Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          z49xeYeU9JhhZz8wY/dvy64MD1BdQyqfSp/Gl18DQf8=
Subject key identifier:   70:6B:8E:48:27:86:43:A9:2E:80:83:37:43:D3:C3:AD:E2:78:C9:B6
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       019CF986229FEE473635979289E92F2A420A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          1437
Signing time:             Tue 17 Mar 2026 02:00:43 +0000
Manifest this update:     Tue 17 Mar 2026 02:00:43 +0000
Manifest next update:     Wed 18 Mar 2026 02:00:43 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: /ysZ4E3W22te6Zxmaxq1qO3Y0FFSrdKcbEpeYHU/SuY=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:86:22:9f:ee:47:36:35:97:92:89:e9:2f:2a:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Mar 17 02:00:43 2026 GMT
            Not After : Mar 18 02:00:43 2026 GMT
        Subject: CN=706b8e48278643a92e80833743d3c3ade278c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:72:88:2f:af:c3:a3:a5:f9:bf:68:13:67:
                    9c:d4:69:66:fa:b6:b2:b7:0f:35:ef:8b:8a:db:6e:
                    01:86:d0:a4:0f:e1:cb:b6:18:c9:71:58:21:a4:5e:
                    8f:e0:9b:56:60:11:5d:4f:45:ba:7e:a2:1d:6d:c0:
                    ee:22:02:64:53:17:ed:67:13:04:88:c7:9e:aa:ae:
                    71:c0:fc:1e:5b:eb:97:65:8a:ea:42:27:bb:a6:78:
                    b2:34:fb:51:7b:56:b7:0f:0a:31:30:2e:d5:ef:9c:
                    1f:4b:86:f4:98:d6:c6:88:06:49:8d:35:29:ce:6c:
                    dc:eb:8b:ad:7d:29:76:06:69:af:59:de:f1:51:73:
                    71:6e:8b:b8:88:a3:13:4a:90:83:fc:34:e0:23:3a:
                    2b:e4:75:85:fc:75:ca:91:36:37:20:e4:2a:93:fe:
                    48:07:98:04:8c:8f:82:83:0c:7e:44:88:bd:96:cd:
                    0e:64:56:ac:69:f2:b0:07:cf:1e:48:d8:7b:29:36:
                    48:8b:24:57:20:98:32:52:7d:99:2e:22:96:55:15:
                    12:33:46:36:b4:43:27:e3:ad:8b:30:72:af:62:9c:
                    31:28:57:86:5c:6b:21:31:c5:db:04:8f:a0:a4:ea:
                    f6:47:ec:d1:86:87:8d:3a:63:df:a2:93:6c:44:5f:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:8E:48:27:86:43:A9:2E:80:83:37:43:D3:C3:AD:E2:78:C9:B6
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:69:e7:82:c8:8e:f9:25:28:7c:35:9b:9f:f6:f5:04:59:39:
         8a:05:ba:44:4e:18:c2:c8:d2:f2:14:fd:61:01:72:32:d5:b3:
         c8:a3:1d:79:3a:bd:4a:9c:14:8b:89:c7:af:f5:a7:c2:cc:4d:
         fe:2c:98:ad:d6:6b:4a:b5:f3:8c:7e:21:83:ce:d8:f6:9d:ea:
         71:7f:55:07:b6:05:ac:06:3f:b1:74:2e:a9:ee:f1:fe:3e:c0:
         1f:31:e2:51:eb:63:2d:6c:b1:9d:f4:5b:1d:4a:bb:61:9e:eb:
         9f:82:83:b5:97:7f:c4:8f:15:82:cb:4a:db:ab:6f:34:93:38:
         38:2e:e9:a7:02:08:42:69:6c:a2:61:d7:5f:71:d6:55:2f:18:
         51:8c:56:57:9a:a9:5a:63:3b:f3:5f:38:db:a5:76:60:44:bc:
         68:32:93:d7:b0:0e:17:aa:4c:2f:45:d7:1d:6d:9d:bb:af:d9:
         93:47:e4:44:51:27:51:f2:8a:8b:80:78:44:00:fa:18:d0:c2:
         d6:c1:a1:70:0e:e6:ec:a7:b9:41:f2:e6:49:f7:54:b0:94:1b:
         15:c9:e2:80:c2:3a:0c:79:19:d8:30:cb:8c:4f:d4:fd:66:4c:
         86:f2:d2:18:49:c3:8d:88:70:d9:62:1e:98:9f:25:f9:e4:55:
         c6:ab:49:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZz5hiKf7kc2NZeSiekvKkIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjYwMzE3MDIwMDQzWhcNMjYwMzE4MDIwMDQzWjAzMTEwLwYDVQQD
Eyg3MDZiOGU0ODI3ODY0M2E5MmU4MDgzMzc0M2QzYzNhZGUyNzhjOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1ByiC+vw6Ol+b9oE2ec1Glm+ray
tw8174uK224BhtCkD+HLthjJcVghpF6P4JtWYBFdT0W6fqIdbcDuIgJkUxftZxME
iMeeqq5xwPweW+uXZYrqQie7pniyNPtRe1a3DwoxMC7V75wfS4b0mNbGiAZJjTUp
zmzc64utfSl2BmmvWd7xUXNxbou4iKMTSpCD/DTgIzor5HWF/HXKkTY3IOQqk/5I
B5gEjI+Cgwx+RIi9ls0OZFasafKwB88eSNh7KTZIiyRXIJgyUn2ZLiKWVRUSM0Y2
tEMn462LMHKvYpwxKFeGXGshMcXbBI+gpOr2R+zRhoeNOmPfopNsRF8AQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHBrjkgnhkOpLoCDN0PTw63ieMm2MB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA1L2FmM2Q4MS0wMDQ3LTQxM2MtOTFmNC0wNDcwYjRiYjMw
ZGIvMS8xLUhtWWpnOUpseG95YjBHZVhQckxfZHpKay1jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGnn
gsiO+SUofDWbn/b1BFk5igW6RE4YwsjS8hT9YQFyMtWzyKMdeTq9SpwUi4nHr/Wn
wsxN/iyYrdZrSrXzjH4hg87Y9p3qcX9VB7YFrAY/sXQuqe7x/j7AHzHiUetjLWyx
nfRbHUq7YZ7rn4KDtZd/xI8VgstK26tvNJM4OC7ppwIIQmlsomHXX3HWVS8YUYxW
V5qpWmM7818426V2YES8aDKT17AOF6pML0XXHW2du6/Zk0fkRFEnUfKKi4B4RAD6
GNDC1sGhcA7m7Ke5QfLmSfdUsJQbFcnigMI6DHkZ2DDLjE/U/WZMhvLSGEnDjYhw
2WIemJ8l+eRVxqtJMw==
-----END CERTIFICATE-----
Generated at Tue Mar 17 06:55:28 2026 by rpki-client