Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
File:                     c_guDtDzbgmSN8xCz4d4tAeCgAE.mft (raw, json)
Hash identifier:          R67I6yuMkAXY8h0jEVm8od/Jt58An/tJbHrVd1ASqiE=
Subject key identifier:   5A:53:EB:35:76:82:20:35:BD:F8:A2:8E:D2:23:09:71:30:09:76:60
Authority key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01
Certificate issuer:       /CN=73f82e0ed0f36e099237cc42cf8778b407828001
Certificate serial:       019D390A5074035E95BB104D053F6EDA6ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 10:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:10 +0000
Files and hashes:         1: c_guDtDzbgmSN8xCz4d4tAeCgAE.crl (hash: o0cDMQ6NPbmoXxSS764475cj43v160KheK0VZ3rJgB8=)
                          2: mt2zCmNdnBgEuyHQRB2CTEl3Yus.roa (hash: Yc9rJNj4pZitXQDHf0wlaTuKFQBYh33LRX7jBVTgYxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:50:74:03:5e:95:bb:10:4d:05:3f:6e:da:6a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f82e0ed0f36e099237cc42cf8778b407828001
        Validity
            Not Before: Mar 29 10:01:10 2026 GMT
            Not After : Mar 30 10:01:10 2026 GMT
        Subject: CN=5a53eb3576822035bdf8a28ed223097130097660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:f6:bf:db:43:bf:53:fc:ae:ae:d3:62:9c:
                    27:95:27:49:19:af:f4:58:ee:ba:2f:93:b5:2f:61:
                    51:fb:0c:41:e6:1e:23:eb:ce:38:3e:39:c4:f6:32:
                    11:8a:3e:a9:8d:b7:66:00:d0:7c:a9:04:30:e7:72:
                    84:53:80:f4:eb:55:e2:3b:f6:8d:4c:f9:7e:aa:27:
                    8c:ab:ee:5e:1f:79:d3:fc:1c:6c:8a:34:6b:13:e3:
                    e5:5e:c4:51:cf:30:65:1b:03:72:56:d5:9b:c1:c7:
                    b2:ae:50:20:d8:09:df:6f:47:b5:5e:a8:47:89:0f:
                    9b:dd:70:fa:a7:87:41:b6:7e:62:2d:f1:0b:f9:16:
                    6b:ea:5b:d1:cb:55:d0:00:7a:72:fc:93:3d:33:0f:
                    b9:af:8b:1f:7f:ea:07:b7:98:b1:d1:ce:7e:a9:7f:
                    f0:84:08:93:f6:47:30:01:d4:60:c6:29:6e:0c:c2:
                    77:d0:00:22:74:77:6e:88:1b:85:f1:7a:c9:bd:b4:
                    0f:52:53:a8:bb:94:3d:c1:f3:0e:64:43:d3:1e:a7:
                    16:83:b1:d8:a7:30:95:3d:01:31:ae:a1:4a:f1:53:
                    b2:bd:6a:91:45:d0:82:07:6f:0a:62:7d:40:3b:bc:
                    58:fe:83:ab:70:15:4e:f2:99:3b:97:65:dd:2d:ed:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:EB:35:76:82:20:35:BD:F8:A2:8E:D2:23:09:71:30:09:76:60
            X509v3 Authority Key Identifier:
                keyid:73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:56:e3:8f:09:c7:48:55:dc:5b:84:e4:5a:8f:56:21:d2:b5:
         0f:b8:b1:f8:6c:84:ae:14:36:0f:4a:18:32:97:9a:0a:43:c6:
         0d:50:c3:25:37:c6:68:c5:b5:9f:94:b7:88:98:ff:0b:a1:24:
         49:ba:90:5f:d3:fd:2e:1a:c0:f6:36:05:18:7e:20:d2:f7:ca:
         0e:41:9e:30:a9:be:55:da:a3:3b:c6:db:22:40:9f:81:03:11:
         a2:f2:68:3e:59:a7:fa:e5:95:bb:0e:d0:bf:28:24:aa:1c:b3:
         e8:eb:9d:5d:64:cc:f8:14:35:96:c0:00:ca:c9:bb:5b:c0:97:
         24:e0:b7:7e:f3:e5:25:e8:dc:e8:ae:b8:48:9f:dd:ad:70:a3:
         08:e0:b3:b8:36:8e:bd:10:dd:5f:81:4f:8d:45:cf:a6:fd:ce:
         6e:d6:b1:05:0a:0c:6b:44:66:3b:eb:3b:2b:dc:bf:69:3d:16:
         eb:fd:96:ea:df:51:bd:d6:71:47:74:58:26:22:9b:b1:37:eb:
         71:83:03:3e:71:4d:5b:9d:7d:a1:d1:b2:6d:69:98:7e:f1:07:
         ca:3d:35:bf:b7:98:6d:5b:78:0f:7b:8f:bb:b7:58:83:fe:54:
         2a:f2:cf:2c:ad:6b:30:a2:d2:97:d7:63:da:93:97:65:0c:84:
         9e:b7:6e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ClB0A16VuxBNBT9u2mrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjgyZTBlZDBmMzZlMDk5MjM3Y2M0MmNmODc3OGI0MDc4
MjgwMDEwHhcNMjYwMzI5MTAwMTEwWhcNMjYwMzMwMTAwMTEwWjAzMTEwLwYDVQQD
Eyg1YTUzZWIzNTc2ODIyMDM1YmRmOGEyOGVkMjIzMDk3MTMwMDk3NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDb2v9tDv1P8rq7TYpwnlSdJGa/0
WO66L5O1L2FR+wxB5h4j6844PjnE9jIRij6pjbdmANB8qQQw53KEU4D061XiO/aN
TPl+qieMq+5eH3nT/BxsijRrE+PlXsRRzzBlGwNyVtWbwceyrlAg2Anfb0e1XqhH
iQ+b3XD6p4dBtn5iLfEL+RZr6lvRy1XQAHpy/JM9Mw+5r4sff+oHt5ix0c5+qX/w
hAiT9kcwAdRgxiluDMJ30AAidHduiBuF8XrJvbQPUlOou5Q9wfMOZEPTHqcWg7HY
pzCVPQExrqFK8VOyvWqRRdCCB28KYn1AO7xY/oOrcBVO8pk7l2XdLe3ZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpT6zV2giA1vfiijtIjCXEwCXZgMB8GA1UdIwQY
MBaAFHP4Lg7Q824JkjfMQs+HeLQHgoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19ndUR0RHpiZ21TTjh4Q3o0ZDR0QWVDZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOGFkNDQtNzE5Ny00MmE3LThmNDUt
ZTBmZGNjZmI5ZmEzLzEvY19ndUR0RHpiZ21TTjh4Q3o0ZDR0QWVDZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOGFkNDQtNzE5Ny00MmE3LThmNDUtZTBmZGNjZmI5ZmEz
LzEvY19ndUR0RHpiZ21TTjh4Q3o0ZDR0QWVDZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlbjjwnH
SFXcW4TkWo9WIdK1D7ix+GyErhQ2D0oYMpeaCkPGDVDDJTfGaMW1n5S3iJj/C6Ek
SbqQX9P9LhrA9jYFGH4g0vfKDkGeMKm+VdqjO8bbIkCfgQMRovJoPlmn+uWVuw7Q
vygkqhyz6OudXWTM+BQ1lsAAysm7W8CXJOC3fvPlJejc6K64SJ/drXCjCOCzuDaO
vRDdX4FPjUXPpv3ObtaxBQoMa0RmO+s7K9y/aT0W6/2W6t9RvdZxR3RYJiKbsTfr
cYMDPnFNW519odGybWmYfvEHyj01v7eYbVt4D3uPu7dYg/5UKvLPLK1rMKLSl9dj
2pOXZQyEnrduvg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:12 2026 by rpki-client