Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          tOJg6NcE2qFm+bNTnW3PVH1QCOtoz83AhoPRxKdZt4g=
Subject key identifier:   75:E4:CE:8A:E3:9C:7E:F1:AF:FD:4B:54:A4:4F:89:3F:30:F7:F4:A1
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019D382E42699776E317EE526C6F9AFB908E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          072B
Signing time:             Sun 29 Mar 2026 06:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:48 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: 4D5zeLWmrkV5l9yv5kBJqT9LO/mQmT0UehHR+U2HxmM=)
                          2: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:42:69:97:76:e3:17:ee:52:6c:6f:9a:fb:90:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Mar 29 06:00:48 2026 GMT
            Not After : Mar 30 06:00:48 2026 GMT
        Subject: CN=75e4ce8ae39c7ef1affd4b54a44f893f30f7f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:3e:8d:dd:68:63:e2:68:b2:0e:e1:4e:27:
                    dc:f6:cf:ed:af:c0:ba:34:21:ac:dd:e8:27:0b:a1:
                    be:73:7e:98:97:6c:61:9a:fe:ab:2e:24:ca:3a:f4:
                    ea:e9:4d:ab:90:3a:6a:bd:e6:7d:17:4f:f7:7e:fa:
                    fc:f9:f2:24:01:d8:12:16:04:03:0c:25:b5:2a:3c:
                    e6:7f:58:54:c3:41:b5:b4:a2:f9:12:3a:1b:60:d5:
                    b5:41:2a:c2:24:6a:d6:b5:97:10:84:66:f0:50:35:
                    36:51:1d:aa:85:55:6c:57:54:5e:f9:ec:57:49:c1:
                    87:db:61:59:d4:2b:0a:37:9a:ae:40:55:c1:4e:d0:
                    77:85:13:5c:03:d9:3d:91:e0:91:99:f5:a9:69:67:
                    84:cd:eb:6d:03:5b:72:b3:5d:f7:27:c7:2f:bf:ad:
                    d9:8f:e8:f7:39:e2:a5:a6:cc:11:41:5d:d6:8d:5c:
                    48:c8:33:dc:f7:d7:ca:d7:a4:6a:7e:de:30:04:90:
                    9b:42:c5:cf:cf:5c:7f:14:fe:c0:dc:ff:58:15:4c:
                    5d:61:79:ac:0c:7c:fd:72:da:b5:ce:11:11:14:05:
                    2a:88:0d:33:4e:8a:86:86:c8:be:c5:20:c4:1c:32:
                    c2:f8:6f:67:84:58:50:5c:1c:e4:70:80:c1:b6:40:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:CE:8A:E3:9C:7E:F1:AF:FD:4B:54:A4:4F:89:3F:30:F7:F4:A1
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:cb:e7:20:e1:50:2f:c9:dc:27:e6:56:d5:cf:24:37:4e:
         31:cd:78:fb:ed:f3:db:2b:ce:61:c1:04:df:33:a7:32:5e:68:
         be:a2:68:02:46:ee:00:1c:0b:2f:65:b2:33:72:ee:66:3b:4f:
         60:ca:53:ac:27:8a:36:c1:82:53:28:e4:c8:cd:a7:22:f9:cb:
         bb:5e:b4:86:86:b9:dd:f7:42:bf:dc:c5:d1:61:8e:1e:29:5a:
         73:30:cd:7c:c7:e1:f5:e8:df:53:ee:a6:6b:bd:39:72:cd:e9:
         e5:b2:10:e7:01:85:d0:f5:c4:dc:15:95:17:3e:ea:76:16:6b:
         57:2d:77:3a:a1:46:cf:12:82:6b:67:2a:97:39:5d:6d:84:cb:
         2c:12:78:b9:e4:17:fe:5f:ad:55:24:cd:07:38:4b:b6:44:a6:
         b7:fa:d2:c1:2f:32:5b:d0:c6:87:04:6a:2f:ea:75:2f:67:5d:
         3c:8a:d4:83:f4:de:0e:d7:35:24:a8:a9:0b:40:f8:71:84:fb:
         05:93:14:1d:53:38:d0:32:73:68:01:0d:83:fe:02:89:c4:9a:
         b3:76:57:76:b9:ab:34:27:76:8c:da:ba:59:69:0b:e2:c0:df:
         1b:a7:bc:b8:05:62:9d:be:85:7f:4e:0c:94:4c:e8:54:7a:4c:
         be:c3:76:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ04LkJpl3bjF+5SbG+a+5COMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGY0NGJhODE0YjhjOTRiN2FmZTMwMjJlZTAxNDYyZjUx
M2JmZjcwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg3NWU0Y2U4YWUzOWM3ZWYxYWZmZDRiNTRhNDRmODkzZjMwZjdmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/0+jd1oY+Josg7hTifc9s/tr8C6
NCGs3egnC6G+c36Yl2xhmv6rLiTKOvTq6U2rkDpqveZ9F0/3fvr8+fIkAdgSFgQD
DCW1Kjzmf1hUw0G1tKL5EjobYNW1QSrCJGrWtZcQhGbwUDU2UR2qhVVsV1Re+exX
ScGH22FZ1CsKN5quQFXBTtB3hRNcA9k9keCRmfWpaWeEzettA1tys133J8cvv63Z
j+j3OeKlpswRQV3WjVxIyDPc99fK16Rqft4wBJCbQsXPz1x/FP7A3P9YFUxdYXms
DHz9ctq1zhERFAUqiA0zToqGhsi+xSDEHDLC+G9nhFhQXBzkcIDBtkAlOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHXkzorjnH7xr/1LVKRPiT8w9/ShMB8GA1UdIwQY
MBaAFPpPRLqBS4yUt6/jAi7gFGL1E7/3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rOUV1b0ZMakpTM3ItTUNMdUFVWXZVVHZfYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvOTEyMTEwLTZmYzItNDI0YS1hOTU1
LWRhNjIxY2Q3NTZkNy8xLzEtazlFdW9GTGpKUzNyLU1DTHVBVVl2VVR2X2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ1LzkxMjExMC02ZmMyLTQyNGEtYTk1NS1kYTYyMWNkNzU2
ZDcvMS8xLWs5RXVvRkxqSlMzci1NQ0x1QVVZdlVUdl9jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc67L
5yDhUC/J3CfmVtXPJDdOMc14++3z2yvOYcEE3zOnMl5ovqJoAkbuABwLL2WyM3Lu
ZjtPYMpTrCeKNsGCUyjkyM2nIvnLu160hoa53fdCv9zF0WGOHilaczDNfMfh9ejf
U+6ma705cs3p5bIQ5wGF0PXE3BWVFz7qdhZrVy13OqFGzxKCa2cqlzldbYTLLBJ4
ueQX/l+tVSTNBzhLtkSmt/rSwS8yW9DGhwRqL+p1L2ddPIrUg/TeDtc1JKipC0D4
cYT7BZMUHVM40DJzaAENg/4CicSas3ZXdrmrNCd2jNq6WWkL4sDfG6e8uAVinb6F
f04MlEzoVHpMvsN2qA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:30 2026 by rpki-client