Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          HNM8ZA636cnWdDAQ6w4zpmIWo9JOcd59jfO3j8sat1w=
Subject key identifier:   18:B4:F1:06:53:0F:AC:4C:83:4B:FB:B2:C5:68:A0:01:AE:11:99:81
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       019D386644221661E8BBB680FF237CA7CB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          164B
Signing time:             Sun 29 Mar 2026 07:01:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:59 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:59 +0000
Files and hashes:         1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: lDkV0cHJJVrU4S28InK2/6x8Y5exC49H+MicFKwESoo=)
                          2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:44:22:16:61:e8:bb:b6:80:ff:23:7c:a7:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Mar 29 07:01:59 2026 GMT
            Not After : Mar 30 07:01:59 2026 GMT
        Subject: CN=18b4f106530fac4c834bfbb2c568a001ae119981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:42:fb:04:67:4f:4d:db:62:f8:0a:7f:ab:
                    bd:c7:8a:ec:03:4c:03:2e:d4:d4:eb:a7:49:a7:45:
                    a5:99:71:c1:03:a7:38:5b:0e:1c:56:80:87:c2:c6:
                    d3:30:48:c5:53:e7:b2:bb:19:df:90:cc:d1:d2:52:
                    6e:cf:1e:51:85:24:ed:3f:65:ee:f5:f6:82:17:ec:
                    00:10:35:b1:f2:3d:55:22:8b:b9:27:57:1d:8a:86:
                    b2:df:e8:c5:88:15:0b:0a:7b:54:02:9b:ee:3e:88:
                    76:b3:f9:6b:d2:d2:05:a5:bc:31:24:88:8f:0e:47:
                    7f:3c:30:b1:21:33:72:bb:30:06:51:ca:68:7a:ca:
                    ea:8d:f5:2d:d7:5a:1a:37:0e:c8:38:3c:95:be:69:
                    b8:6d:6e:49:0f:c8:ed:3f:ff:d5:1a:48:dd:c1:b7:
                    97:bc:44:28:1b:6d:ee:de:c4:9d:20:b2:42:ee:c1:
                    01:8c:ef:ac:49:09:b8:de:2a:2d:59:d4:71:5d:cd:
                    5d:45:0b:4e:70:cc:77:11:00:c2:80:e0:6d:2a:f1:
                    29:ee:cb:07:18:f3:66:2a:90:ce:52:0b:40:b1:62:
                    e2:b5:81:61:5e:27:b2:a5:be:42:82:5a:08:28:30:
                    89:09:19:2c:0e:51:55:e6:c1:cf:c8:90:23:2a:0c:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:F1:06:53:0F:AC:4C:83:4B:FB:B2:C5:68:A0:01:AE:11:99:81
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:71:27:e3:01:27:93:fb:3c:df:be:1b:f8:6f:ee:15:07:c4:
         3c:e2:de:53:55:1b:cc:31:09:ba:55:3a:4d:f4:c0:90:e6:6e:
         be:82:bf:06:91:9a:06:37:18:b5:89:58:7b:1f:f9:b6:01:e1:
         20:d3:68:c1:3a:1e:f7:c3:2c:a8:9d:5f:a3:8c:36:ed:dd:b1:
         d0:83:ec:1e:2b:8e:da:e6:c8:90:6f:bb:50:31:30:6c:7d:3a:
         0d:cc:57:29:f0:c5:8e:25:68:b4:23:47:cb:12:7a:b7:c0:a0:
         ac:96:71:24:e4:3e:36:b8:a3:12:65:d1:0a:dd:99:57:e9:88:
         52:a0:2b:09:f7:14:9b:8a:84:5f:fe:0d:c4:ad:23:53:51:fc:
         94:2a:ad:d4:bc:ee:58:b8:63:b5:9d:c2:9f:51:de:dc:11:7c:
         3b:86:c5:b4:9e:09:cd:ca:f0:8b:15:64:bd:61:db:9a:81:68:
         90:3a:a5:bb:0e:5a:ea:35:27:43:78:e9:93:46:56:19:b2:34:
         46:93:1e:50:38:46:fb:2e:22:8b:ce:6b:5c:4b:6c:e2:ec:96:
         60:f3:8a:b5:d0:73:51:79:55:e0:41:ec:e6:a8:2f:6b:e9:64:
         8b:5e:2d:69:d8:0e:e9:5c:ce:c9:db:9a:33:d0:15:54:85:0c:
         a7:2e:ee:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkQiFmHou7aA/yN8p8uIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjYwMzI5MDcwMTU5WhcNMjYwMzMwMDcwMTU5WjAzMTEwLwYDVQQD
EygxOGI0ZjEwNjUzMGZhYzRjODM0YmZiYjJjNTY4YTAwMWFlMTE5OTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnpC+wRnT03bYvgKf6u9x4rsA0wD
LtTU66dJp0WlmXHBA6c4Ww4cVoCHwsbTMEjFU+eyuxnfkMzR0lJuzx5RhSTtP2Xu
9faCF+wAEDWx8j1VIou5J1cdioay3+jFiBULCntUApvuPoh2s/lr0tIFpbwxJIiP
Dkd/PDCxITNyuzAGUcpoesrqjfUt11oaNw7IODyVvmm4bW5JD8jtP//VGkjdwbeX
vEQoG23u3sSdILJC7sEBjO+sSQm43iotWdRxXc1dRQtOcMx3EQDCgOBtKvEp7ssH
GPNmKpDOUgtAsWLitYFhXieypb5CgloIKDCJCRksDlFV5sHPyJAjKgxL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi08QZTD6xMg0v7ssVooAGuEZmBMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXEn4wEn
k/s8374b+G/uFQfEPOLeU1UbzDEJulU6TfTAkOZuvoK/BpGaBjcYtYlYex/5tgHh
INNowToe98MsqJ1fo4w27d2x0IPsHiuO2ubIkG+7UDEwbH06DcxXKfDFjiVotCNH
yxJ6t8CgrJZxJOQ+NrijEmXRCt2ZV+mIUqArCfcUm4qEX/4NxK0jU1H8lCqt1Lzu
WLhjtZ3Cn1He3BF8O4bFtJ4JzcrwixVkvWHbmoFokDqluw5a6jUnQ3jpk0ZWGbI0
RpMeUDhG+y4ii85rXEts4uyWYPOKtdBzUXlV4EHs5qgva+lki14tadgO6VzOydua
M9AVVIUMpy7uAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:45 2026 by rpki-client