Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File:                     86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier:          VBSZZal1pS29Hf2gfc6rigVqLTg/q8hguO5wfvBHy/0=
Subject key identifier:   CA:5C:9C:FC:EE:D7:4B:7F:58:0C:6A:B2:D2:DC:38:9C:16:2D:34:E3
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer:       /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial:       019CE3A31F2BBF8C31E596023D07F311C15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number:          1867
Signing time:             Thu 12 Mar 2026 20:00:44 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:44 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:44 +0000
Files and hashes:         1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: Dw1QiJHmQXPqyiQbzFm8wuSwaFq8xEZE33yRR4g6OiI=)
                          2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:1f:2b:bf:8c:31:e5:96:02:3d:07:f3:11:c1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
        Validity
            Not Before: Mar 12 20:00:44 2026 GMT
            Not After : Mar 13 20:00:44 2026 GMT
        Subject: CN=ca5c9cfceed74b7f580c6ab2d2dc389c162d34e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:9c:5a:15:5d:dd:d9:7c:d2:73:05:d5:f9:
                    af:34:94:37:16:0a:f5:71:12:15:23:43:c0:b4:02:
                    7b:97:c4:08:04:d6:b7:fa:c8:b2:9e:8a:20:45:8d:
                    ca:c0:1b:b5:c6:e8:ad:e0:9d:74:74:ce:da:bf:12:
                    8e:7c:fa:94:3b:51:71:35:cf:93:5a:2c:23:2d:2b:
                    d8:5e:8a:88:76:e7:a2:99:cf:67:f4:72:01:9f:fe:
                    fc:7f:45:a1:e2:73:5d:d1:59:83:47:75:f8:c5:24:
                    1c:cb:7c:da:85:b0:9c:96:9b:7e:ee:50:f4:d8:85:
                    38:a8:ef:a9:5e:c5:52:a3:ca:1d:dd:fa:6e:d2:7d:
                    09:37:5b:9a:9a:2a:d5:f2:2b:bd:59:08:24:9f:10:
                    d8:cd:b8:e1:2e:9c:ee:6e:2a:b8:a6:e1:0d:29:46:
                    5d:97:af:c3:51:3e:ac:8d:3e:96:d4:8c:63:3a:9f:
                    da:73:a5:ac:81:1c:7e:35:7b:11:de:dd:c2:48:31:
                    3d:e3:7b:34:16:e5:d1:3c:7c:7e:49:49:b2:7a:b4:
                    3d:29:33:10:2d:e3:41:03:46:dc:81:b3:75:8a:1b:
                    f8:cb:0b:33:83:ef:a9:0d:47:fe:51:a9:20:ee:9b:
                    b7:ae:4b:7b:3e:ec:a6:80:5d:26:4f:e1:1a:94:ce:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5C:9C:FC:EE:D7:4B:7F:58:0C:6A:B2:D2:DC:38:9C:16:2D:34:E3
            X509v3 Authority Key Identifier:
                keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:d7:6a:15:46:8f:e9:f1:75:7b:ea:9b:bf:87:9a:32:d1:
         a0:ca:c2:a1:56:5f:7d:86:9d:4e:27:59:53:fa:16:0b:26:2a:
         51:6e:7d:fc:ee:cf:73:1f:75:6d:76:78:cd:a9:c5:58:61:cf:
         ac:a8:5e:46:16:e9:d7:a2:88:9c:a2:6f:8f:13:46:a7:28:55:
         ac:9f:32:d6:d7:4a:c4:bf:59:0d:7a:9d:3a:3f:c5:b6:fa:1c:
         cf:05:61:df:47:6b:e2:a7:77:6a:76:a2:aa:9d:22:da:3c:fd:
         57:cd:6c:59:c7:5f:84:82:9a:17:99:49:a6:33:a8:83:19:54:
         80:0e:e4:95:ed:1c:e3:e3:75:b2:da:11:5a:fc:e4:07:7e:87:
         2d:33:df:01:a2:37:ab:3c:82:b3:c9:ce:5b:46:37:96:f5:5e:
         60:98:cf:9d:02:77:9f:89:40:08:c8:fe:03:2d:0d:1d:68:be:
         d1:5f:0c:22:d7:71:a8:f9:be:ca:13:1d:b7:c3:d7:f0:5f:e1:
         61:79:35:94:04:fb:b7:74:d5:70:ad:1a:a6:68:b6:b2:9b:b3:
         4e:de:ef:d4:8e:85:f2:9c:48:24:59:c3:73:72:04:24:b4:72:
         2c:dc:88:f8:90:e5:96:99:dd:de:05:5d:59:da:dd:5b:10:dc:
         db:71:c8:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjox8rv4wx5ZYCPQfzEcFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjYwMzEyMjAwMDQ0WhcNMjYwMzEzMjAwMDQ0WjAzMTEwLwYDVQQD
EyhjYTVjOWNmY2VlZDc0YjdmNTgwYzZhYjJkMmRjMzg5YzE2MmQzNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q2cWhVd3dl80nMF1fmvNJQ3Fgr1
cRIVI0PAtAJ7l8QIBNa3+siynoogRY3KwBu1xuit4J10dM7avxKOfPqUO1FxNc+T
WiwjLSvYXoqIdueimc9n9HIBn/78f0Wh4nNd0VmDR3X4xSQcy3zahbCclpt+7lD0
2IU4qO+pXsVSo8od3fpu0n0JN1uamirV8iu9WQgknxDYzbjhLpzubiq4puENKUZd
l6/DUT6sjT6W1IxjOp/ac6WsgRx+NXsR3t3CSDE943s0FuXRPHx+SUmyerQ9KTMQ
LeNBA0bcgbN1ihv4ywszg++pDUf+Uakg7pu3rkt7PuymgF0mT+EalM4u4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpcnPzu10t/WAxqstLcOJwWLTTjMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQrXahVG
j+nxdXvqm7+HmjLRoMrCoVZffYadTidZU/oWCyYqUW59/O7Pcx91bXZ4zanFWGHP
rKheRhbp16KInKJvjxNGpyhVrJ8y1tdKxL9ZDXqdOj/FtvoczwVh30dr4qd3anai
qp0i2jz9V81sWcdfhIKaF5lJpjOogxlUgA7kle0c4+N1stoRWvzkB36HLTPfAaI3
qzyCs8nOW0Y3lvVeYJjPnQJ3n4lACMj+Ay0NHWi+0V8MItdxqPm+yhMdt8PX8F/h
YXk1lAT7t3TVcK0apmi2spuzTt7v1I6F8pxIJFnDc3IEJLRyLNyI+JDllpnd3gVd
WdrdWxDc23HIZA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:03 2026 by rpki-client