Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          h7kVOBQGQDz6f2pHntKuXfx+X6lRoBGJJYR9QAIn5do=
Subject key identifier:   77:F5:16:01:F7:BF:4A:11:37:CE:B5:5D:14:04:55:0B:DE:5F:95:3B
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019D3865F363C2C72BD60F3C747820D0750E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          189E
Signing time:             Sun 29 Mar 2026 07:01:38 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:38 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:38 +0000
Files and hashes:         1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: K2B31lSxI3m/L3P1xssQJf7ENt6uUXR5b6DXihJUAeg=)
                          2: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          3: fa7QQf3mwNaqx6Q9YVB4JOEPT1Y.roa (hash: cuDfOcc4rXjt55ZYwZL2MoLNfkQ/Mx73QisLDCI3qEU=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:f3:63:c2:c7:2b:d6:0f:3c:74:78:20:d0:75:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Mar 29 07:01:38 2026 GMT
            Not After : Mar 30 07:01:38 2026 GMT
        Subject: CN=77f51601f7bf4a1137ceb55d1404550bde5f953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:6a:41:44:5c:80:8c:0c:08:b2:c7:df:d9:
                    b5:5b:2e:09:98:89:4b:c4:cb:ec:76:b7:b9:49:24:
                    70:45:7c:02:30:1a:13:25:a0:68:6c:d3:58:20:08:
                    e4:06:ad:c1:17:69:31:8d:f7:69:05:59:bc:69:dc:
                    7c:28:1f:cc:ed:58:78:6d:61:25:9d:9b:74:16:67:
                    81:de:cd:5e:d6:69:f5:f1:27:81:bb:bb:1f:8a:6d:
                    e9:67:3b:a6:39:04:ae:25:a8:81:90:3d:5d:33:98:
                    30:93:00:c0:ca:9f:63:31:55:80:bc:32:0e:02:9b:
                    2a:31:8d:ee:1b:1e:3f:a8:2c:b9:3d:04:86:13:30:
                    07:ca:f6:b0:97:69:6a:bd:1b:8c:05:ff:f7:26:52:
                    04:16:7d:6b:1b:db:8a:3a:cb:97:59:06:a2:d0:7b:
                    3d:45:39:d7:79:ca:41:ae:78:02:11:f9:8f:0f:fb:
                    e8:75:9a:20:22:99:8c:cd:89:60:94:0b:89:de:3e:
                    e9:0d:19:ff:81:d9:06:39:87:0a:f8:2d:49:7f:95:
                    68:19:bb:79:07:18:6d:b0:4f:a0:39:d9:19:27:bd:
                    03:59:fb:9e:34:a8:f4:84:31:f6:16:e5:59:f4:d0:
                    ec:fe:3e:4d:c6:bd:df:e0:5f:f4:cf:43:19:55:d0:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:16:01:F7:BF:4A:11:37:CE:B5:5D:14:04:55:0B:DE:5F:95:3B
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a6:09:11:90:c7:44:70:7f:50:7e:67:b3:5e:a1:52:28:e8:
         7c:77:79:9b:75:90:1a:7b:c4:a9:2b:a4:38:56:ed:75:6e:51:
         4a:da:f4:7f:c5:d3:9a:25:d7:a2:b5:85:24:6a:57:1b:92:d7:
         dd:8f:5a:68:84:73:58:0d:00:1c:a8:45:2e:db:e9:26:66:bf:
         02:82:c6:63:da:6f:f2:0e:09:ab:7b:d4:42:e9:db:2b:c5:20:
         d6:3c:c8:82:04:aa:a3:15:9d:52:1b:66:76:ab:82:15:e6:b2:
         01:12:6b:b3:cd:a2:4b:c7:b5:8b:9a:21:6f:2d:3c:07:2f:53:
         44:3b:5f:7e:f3:9a:e4:bf:84:0c:8b:b3:05:b6:05:88:06:57:
         65:8d:5d:8b:cc:59:d1:9b:c5:ba:7d:c2:38:3d:1a:25:0d:cb:
         1e:3b:de:fb:c5:f1:eb:83:be:88:42:d5:1f:db:08:c7:fb:5b:
         97:f9:0a:98:fe:ae:18:34:36:6a:09:d5:20:96:f1:23:ce:7d:
         46:a9:02:2a:cb:56:9f:d5:a6:58:bc:79:f0:d0:bc:3e:f9:3f:
         fe:ce:43:4c:12:6c:41:dc:5b:7f:11:57:92:2e:2e:e3:5e:aa:
         3b:4f:59:1d:16:82:6e:38:93:c1:11:e6:9c:c6:59:5f:67:c1:
         cd:ee:bc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZfNjwscr1g88dHgg0HUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwMzI5MDcwMTM4WhcNMjYwMzMwMDcwMTM4WjAzMTEwLwYDVQQD
Eyg3N2Y1MTYwMWY3YmY0YTExMzdjZWI1NWQxNDA0NTUwYmRlNWY5NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv65qQURcgIwMCLLH39m1Wy4JmIlL
xMvsdre5SSRwRXwCMBoTJaBobNNYIAjkBq3BF2kxjfdpBVm8adx8KB/M7Vh4bWEl
nZt0FmeB3s1e1mn18SeBu7sfim3pZzumOQSuJaiBkD1dM5gwkwDAyp9jMVWAvDIO
ApsqMY3uGx4/qCy5PQSGEzAHyvawl2lqvRuMBf/3JlIEFn1rG9uKOsuXWQai0Hs9
RTnXecpBrngCEfmPD/vodZogIpmMzYlglAuJ3j7pDRn/gdkGOYcK+C1Jf5VoGbt5
BxhtsE+gOdkZJ70DWfueNKj0hDH2FuVZ9NDs/j5Nxr3f4F/0z0MZVdDzDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf1FgH3v0oRN861XRQEVQveX5U7MB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqYJEZDH
RHB/UH5ns16hUijofHd5m3WQGnvEqSukOFbtdW5RStr0f8XTmiXXorWFJGpXG5LX
3Y9aaIRzWA0AHKhFLtvpJma/AoLGY9pv8g4Jq3vUQunbK8Ug1jzIggSqoxWdUhtm
dquCFeayARJrs82iS8e1i5ohby08By9TRDtffvOa5L+EDIuzBbYFiAZXZY1di8xZ
0ZvFun3COD0aJQ3LHjve+8Xx64O+iELVH9sIx/tbl/kKmP6uGDQ2agnVIJbxI859
RqkCKstWn9WmWLx58NC8Pvk//s5DTBJsQdxbfxFXki4u416qO09ZHRaCbjiTwRHm
nMZZX2fBze68tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:19 2026 by rpki-client