Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          HoeSQJSwgee1fwHL6mj8aKz93xIjP449Qdi3n+T7FFA=
Subject key identifier:   93:F5:C2:14:E3:B4:71:A7:20:7D:E1:E6:6D:E9:C2:5B:33:5B:06:4E
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019CE3DA5E514C456E24D33556179883DC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          1869
Signing time:             Thu 12 Mar 2026 21:01:04 +0000
Manifest this update:     Thu 12 Mar 2026 21:01:04 +0000
Manifest next update:     Fri 13 Mar 2026 21:01:04 +0000
Files and hashes:         1: GNmDEXAk_Y2HliZsrfR_YJwZxS4.roa (hash: q5k9K7OPxEr/ETIohhVcMQ1Er7f/1cnP4+q2GfC1RtE=)
                          2: TKzYD4ABjrCZqLSP2_fxbuEK6DU.asa (hash: uH8L8Se8kXstdbYk1z2gKFxuBhq9aZRv/T3RSW3KkhU=)
                          3: ZbE102VRAczBwFbNm6WP3CfOeC0.roa (hash: rVoFQaYjG4H+zjgihkyFbOYOQwXJLuimbNMp54cfD9I=)
                          4: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (hash: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek=)
                          5: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: 5ulR7OxKjB8b0zUcX3mVIiQjBdhpDp95p2HoC3ovL1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:5e:51:4c:45:6e:24:d3:35:56:17:98:83:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Mar 12 21:01:04 2026 GMT
            Not After : Mar 13 21:01:04 2026 GMT
        Subject: CN=93f5c214e3b471a7207de1e66de9c25b335b064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:b0:cb:b9:4e:9c:f0:83:44:23:ef:70:53:
                    87:79:f7:70:dc:fd:a6:79:1f:b5:6a:62:b2:23:a4:
                    d0:3c:a4:b4:ec:57:66:5d:61:4b:74:88:c1:32:d0:
                    09:c1:d8:25:36:6a:d2:44:08:8c:66:ea:93:8a:0a:
                    17:5f:a9:01:64:9d:58:17:af:39:96:b8:48:1f:55:
                    be:b2:34:0f:3a:21:ee:fe:e9:6d:a4:4c:1c:0e:81:
                    90:d5:8f:0c:05:03:0c:bd:5b:24:af:3a:73:94:d9:
                    d0:15:af:92:00:0a:2d:9f:2d:42:1e:20:f1:8c:f0:
                    f3:2e:84:42:8e:b7:a9:62:af:b8:ef:fe:dd:d7:d3:
                    07:c6:87:65:e1:fa:d1:6a:16:23:69:a1:6a:1c:82:
                    8b:c9:8c:5a:e1:e6:01:1b:84:07:c0:3b:8a:7c:97:
                    87:4b:fb:f2:d9:71:84:28:1b:5a:51:f9:d7:b9:0b:
                    c4:17:eb:08:eb:70:35:90:62:c7:21:6f:51:52:9c:
                    e3:81:01:34:16:02:df:a0:6b:b7:44:f0:3c:3b:5a:
                    24:10:99:82:8a:66:05:0c:0a:78:cd:f5:d9:02:40:
                    42:29:34:0d:ff:77:14:65:21:b5:fd:9a:1d:80:a8:
                    30:0e:15:13:86:b8:60:f7:5e:b4:ac:8a:a9:9d:bc:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:C2:14:E3:B4:71:A7:20:7D:E1:E6:6D:E9:C2:5B:33:5B:06:4E
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:89:e2:dd:e5:57:cd:d0:7b:89:49:0b:08:6e:1c:55:d8:
         ea:dc:ad:b0:15:62:84:39:50:66:12:2b:4e:06:f0:5f:e1:4b:
         47:cd:5c:76:4d:0f:6b:66:08:01:91:a5:a6:31:a7:70:e4:fd:
         47:68:8b:a1:a5:bd:eb:6f:22:54:b5:c6:63:80:84:3b:43:2f:
         74:1f:bd:4a:99:61:73:f3:61:0c:a7:be:6c:0b:25:00:94:6f:
         8d:95:00:85:11:07:49:3c:6f:75:50:fe:57:34:be:52:38:5a:
         db:83:96:1d:49:06:c8:99:99:5c:ec:33:4d:35:59:6b:07:52:
         7b:df:a7:0d:43:39:96:87:3f:40:e1:72:ad:ad:2c:d8:ef:f0:
         f5:7c:8d:d6:81:10:bd:8d:f9:53:23:e6:bb:49:72:a1:c7:db:
         79:d1:d9:11:8b:f7:92:05:c7:4f:ee:de:80:39:38:5b:2d:77:
         f5:ef:a2:81:d1:f7:05:38:27:27:aa:5d:52:06:e4:ad:da:33:
         1b:90:ae:4b:5f:30:b6:46:d4:1b:9b:f5:3e:e4:1c:96:55:35:
         4b:26:c7:de:73:0e:18:81:d9:a9:3b:32:4a:fc:e6:a8:97:ea:
         29:4d:66:03:11:9b:dd:66:f1:76:ed:32:a5:ea:5a:9b:39:55:
         e5:a0:91:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2l5RTEVuJNM1VheYg9wAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj
NWUzZmYwHhcNMjYwMzEyMjEwMTA0WhcNMjYwMzEzMjEwMTA0WjAzMTEwLwYDVQQD
Eyg5M2Y1YzIxNGUzYjQ3MWE3MjA3ZGUxZTY2ZGU5YzI1YjMzNWIwNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V+wy7lOnPCDRCPvcFOHefdw3P2m
eR+1amKyI6TQPKS07FdmXWFLdIjBMtAJwdglNmrSRAiMZuqTigoXX6kBZJ1YF685
lrhIH1W+sjQPOiHu/ultpEwcDoGQ1Y8MBQMMvVskrzpzlNnQFa+SAAotny1CHiDx
jPDzLoRCjrepYq+47/7d19MHxodl4frRahYjaaFqHIKLyYxa4eYBG4QHwDuKfJeH
S/vy2XGEKBtaUfnXuQvEF+sI63A1kGLHIW9RUpzjgQE0FgLfoGu3RPA8O1okEJmC
imYFDAp4zfXZAkBCKTQN/3cUZSG1/ZodgKgwDhUThrhg9160rIqpnbz15wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP1whTjtHGnIH3h5m3pwlszWwZOMB8GA1UdIwQY
MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt
ZWE0NjljODYwZGM2LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2
LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbmJ4t3l
V83Qe4lJCwhuHFXY6tytsBVihDlQZhIrTgbwX+FLR81cdk0Pa2YIAZGlpjGncOT9
R2iLoaW9628iVLXGY4CEO0MvdB+9Splhc/NhDKe+bAslAJRvjZUAhREHSTxvdVD+
VzS+Ujha24OWHUkGyJmZXOwzTTVZawdSe9+nDUM5loc/QOFyra0s2O/w9XyN1oEQ
vY35UyPmu0lyocfbedHZEYv3kgXHT+7egDk4Wy139e+igdH3BTgnJ6pdUgbkrdoz
G5CuS18wtkbUG5v1PuQcllU1SybH3nMOGIHZqTsySvzmqJfqKU1mAxGb3Wbxdu0y
pepamzlV5aCRAA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:19:07 2026 by rpki-client