Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          yJXrgjhIS17NsouzAMAI0JuSo3ybrEnTRqeMpdjj1wk=
Subject key identifier:   47:9F:FB:D1:B3:47:D0:2C:93:7E:A9:C7:14:38:74:10:9C:30:10:82
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       019D37C101214A2A633CEDBABD67B26DB847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 04:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:28 +0000
Files and hashes:         1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: lq3ZVlny0tH8vJtLvjMYCJmG68QadDzUEZcRpEO9jrA=)
                          2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
                          3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
                          4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
                          5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:01:21:4a:2a:63:3c:ed:ba:bd:67:b2:6d:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Mar 29 04:01:28 2026 GMT
            Not After : Mar 30 04:01:28 2026 GMT
        Subject: CN=479ffbd1b347d02c937ea9c7143874109c301082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:07:08:38:4c:c3:cf:77:fd:3b:75:a7:11:
                    00:d3:08:22:b7:66:b7:1e:f7:ae:fa:b7:d4:56:51:
                    8c:0c:13:d1:f5:32:b4:7b:a2:a6:7f:37:31:e8:4b:
                    3a:88:73:ee:e1:3b:44:b8:14:fc:00:45:b8:e6:2a:
                    85:16:b7:a7:97:7f:bf:62:c1:44:ed:f1:c0:93:a5:
                    fd:d3:b1:6d:c1:6c:88:4b:86:58:3b:c1:22:30:7e:
                    f5:66:dc:4a:30:e0:4e:4d:f9:bb:3b:28:d2:db:f6:
                    04:c8:f8:2d:c1:7f:72:8f:fa:b6:a6:ac:d7:a8:19:
                    ed:52:b6:44:6b:69:dc:7b:0e:d9:f1:fe:f1:62:7f:
                    b6:39:08:79:5d:09:70:b1:d9:46:17:8d:c8:90:58:
                    94:62:45:d0:f7:e8:57:55:4f:1a:6e:7e:a1:c9:1f:
                    d7:2d:19:f9:a5:c3:57:21:44:bd:ec:27:ca:76:a3:
                    15:77:ec:ad:fa:40:57:eb:15:03:80:3b:e3:6f:37:
                    36:54:53:94:c2:39:dc:8a:34:d5:ae:0e:e4:2f:e8:
                    f0:bd:c7:2b:37:1a:84:fc:c4:9f:c3:f2:95:8b:5f:
                    fb:5a:70:c0:b8:09:0e:14:c7:cd:49:0b:c2:32:f1:
                    65:7d:d1:7f:57:0c:3a:d9:51:d5:ed:c5:b9:23:e8:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:FB:D1:B3:47:D0:2C:93:7E:A9:C7:14:38:74:10:9C:30:10:82
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:2f:fe:2d:5d:5e:95:b7:06:31:0a:25:4d:23:6e:76:54:
         73:33:27:fb:98:01:de:b6:9e:c0:f4:9f:41:fc:fb:2d:fb:f9:
         ef:c5:83:0c:70:09:cc:40:42:13:6a:fe:b3:34:8b:63:c9:78:
         e2:5c:29:e7:64:40:96:d5:d5:27:5c:51:74:63:eb:3e:65:4d:
         8e:74:42:e8:87:1d:4e:b4:77:65:45:05:57:af:89:85:e2:79:
         a7:ce:60:bb:b1:27:91:34:00:a2:16:bb:18:28:83:7b:81:d3:
         1a:54:5c:c7:78:e1:f8:9f:53:fb:f1:83:fa:81:6c:d4:5f:ff:
         63:d5:32:6c:d0:15:d8:88:c2:3f:a0:ca:a4:ef:32:b3:0a:92:
         9e:3b:15:98:01:d3:2c:21:6b:91:d8:8c:7c:ef:bc:ce:06:a1:
         db:c8:3e:f4:b8:bb:80:f9:66:fa:8f:77:73:9c:d8:68:c8:3c:
         e8:ee:da:15:f1:88:b9:45:a2:4e:dd:0e:00:12:d2:9c:c1:7c:
         36:3c:16:e3:aa:81:39:1e:c8:89:4f:d7:2b:fb:d8:d3:d7:78:
         a1:ba:07:47:5b:a1:df:80:cb:10:b7:d7:97:26:f1:42:15:ee:
         46:a4:05:53:39:92:e2:e1:0f:b3:d6:15:84:07:f5:3a:ec:a6:
         9d:fd:9f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQEhSipjPO26vWeybbhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk
M2UzNWUwHhcNMjYwMzI5MDQwMTI4WhcNMjYwMzMwMDQwMTI4WjAzMTEwLwYDVQQD
Eyg0NzlmZmJkMWIzNDdkMDJjOTM3ZWE5YzcxNDM4NzQxMDljMzAxMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHYHCDhMw893/Tt1pxEA0wgit2a3
Hveu+rfUVlGMDBPR9TK0e6Kmfzcx6Es6iHPu4TtEuBT8AEW45iqFFrenl3+/YsFE
7fHAk6X907FtwWyIS4ZYO8EiMH71ZtxKMOBOTfm7OyjS2/YEyPgtwX9yj/q2pqzX
qBntUrZEa2ncew7Z8f7xYn+2OQh5XQlwsdlGF43IkFiUYkXQ9+hXVU8abn6hyR/X
LRn5pcNXIUS97CfKdqMVd+yt+kBX6xUDgDvjbzc2VFOUwjncijTVrg7kL+jwvccr
NxqE/MSfw/KVi1/7WnDAuAkOFMfNSQvCMvFlfdF/Vww62VHV7cW5I+gwnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEef+9GzR9Ask36pxxQ4dBCcMBCCMB8GA1UdIwQY
MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt
ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4
LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1kv/i1d
XpW3BjEKJU0jbnZUczMn+5gB3raewPSfQfz7Lfv578WDDHAJzEBCE2r+szSLY8l4
4lwp52RAltXVJ1xRdGPrPmVNjnRC6IcdTrR3ZUUFV6+JheJ5p85gu7EnkTQAoha7
GCiDe4HTGlRcx3jh+J9T+/GD+oFs1F//Y9UybNAV2IjCP6DKpO8yswqSnjsVmAHT
LCFrkdiMfO+8zgah28g+9Li7gPlm+o93c5zYaMg86O7aFfGIuUWiTt0OABLSnMF8
NjwW46qBOR7IiU/XK/vY09d4oboHR1uh34DLELfXlybxQhXuRqQFUzmS4uEPs9YV
hAf1Ouymnf2f9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:12 2026 by rpki-client