Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File:                     ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier:          yjyAccWjE/mObrkaKnjOw65JfLSX79KjBNJL7loTM+M=
Subject key identifier:   AD:D7:65:57:5D:B5:C2:4A:47:D2:CB:9A:60:31:D3:B1:F0:A5:DC:DF
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer:       /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial:       019D382E558AEB2DA58B3F5ED57DA6AC15ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number:          1483
Signing time:             Sun 29 Mar 2026 06:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:53 +0000
Files and hashes:         1: ODB5K147usnzcNTK56uipc26ego.crl (hash: fSPqYdDsfztspHIbOil3yNuEsovj5Upk+yV7QylfAC8=)
                          2: ulMvleh0KpHzaZnOGnMAPRh_7go.roa (hash: f+kd+NW6NmqPoqPYmJohSpoAXQXjo50jBTIPGaMt3IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:55:8a:eb:2d:a5:8b:3f:5e:d5:7d:a6:ac:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
        Validity
            Not Before: Mar 29 06:00:53 2026 GMT
            Not After : Mar 30 06:00:53 2026 GMT
        Subject: CN=add765575db5c24a47d2cb9a6031d3b1f0a5dcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:a3:da:f6:9d:03:68:55:c5:b5:56:30:50:
                    89:53:fc:6b:df:c6:29:52:ee:7c:5e:11:0e:b8:0d:
                    e4:f3:03:60:3c:09:48:9f:2a:74:7e:96:dd:30:8a:
                    a5:ab:ee:a4:1b:d7:44:41:48:bd:fb:ce:5a:4e:89:
                    f2:ad:7f:17:fb:bc:37:38:67:80:a1:08:5d:e1:67:
                    7e:8f:ab:2a:c9:7b:d2:17:f9:f9:c0:e8:1c:5d:3e:
                    fa:d3:28:45:fd:fa:e7:6f:6d:47:4a:dc:9c:b2:e9:
                    f4:85:ac:4c:4e:29:8c:8d:fc:e2:3d:cb:d0:0f:88:
                    76:8a:8f:6d:30:9b:de:c5:3e:4a:81:74:7f:3b:1b:
                    0a:f7:c9:af:74:9f:74:5e:da:69:dd:ca:90:e0:35:
                    a1:5b:07:f5:16:36:ff:4e:0b:6d:32:fa:53:51:72:
                    7b:c9:64:7e:14:e4:57:d5:8f:1a:15:3b:31:e1:00:
                    64:ac:57:55:ff:be:d8:d8:6f:40:4f:34:41:be:20:
                    b7:7d:2b:59:bf:2f:f8:a8:f5:c4:a3:01:f4:f4:41:
                    08:3d:0b:4a:da:45:8d:db:3b:92:c5:e5:1b:e8:0d:
                    58:f3:40:ec:de:1b:02:a4:3d:74:15:93:2c:9a:4e:
                    c4:1a:d5:9f:22:1e:58:31:b1:72:85:f1:ab:27:74:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D7:65:57:5D:B5:C2:4A:47:D2:CB:9A:60:31:D3:B1:F0:A5:DC:DF
            X509v3 Authority Key Identifier:
                keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:1b:c9:54:69:a7:07:3b:77:b7:c1:f5:29:78:e6:5a:ea:
         d5:ee:ba:d9:91:84:af:b6:80:1f:73:ff:4c:9f:0d:6f:f0:64:
         63:25:ee:cc:c2:a4:5b:e5:cf:cf:d7:ce:70:da:28:f6:0e:21:
         90:82:c4:4c:eb:5b:f6:85:d0:2c:6d:16:32:6a:9a:97:2c:d4:
         67:3f:8e:79:f3:4d:e3:cc:f0:3a:31:95:79:c5:c7:74:86:52:
         ec:71:5c:f7:58:e6:1a:9e:8c:cd:87:3c:a4:ee:7c:3f:d7:7b:
         e5:02:91:e7:30:7a:26:b0:b7:86:58:0f:56:35:7a:9f:31:06:
         5a:1f:09:88:a2:1a:48:d7:55:6d:21:2f:7f:4a:f8:72:cd:8f:
         c0:95:bc:c1:b7:32:b7:35:f0:9b:b6:52:f9:3a:83:e8:33:94:
         8c:0b:b7:a3:b4:f9:74:f9:52:71:38:75:1d:42:82:38:33:07:
         8d:ae:3e:42:20:12:75:54:28:a8:cb:58:d5:b4:3d:eb:b3:0a:
         56:f1:bc:ee:11:36:1b:4e:c9:b3:d3:6f:c2:41:e6:97:90:ce:
         31:72:cc:5b:6f:fc:e5:6b:2b:a0:74:de:b6:6d:48:d1:34:3d:
         6f:d8:26:96:7d:a3:b6:fa:ab:3b:6b:ac:1c:ee:9c:fe:30:26:
         cb:75:c6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlWK6y2liz9e1X2mrBXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzA3OTJiNWUzYmJhYzlmMzcwZDRjYWU3YWJhMmE1Y2Ri
YTdhMGEwHhcNMjYwMzI5MDYwMDUzWhcNMjYwMzMwMDYwMDUzWjAzMTEwLwYDVQQD
EyhhZGQ3NjU1NzVkYjVjMjRhNDdkMmNiOWE2MDMxZDNiMWYwYTVkY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o6j2vadA2hVxbVWMFCJU/xr38Yp
Uu58XhEOuA3k8wNgPAlInyp0fpbdMIqlq+6kG9dEQUi9+85aTonyrX8X+7w3OGeA
oQhd4Wd+j6sqyXvSF/n5wOgcXT760yhF/frnb21HStycsun0haxMTimMjfziPcvQ
D4h2io9tMJvexT5KgXR/OxsK98mvdJ90Xtpp3cqQ4DWhWwf1Fjb/TgttMvpTUXJ7
yWR+FORX1Y8aFTsx4QBkrFdV/77Y2G9ATzRBviC3fStZvy/4qPXEowH09EEIPQtK
2kWN2zuSxeUb6A1Y80Ds3hsCpD10FZMsmk7EGtWfIh5YMbFyhfGrJ3TEUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3XZVddtcJKR9LLmmAx07HwpdzfMB8GA1UdIwQY
MBaAFDgweSteO7rJ83DUyueroqXNunoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjkt
MWJmZmE3NGEzYjFkLzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjktMWJmZmE3NGEzYjFk
LzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOQbyVRp
pwc7d7fB9Sl45lrq1e662ZGEr7aAH3P/TJ8Nb/BkYyXuzMKkW+XPz9fOcNoo9g4h
kILETOtb9oXQLG0WMmqalyzUZz+OefNN48zwOjGVecXHdIZS7HFc91jmGp6MzYc8
pO58P9d75QKR5zB6JrC3hlgPVjV6nzEGWh8JiKIaSNdVbSEvf0r4cs2PwJW8wbcy
tzXwm7ZS+TqD6DOUjAu3o7T5dPlScTh1HUKCODMHja4+QiASdVQoqMtY1bQ967MK
VvG87hE2G07Js9NvwkHml5DOMXLMW2/85WsroHTetm1I0TQ9b9gmln2jtvqrO2us
HO6c/jAmy3XGBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client