPpaKOvmdQGO0BKv0sZAblS0PJrQdKcul1m8xO+MZ
uBvoB8DEdTjfdW77Z9tqqubm7/vjj502yVVexFOyQcCTwHOYW/ANjgC290SBmGs9
NB/8zemKDreIvzYXm3bigrKivNokzUzA+QpmVAo1buTT2t0PVnwYpgYajXMghrX+
6uINqvlA4Qmp0FlFfa5+iTaL9ohh+Hoch/tOqYsZUt8WteNaNMre+TzNkk3H5SEp
bOaM2nkULvRmC01L8C6r7OViSaaoFdYnWGuWb5HHwSLOij1P/mOX5Nn92TzrX/DR
MztKvj7Z43MwmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:22 2026 by rpki-client