Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          7vVIdf4H4U+FKlA5AAMnryalwAPDQ6LQL1Q4ZNEaRw8=
Subject key identifier:   78:72:24:83:83:DA:77:57:7D:CB:5C:34:64:B8:B6:9D:3D:0E:A2:66
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       019CE824F5C1E7A8C313ECD24A12B30DDFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0C10
Signing time:             Fri 13 Mar 2026 17:01:02 +0000
Manifest this update:     Fri 13 Mar 2026 17:01:02 +0000
Manifest next update:     Sat 14 Mar 2026 17:01:02 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: AtrVgW/3Sdi70ORYsCXL5TvlOINxk7UnqoHrd97wWmg=)
                          2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:24:f5:c1:e7:a8:c3:13:ec:d2:4a:12:b3:0d:df:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Mar 13 17:01:02 2026 GMT
            Not After : Mar 14 17:01:02 2026 GMT
        Subject: CN=7872248383da77577dcb5c3464b8b69d3d0ea266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:37:e6:67:a8:12:d5:c2:33:80:8a:6c:3e:
                    34:54:11:cc:17:93:51:06:43:c5:ad:3e:48:c4:7e:
                    d0:75:88:5f:b7:b9:a8:a3:38:16:71:95:f1:66:93:
                    74:9d:ee:34:ca:94:22:51:14:42:e2:bf:fb:3f:f0:
                    9e:d3:a8:b0:b5:65:87:e9:9e:a9:34:eb:0f:49:38:
                    53:8f:e2:d6:45:15:2a:2c:4c:d8:3f:e7:1c:81:83:
                    1c:96:4f:b5:7d:52:8a:98:dd:40:60:10:b6:ef:44:
                    92:f0:42:1d:a9:25:d6:84:7e:a6:b4:ba:e9:54:2a:
                    43:e4:53:7a:fa:d4:ec:d9:94:98:a3:9c:89:4d:1f:
                    c7:92:83:fc:bf:41:74:48:ba:95:23:3c:00:a5:06:
                    e2:37:70:16:93:7f:1f:5a:54:c4:54:ee:d2:5c:d4:
                    23:2a:f7:4b:dd:23:99:d4:ae:02:a3:bd:88:b1:17:
                    dc:ef:79:e5:90:6d:91:0c:5c:92:9c:68:e3:72:70:
                    0e:aa:c7:6d:35:1b:17:94:85:f2:5d:1a:44:7d:39:
                    fb:4f:df:94:bb:4a:95:20:4f:c3:fc:4d:8a:03:da:
                    4f:b0:ad:90:c7:7b:56:29:90:6f:d1:6a:3f:f1:23:
                    07:54:bc:be:2f:2a:71:a6:f3:6b:00:e6:0e:a8:e0:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:72:24:83:83:DA:77:57:7D:CB:5C:34:64:B8:B6:9D:3D:0E:A2:66
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:24:e6:45:58:a5:0a:8b:22:4b:bb:8a:4d:31:6a:06:05:
         18:48:20:33:b2:1f:f0:77:e7:af:d6:2e:f4:6d:cc:bc:c2:97:
         1d:60:16:31:28:bb:e8:64:37:8f:1b:68:60:e8:61:35:35:9d:
         29:ed:5f:35:e0:18:c0:b6:98:4d:d5:b8:60:28:1e:47:79:aa:
         99:6c:1c:f8:2b:dd:f0:9d:69:15:cc:bb:b2:90:86:e0:b8:c2:
         ec:fd:b3:13:64:68:56:75:5b:97:0e:f5:95:df:3c:d6:53:3b:
         cc:b6:77:89:fb:22:87:31:2e:13:25:50:4a:a9:19:f9:46:b9:
         21:e8:19:7a:89:0a:b3:3e:ad:03:88:c9:f7:9a:2a:45:36:d9:
         a1:78:8f:0a:88:5b:38:9d:63:2a:57:db:33:d3:51:bd:89:50:
         69:9a:c9:e1:f3:07:e3:73:7c:4e:38:80:c5:5d:c0:f8:2c:b0:
         69:b2:fd:0c:15:48:02:16:f4:75:74:ac:e5:23:ea:8f:64:26:
         c5:02:42:45:57:c1:05:27:bc:be:ff:cb:13:08:16:a0:d3:cd:
         27:ec:dd:6d:02:84:2b:b4:8f:99:1d:be:81:ec:43:9f:bc:35:
         f4:b2:66:fe:d0:90:63:a9:7d:11:39:03:87:4a:4d:d9:23:ff:
         b2:b0:75:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoJPXB56jDE+zSShKzDd/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi
NWNhNzkwHhcNMjYwMzEzMTcwMTAyWhcNMjYwMzE0MTcwMTAyWjAzMTEwLwYDVQQD
Eyg3ODcyMjQ4MzgzZGE3NzU3N2RjYjVjMzQ2NGI4YjY5ZDNkMGVhMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0o35meoEtXCM4CKbD40VBHMF5NR
BkPFrT5IxH7QdYhft7moozgWcZXxZpN0ne40ypQiURRC4r/7P/Ce06iwtWWH6Z6p
NOsPSThTj+LWRRUqLEzYP+ccgYMclk+1fVKKmN1AYBC270SS8EIdqSXWhH6mtLrp
VCpD5FN6+tTs2ZSYo5yJTR/HkoP8v0F0SLqVIzwApQbiN3AWk38fWlTEVO7SXNQj
KvdL3SOZ1K4Co72IsRfc73nlkG2RDFySnGjjcnAOqsdtNRsXlIXyXRpEfTn7T9+U
u0qVIE/D/E2KA9pPsK2Qx3tWKZBv0Wo/8SMHVLy+LypxpvNrAOYOqODHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhyJIOD2ndXfctcNGS4tp09DqJmMB8GA1UdIwQY
MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt
YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk
LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgkk5kVY
pQqLIku7ik0xagYFGEggM7If8Hfnr9Yu9G3MvMKXHWAWMSi76GQ3jxtoYOhhNTWd
Ke1fNeAYwLaYTdW4YCgeR3mqmWwc+Cvd8J1pFcy7spCG4LjC7P2zE2RoVnVblw71
ld881lM7zLZ3ifsihzEuEyVQSqkZ+Ua5IegZeokKsz6tA4jJ95oqRTbZoXiPCohb
OJ1jKlfbM9NRvYlQaZrJ4fMH43N8TjiAxV3A+CywabL9DBVIAhb0dXSs5SPqj2Qm
xQJCRVfBBSe8vv/LEwgWoNPNJ+zdbQKEK7SPmR2+gexDn7w19LJm/tCQY6l9ETkD
h0pN2SP/srB1kQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:30:14 2026 by rpki-client