Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          +WrBIswTRFeDJIUO7Z+ab9vOY6Nw+aU+7d3GG0G0pUw=
Subject key identifier:   42:53:98:A3:24:21:67:3C:69:CB:2D:08:26:CB:70:CF:8C:CC:00:CB
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019D37F705C68C0C339B1119EF271397FCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 05:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:28 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: oJ0XnLQRltiNhByHOWy+mRkuZ8ZPKvPjZk3n5fFbLOY=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:05:c6:8c:0c:33:9b:11:19:ef:27:13:97:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Mar 29 05:00:28 2026 GMT
            Not After : Mar 30 05:00:28 2026 GMT
        Subject: CN=425398a32421673c69cb2d0826cb70cf8ccc00cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:e1:e8:b8:8a:08:23:f7:e8:6a:ae:55:2f:
                    77:7d:d4:ca:f0:8e:42:a2:74:d6:5e:ee:9f:56:c3:
                    43:fc:76:cd:42:b9:c4:85:a9:16:37:82:70:21:c8:
                    06:9b:4c:1d:d4:e2:0b:7d:68:1a:06:28:f8:2d:66:
                    3b:47:17:66:cc:7d:4d:8d:78:52:96:56:2c:ff:dd:
                    77:3e:2c:2d:a9:64:16:80:d5:ba:24:81:2b:6e:d5:
                    a8:ec:c8:82:87:d0:39:2d:f3:25:28:34:a1:8c:7d:
                    6e:a7:2c:a0:79:ad:64:11:82:a3:4b:c4:fe:33:c2:
                    df:48:d0:44:22:d4:14:00:e6:a6:f4:17:e0:f9:43:
                    4a:f1:af:a6:21:6c:ac:4f:6f:55:d8:2d:b5:0b:e0:
                    dc:82:96:98:72:4e:15:37:9d:be:bc:9b:5c:7d:9f:
                    55:c6:90:02:ca:30:b6:a4:33:ff:00:c7:fe:5a:99:
                    ae:52:f7:70:86:c9:38:a0:b3:6f:f0:2a:54:85:08:
                    19:2a:19:4b:39:08:c3:23:2a:5a:0f:ed:84:68:fd:
                    3e:87:a2:fe:67:f0:89:d0:bb:07:e3:2a:55:3d:68:
                    91:0d:6b:18:ef:ac:30:c0:fb:75:6c:ff:52:78:95:
                    ae:3c:af:95:8f:52:da:d3:7e:49:f8:8d:42:fd:f4:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:98:A3:24:21:67:3C:69:CB:2D:08:26:CB:70:CF:8C:CC:00:CB
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:4f:9e:68:16:00:05:1f:0e:c1:65:87:63:53:6a:d5:70:
         d1:c2:b3:91:25:b9:87:14:b5:96:a6:ff:41:84:38:c6:15:59:
         c9:05:e8:fd:1f:74:b3:e7:15:0f:cb:8f:35:fa:59:c6:7d:bd:
         3b:51:f0:5a:3d:02:a2:37:cf:99:2e:91:5c:d2:54:7d:6d:6c:
         84:a5:b2:8e:00:30:a4:8a:95:2d:a3:d9:37:bb:b8:1f:29:c9:
         9a:23:d3:60:df:b3:8d:41:90:f3:1e:ad:ca:bb:e9:78:e5:de:
         d8:2c:1f:82:1d:03:b8:dd:72:de:0b:4b:4b:36:02:57:fe:7f:
         84:09:b2:c4:44:2e:07:05:66:76:fe:48:b7:96:73:c3:cf:87:
         b4:8f:3d:ae:ed:29:23:fd:aa:f5:b4:33:aa:70:6c:31:7a:9e:
         ec:52:22:e2:24:30:e2:be:2f:69:4c:95:5a:5c:dd:81:f3:78:
         1c:3a:cb:81:72:a4:16:fa:ab:32:29:47:9f:8f:a9:29:a3:db:
         de:76:e8:df:d5:87:e8:4d:bf:43:1b:da:92:6a:c6:c1:bd:4a:
         99:84:4f:69:8c:1a:43:d2:2a:05:f6:d1:16:06:d9:16:a3:e7:
         d4:96:38:67:73:d5:6e:de:a5:c5:ca:fb:cc:df:55:05:51:ec:
         40:dd:b6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wXGjAwzmxEZ7ycTl/zZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwMzI5MDUwMDI4WhcNMjYwMzMwMDUwMDI4WjAzMTEwLwYDVQQD
Eyg0MjUzOThhMzI0MjE2NzNjNjljYjJkMDgyNmNiNzBjZjhjY2MwMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhXh6LiKCCP36GquVS93fdTK8I5C
onTWXu6fVsND/HbNQrnEhakWN4JwIcgGm0wd1OILfWgaBij4LWY7RxdmzH1NjXhS
llYs/913PiwtqWQWgNW6JIErbtWo7MiCh9A5LfMlKDShjH1upyygea1kEYKjS8T+
M8LfSNBEItQUAOam9Bfg+UNK8a+mIWysT29V2C21C+DcgpaYck4VN52+vJtcfZ9V
xpACyjC2pDP/AMf+WpmuUvdwhsk4oLNv8CpUhQgZKhlLOQjDIypaD+2EaP0+h6L+
Z/CJ0LsH4ypVPWiRDWsY76wwwPt1bP9SeJWuPK+Vj1La035J+I1C/fQxDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJTmKMkIWc8acstCCbLcM+MzADLMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfphPnmgW
AAUfDsFlh2NTatVw0cKzkSW5hxS1lqb/QYQ4xhVZyQXo/R90s+cVD8uPNfpZxn29
O1HwWj0CojfPmS6RXNJUfW1shKWyjgAwpIqVLaPZN7u4HynJmiPTYN+zjUGQ8x6t
yrvpeOXe2Cwfgh0DuN1y3gtLSzYCV/5/hAmyxEQuBwVmdv5It5Zzw8+HtI89ru0p
I/2q9bQzqnBsMXqe7FIi4iQw4r4vaUyVWlzdgfN4HDrLgXKkFvqrMilHn4+pKaPb
3nbo39WH6E2/QxvakmrGwb1KmYRPaYwaQ9IqBfbRFgbZFqPn1JY4Z3PVbt6lxcr7
zN9VBVHsQN22gA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:05 2026 by rpki-client