Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          nLLYt28XV/tzIybYk+XWsajzVoIRM1c8CYeBt4JyUqc=
Subject key identifier:   8D:21:9A:1A:AC:F6:F6:59:6C:F8:95:0B:A8:D5:6E:D3:68:19:1C:5F
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019D2D3CC72451C6E21FCAF149FC8FF9674D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          0786
Signing time:             Fri 27 Mar 2026 03:00:50 +0000
Manifest this update:     Fri 27 Mar 2026 03:00:50 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:50 +0000
Files and hashes:         1: DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa (hash: pOXeNunBUp7XMmyt7KCLlUiodAtYd49vUDG9ePb2slQ=)
                          2: GP_Mj6PAxOglARXWqt3O7csqHl0.roa (hash: 9RdzBSdQWGA/ZjrTNqzOgihxpuYok+ZxFPtV3uGFuyA=)
                          3: JjxyiyRAHIZDhSB7r9odWsogzv0.roa (hash: cTZJnhtnZxGwp2Q9A0lYiODLfA95pG6O1DIOhv9ttYY=)
                          4: Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa (hash: CvQQy58T2+JT1V1PpCMrbgGvmKiUqKITp6SsZ8+pjsw=)
                          5: o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa (hash: YKENZtDbouX123QC9IjXYuWhmGFmJEwt6IRC/Z5j654=)
                          6: tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa (hash: gRJclz6t9y/Q1g8bocXmUp9M+K0hzT5o06prGgkqzrY=)
                          7: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: zjySU0WGVUZu8fCVCSxXRXHuKVBvQp6KNxRQhBDs+B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:3c:c7:24:51:c6:e2:1f:ca:f1:49:fc:8f:f9:67:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Mar 27 03:00:50 2026 GMT
            Not After : Mar 28 03:00:50 2026 GMT
        Subject: CN=8d219a1aacf6f6596cf8950ba8d56ed368191c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:e6:0a:74:a2:42:f4:75:f8:73:69:49:70:
                    54:e9:c2:23:0a:9a:37:80:5c:5b:e6:e9:e1:a5:78:
                    f5:ff:cc:4b:7c:b5:21:6d:2d:a3:d9:c8:31:f3:0f:
                    fb:a2:ad:f3:84:a2:8f:04:67:49:34:20:0a:a2:4b:
                    eb:7c:06:3b:2f:04:72:1c:6e:7a:65:1a:92:d3:ca:
                    26:39:e2:4a:fd:ba:01:ec:09:77:78:5c:38:1c:c3:
                    a7:17:ae:6f:2f:26:13:02:d3:fc:8a:57:58:18:95:
                    4b:30:4e:bd:a2:90:d2:88:fa:8c:b5:16:f2:ab:22:
                    72:e4:f1:39:72:12:db:ee:1a:1d:f3:a8:39:da:b6:
                    5c:b8:eb:8a:2c:28:6c:b8:92:ed:56:a4:72:5b:01:
                    e7:c1:ae:4a:33:3a:da:30:4e:b8:48:5f:7d:c7:6b:
                    86:9d:68:33:a8:eb:39:eb:12:07:09:bf:f6:41:c0:
                    ca:e3:5f:88:a6:92:f6:7d:c7:55:2b:76:7d:cc:aa:
                    e8:07:74:16:10:82:c9:bd:6e:f9:c9:71:5a:99:2a:
                    18:7f:54:e7:50:c7:0b:5a:05:e7:06:2a:7d:1b:58:
                    28:13:4a:1d:10:a4:f7:41:6c:18:e4:5b:52:1c:69:
                    e5:e5:6f:67:08:05:81:c5:23:73:89:b4:69:f2:07:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:9A:1A:AC:F6:F6:59:6C:F8:95:0B:A8:D5:6E:D3:68:19:1C:5F
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:33:3e:e1:df:9f:82:7c:09:54:1c:96:86:f2:72:34:d1:
         7a:dd:15:96:8e:cd:39:bd:4b:44:b0:ff:66:c1:8a:e8:93:27:
         ad:ff:90:73:18:ad:51:1a:f9:56:43:d3:6c:97:75:26:89:64:
         a7:36:29:01:f4:74:80:a4:8c:3f:29:81:97:7f:98:7c:3f:4f:
         86:e1:11:4c:9a:58:1b:d3:8d:52:b9:26:90:bc:32:d4:4f:de:
         70:68:f3:1f:09:a7:f3:08:40:1f:84:a6:22:ef:24:02:61:27:
         e5:13:92:01:6d:1b:27:eb:b8:ba:90:a7:02:51:f2:34:6d:a7:
         60:da:f9:07:24:e4:63:15:f4:ff:99:9a:ea:77:16:4a:50:16:
         6b:a3:3e:a3:0e:a0:72:76:cc:8d:94:c3:f9:e5:b7:21:ae:2e:
         61:4e:0b:90:a5:31:4a:0b:79:01:d3:01:74:f1:f2:29:cd:8d:
         10:4e:69:51:b9:35:3f:7c:28:ef:40:31:7d:57:3c:37:6c:40:
         98:63:bc:b5:ad:a4:8d:e0:07:9d:31:1b:4d:f8:e4:e7:82:e4:
         08:c8:0c:31:eb:b7:02:99:9b:21:97:7f:b8:13:85:78:fb:1f:
         e2:0a:2e:e0:f3:35:32:69:b3:42:21:bc:10:25:bc:04:60:8b:
         b8:4f:75:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tPMckUcbiH8rxSfyP+WdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjYwMzI3MDMwMDUwWhcNMjYwMzI4MDMwMDUwWjAzMTEwLwYDVQQD
Eyg4ZDIxOWExYWFjZjZmNjU5NmNmODk1MGJhOGQ1NmVkMzY4MTkxYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtITmCnSiQvR1+HNpSXBU6cIjCpo3
gFxb5unhpXj1/8xLfLUhbS2j2cgx8w/7oq3zhKKPBGdJNCAKokvrfAY7LwRyHG56
ZRqS08omOeJK/boB7Al3eFw4HMOnF65vLyYTAtP8ildYGJVLME69opDSiPqMtRby
qyJy5PE5chLb7hod86g52rZcuOuKLChsuJLtVqRyWwHnwa5KMzraME64SF99x2uG
nWgzqOs56xIHCb/2QcDK41+IppL2fcdVK3Z9zKroB3QWEILJvW75yXFamSoYf1Tn
UMcLWgXnBip9G1goE0odEKT3QWwY5FtSHGnl5W9nCAWBxSNzibRp8gek/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0hmhqs9vZZbPiVC6jVbtNoGRxfMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmgzPuHf
n4J8CVQclobycjTRet0Vlo7NOb1LRLD/ZsGK6JMnrf+QcxitURr5VkPTbJd1Jolk
pzYpAfR0gKSMPymBl3+YfD9PhuERTJpYG9ONUrkmkLwy1E/ecGjzHwmn8whAH4Sm
Iu8kAmEn5ROSAW0bJ+u4upCnAlHyNG2nYNr5ByTkYxX0/5ma6ncWSlAWa6M+ow6g
cnbMjZTD+eW3Ia4uYU4LkKUxSgt5AdMBdPHyKc2NEE5pUbk1P3wo70AxfVc8N2xA
mGO8ta2kjeAHnTEbTfjk54LkCMgMMeu3ApmbIZd/uBOFePsf4gou4PM1MmmzQiG8
ECW8BGCLuE91ZQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:44:33 2026 by rpki-client