Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          ufTMjurdwBhBXCUyYS21OzSL1CqQAm+oJ5x97LrrqmA=
Subject key identifier:   1F:02:EA:9E:84:03:2F:86:23:52:A8:91:11:F0:A0:A9:9A:DC:61:EF
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       019D36E491AC78EC36A1DD93F39B71655F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          090A
Signing time:             Sun 29 Mar 2026 00:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 00:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 00:00:42 +0000
Files and hashes:         1: 1b-Tw3SlZmNJTB8UfFQw8RxUKqE.roa (hash: MXUx87RXlsW1DyFqtlpRvICKS30coFNg5ggskndvUkI=)
                          2: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: akk56cljhbWhaYtZMoiLjD6kzexd6knhsK6N88VO2Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:e4:91:ac:78:ec:36:a1:dd:93:f3:9b:71:65:5f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Mar 29 00:00:42 2026 GMT
            Not After : Mar 30 00:00:42 2026 GMT
        Subject: CN=1f02ea9e84032f862352a89111f0a0a99adc61ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:28:9f:c9:89:4e:d8:8a:68:25:5f:d8:82:
                    e4:97:03:d5:5e:82:ba:9c:a6:73:f7:52:56:36:40:
                    5e:08:ad:86:f6:bf:0d:10:e5:0b:1f:f0:fc:e3:5b:
                    4d:34:0a:80:fe:8e:5a:a0:3b:9f:b4:a9:5d:f4:db:
                    85:a3:db:50:10:f1:b4:f2:8d:c3:0e:3f:56:3e:af:
                    f4:6b:5e:2f:d0:86:39:0f:df:8e:e3:f8:78:1d:42:
                    86:70:81:88:83:a7:8b:81:1c:8c:3f:5b:36:2b:72:
                    41:0b:14:36:39:e1:33:58:3e:69:f0:b7:2f:cc:5a:
                    da:e5:4c:3b:98:6f:d0:03:e8:94:bd:92:4f:2f:02:
                    87:96:c2:9b:51:a8:cf:88:0f:e1:ad:23:fd:60:db:
                    70:9a:22:30:b1:37:00:83:bc:98:8e:36:8c:97:0b:
                    c0:37:a9:4a:6b:b3:0a:7b:93:d5:73:7e:69:71:98:
                    85:aa:a2:5f:6b:13:39:c1:35:e8:70:8d:21:74:45:
                    6c:50:37:aa:78:2f:41:c8:50:03:ed:2e:b5:64:12:
                    12:0a:72:ca:ba:c8:ea:16:d0:15:fa:eb:bd:00:14:
                    0a:aa:69:2c:6f:b7:61:00:3d:ee:2d:7e:1d:fe:13:
                    10:e8:05:c8:f3:4b:4a:3c:4f:64:f4:75:52:d9:76:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:EA:9E:84:03:2F:86:23:52:A8:91:11:F0:A0:A9:9A:DC:61:EF
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:32:85:2a:31:86:ae:92:59:ac:4a:a5:24:ad:b8:c5:12:
         f0:18:84:7e:84:c9:57:ca:4c:89:d1:b4:ee:fd:96:89:a5:2c:
         94:49:aa:10:af:1a:e3:6c:81:5c:f3:bd:f0:6a:65:83:3b:71:
         15:27:8f:72:c1:09:ae:74:00:90:be:41:b7:ec:68:b0:a0:17:
         72:fd:82:2a:2f:ce:d6:b0:05:ae:79:61:e6:00:fe:d2:eb:1d:
         e8:61:f8:03:11:4f:35:a6:17:dd:07:b5:54:2e:da:78:85:fe:
         ce:b3:43:31:c4:ec:35:54:1d:72:4b:c9:ea:d5:ea:4f:96:fc:
         9e:2f:9c:f2:33:be:90:ee:f5:66:d9:40:54:73:f1:6b:bb:70:
         b0:bd:10:50:5b:b7:df:ba:b8:94:b1:ba:63:fa:27:a2:04:c1:
         f2:8f:aa:01:17:c5:dc:cf:76:49:49:a9:13:d2:43:02:4a:3b:
         65:3a:38:b8:4d:68:fb:38:9f:cd:25:d6:e6:e3:f4:86:e6:8f:
         8b:be:ba:ef:b5:3c:67:cb:b5:ab:59:6e:4c:af:2e:cc:e0:be:
         f8:2a:be:20:b7:01:ad:ac:bd:34:fb:ad:eb:f5:5a:cb:9f:56:
         43:da:ff:46:94:e4:18:10:c7:2f:08:8e:6e:22:94:b0:ee:52:
         d8:41:d1:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025JGseOw2od2T85txZV8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NmJmODc2MmZlNDJmMGExM2RhN2QyMWNhOTZjNDMwMTUw
MGViY2MwHhcNMjYwMzI5MDAwMDQyWhcNMjYwMzMwMDAwMDQyWjAzMTEwLwYDVQQD
EygxZjAyZWE5ZTg0MDMyZjg2MjM1MmE4OTExMWYwYTBhOTlhZGM2MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Uon8mJTtiKaCVf2ILklwPVXoK6
nKZz91JWNkBeCK2G9r8NEOULH/D841tNNAqA/o5aoDuftKld9NuFo9tQEPG08o3D
Dj9WPq/0a14v0IY5D9+O4/h4HUKGcIGIg6eLgRyMP1s2K3JBCxQ2OeEzWD5p8Lcv
zFra5Uw7mG/QA+iUvZJPLwKHlsKbUajPiA/hrSP9YNtwmiIwsTcAg7yYjjaMlwvA
N6lKa7MKe5PVc35pcZiFqqJfaxM5wTXocI0hdEVsUDeqeC9ByFAD7S61ZBISCnLK
usjqFtAV+uu9ABQKqmksb7dhAD3uLX4d/hMQ6AXI80tKPE9k9HVS2XaRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8C6p6EAy+GI1KokRHwoKma3GHvMB8GA1UdIwQY
MBaAFEZr+HYv5C8KE9p9IcqWxDAVAOvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm12NGRpX2tMd29UMm4waHlwYkVNQlVBNjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83MTc3OWItNTgzMC00Yzg3LTllNzkt
ZTVjNDU5YzkxYTQ4LzEvUm12NGRpX2tMd29UMm4waHlwYkVNQlVBNjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83MTc3OWItNTgzMC00Yzg3LTllNzktZTVjNDU5YzkxYTQ4
LzEvUm12NGRpX2tMd29UMm4waHlwYkVNQlVBNjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASigyhSox
hq6SWaxKpSStuMUS8BiEfoTJV8pMidG07v2WiaUslEmqEK8a42yBXPO98Gplgztx
FSePcsEJrnQAkL5Bt+xosKAXcv2CKi/O1rAFrnlh5gD+0usd6GH4AxFPNaYX3Qe1
VC7aeIX+zrNDMcTsNVQdckvJ6tXqT5b8ni+c8jO+kO71ZtlAVHPxa7twsL0QUFu3
37q4lLG6Y/onogTB8o+qARfF3M92SUmpE9JDAko7ZTo4uE1o+zifzSXW5uP0huaP
i76677U8Z8u1q1luTK8uzOC++Cq+ILcBray9NPut6/Vay59WQ9r/RpTkGBDHLwiO
biKUsO5S2EHRDw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client