Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          0QOewsWB2H/ApBMJpl+1UrNKC1pD6tYVrI/wL5KCL/E=
Subject key identifier:   56:90:5C:3C:94:F2:D0:FC:28:14:F2:8C:D5:5F:A1:92:50:4C:99:7B
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       019D38D29B700F0094BF9D16C19C0D703CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          1728
Signing time:             Sun 29 Mar 2026 09:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:19 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: cudfQJK501aIw2nSN0aHJBlgwVYmMuYS4RJJaWlLzqs=)
                          2: zjYqOLuQFupG2wqdmO2CYkpXQro.roa (hash: 7hKJfqNykVFaDvcY9bN4ItGluZTyIyU5j59eF7yp70U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:9b:70:0f:00:94:bf:9d:16:c1:9c:0d:70:3c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Mar 29 09:00:19 2026 GMT
            Not After : Mar 30 09:00:19 2026 GMT
        Subject: CN=56905c3c94f2d0fc2814f28cd55fa192504c997b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:d8:05:9e:ef:1f:d7:7b:49:01:7d:33:78:
                    1b:ea:37:e2:56:8e:1d:2f:c4:e3:cb:12:16:26:ae:
                    84:2d:23:8c:6d:fd:97:42:89:41:14:3d:16:ec:64:
                    69:94:b7:9c:d8:5f:ae:f0:f9:58:6c:25:ad:2d:14:
                    72:ac:26:46:e7:84:46:c0:ba:71:6c:aa:d4:9c:d4:
                    17:bd:27:3e:da:eb:65:ce:64:c9:f7:ec:fd:55:dc:
                    55:8c:5c:63:d9:92:d1:e6:d4:91:61:e0:c9:a9:6f:
                    5d:7a:61:96:63:19:7f:a8:0f:22:cd:3f:db:0b:49:
                    46:dc:49:13:97:7c:78:5d:ad:e5:4c:84:01:52:7b:
                    64:e4:7a:ac:0f:d4:dd:19:07:0d:6b:3d:b8:2e:b0:
                    62:96:3d:d3:0b:75:28:73:dc:4f:55:8f:c1:74:6c:
                    f3:dc:24:a9:1b:cb:fc:1a:85:cc:6d:a3:4b:24:14:
                    ef:c7:a3:16:65:dd:98:a4:a5:f1:22:43:d8:bd:74:
                    6e:d9:c7:ca:0b:4a:81:71:3a:18:7b:c1:97:50:72:
                    b6:ae:c1:bb:0b:fd:d2:9d:c3:94:10:7c:6f:62:4b:
                    57:df:5c:1d:b9:51:fd:fd:9d:25:a0:54:21:4e:45:
                    0d:db:67:41:07:3b:61:43:8b:83:20:16:b2:b2:96:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:90:5C:3C:94:F2:D0:FC:28:14:F2:8C:D5:5F:A1:92:50:4C:99:7B
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:45:3d:a3:17:bb:06:23:b8:85:2c:de:57:a0:02:03:47:16:
         1d:62:c4:f0:49:fc:79:df:5f:83:2c:50:05:2b:12:b8:07:b6:
         bc:5c:ce:df:9b:f0:b6:5a:a7:05:6b:ad:4a:4a:6b:35:78:23:
         c7:8e:f3:c8:fd:c8:d2:55:6e:04:9c:cf:c7:f8:aa:0b:ac:26:
         03:d3:6e:52:fe:b0:47:a1:36:c9:4a:d0:f5:d0:6a:9a:8d:78:
         77:11:55:6d:d4:e4:5b:21:c8:57:ff:55:be:37:c4:28:9f:ea:
         50:8c:df:f0:01:9f:33:b1:bf:95:5a:58:5a:65:ed:e2:00:57:
         9a:29:33:33:6f:4e:74:b2:63:62:6a:7c:22:1b:81:ed:a4:93:
         d8:8a:61:ff:43:10:57:f8:dc:f5:67:7f:e6:ca:f3:5d:16:a7:
         1a:6b:f4:c1:e3:0a:8d:8e:aa:99:4b:2f:74:49:c2:cc:45:c3:
         58:37:55:f4:d3:43:be:f4:81:e8:d5:a4:0d:6d:8d:51:2f:ed:
         a8:ed:1d:bc:ed:b8:67:68:f5:c2:ba:2f:89:21:2c:5d:23:b1:
         22:98:f4:69:69:39:90:2f:f3:78:a0:1f:ba:68:16:00:6c:1f:
         c9:e7:3a:62:27:55:6d:35:af:66:09:4e:0d:aa:33:19:77:9d:
         1f:a7:7a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ptwDwCUv50WwZwNcDzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi
NWI4NGYwHhcNMjYwMzI5MDkwMDE5WhcNMjYwMzMwMDkwMDE5WjAzMTEwLwYDVQQD
Eyg1NjkwNWMzYzk0ZjJkMGZjMjgxNGYyOGNkNTVmYTE5MjUwNGM5OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FvYBZ7vH9d7SQF9M3gb6jfiVo4d
L8TjyxIWJq6ELSOMbf2XQolBFD0W7GRplLec2F+u8PlYbCWtLRRyrCZG54RGwLpx
bKrUnNQXvSc+2utlzmTJ9+z9VdxVjFxj2ZLR5tSRYeDJqW9demGWYxl/qA8izT/b
C0lG3EkTl3x4Xa3lTIQBUntk5HqsD9TdGQcNaz24LrBilj3TC3Uoc9xPVY/BdGzz
3CSpG8v8GoXMbaNLJBTvx6MWZd2YpKXxIkPYvXRu2cfKC0qBcToYe8GXUHK2rsG7
C/3SncOUEHxvYktX31wduVH9/Z0loFQhTkUN22dBBzthQ4uDIBayspZcjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaQXDyU8tD8KBTyjNVfoZJQTJl7MB8GA1UdIwQY
MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt
NjA4MDk3ZjE4ZDgzLzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz
LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEU9oxe7
BiO4hSzeV6ACA0cWHWLE8En8ed9fgyxQBSsSuAe2vFzO35vwtlqnBWutSkprNXgj
x47zyP3I0lVuBJzPx/iqC6wmA9NuUv6wR6E2yUrQ9dBqmo14dxFVbdTkWyHIV/9V
vjfEKJ/qUIzf8AGfM7G/lVpYWmXt4gBXmikzM29OdLJjYmp8IhuB7aST2Iph/0MQ
V/jc9Wd/5srzXRanGmv0weMKjY6qmUsvdEnCzEXDWDdV9NNDvvSB6NWkDW2NUS/t
qO0dvO24Z2j1wroviSEsXSOxIpj0aWk5kC/zeKAfumgWAGwfyec6YidVbTWvZglO
DaozGXedH6d6KQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:34 2026 by rpki-client