Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          MiuknBZasYqoaMfUdOMGlWPOn/G5+katJRmmx+HtTog=
Subject key identifier:   A7:E1:84:47:F7:68:4E:11:7B:24:46:A9:66:C2:C5:0E:CB:91:EF:63
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019CF986D034F3A19E94A8B8EFA01F79CD5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          1878
Signing time:             Tue 17 Mar 2026 02:01:27 +0000
Manifest this update:     Tue 17 Mar 2026 02:01:27 +0000
Manifest next update:     Wed 18 Mar 2026 02:01:27 +0000
Files and hashes:         1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: qmhIxX1PGoXFsRfJumA3db+FnPsXpI6jL7q2k9yERbU=)
                          2: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
                          3: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
                          4: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
                          5: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
                          6: wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa (hash: MuoJXkzRzdWJZg/ch4KkXpD2pgMmCcKq2XBOGx8d8S8=)
                          7: y3zfP0q93ofdDmTML3d9ibPYDE0.roa (hash: lXR/PGnLiIZR28DvXpTTFej/rrLITeIePZus7we16Gw=)
                          8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:86:d0:34:f3:a1:9e:94:a8:b8:ef:a0:1f:79:cd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Mar 17 02:01:27 2026 GMT
            Not After : Mar 18 02:01:27 2026 GMT
        Subject: CN=a7e18447f7684e117b2446a966c2c50ecb91ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:ab:2a:6f:4f:b7:73:a6:58:87:9b:4f:99:
                    11:4c:e4:ca:29:ef:d7:b8:fe:5a:63:4a:9b:61:14:
                    42:21:ed:b8:35:ee:27:2e:9f:f4:56:ac:35:39:2d:
                    0f:2f:4c:b1:67:c7:98:3e:d9:ec:76:46:60:a7:3d:
                    d5:47:b6:ef:cf:0d:18:15:5d:27:c7:0c:7e:4a:01:
                    b7:ab:0b:35:12:31:10:c6:d6:44:0d:04:fc:4e:c0:
                    9b:ee:04:9b:31:44:b4:0d:df:a3:56:60:5f:90:3a:
                    43:9e:c0:37:99:74:99:07:86:f8:fd:02:3b:3f:3b:
                    06:f2:c5:48:49:3e:32:b8:95:20:27:db:ed:44:6b:
                    97:a7:b2:8c:85:cf:e8:f1:93:0c:37:f9:04:43:a1:
                    cf:d4:c3:0d:85:14:53:c7:50:05:08:27:9d:df:a4:
                    1a:75:07:d3:2c:2e:38:a2:90:7a:12:ef:73:a5:20:
                    e2:05:10:8f:58:a2:85:72:f9:61:38:ca:1d:62:34:
                    72:c9:20:7e:c6:23:69:5c:1f:51:be:c5:39:1e:29:
                    19:51:49:5f:91:9f:a8:7f:0e:b5:fc:8d:7b:91:50:
                    3c:45:e9:25:d2:ad:e8:19:5e:c0:3a:10:28:32:9c:
                    46:6f:a3:f5:f0:ec:d0:b0:c8:49:0f:39:ef:b8:2b:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E1:84:47:F7:68:4E:11:7B:24:46:A9:66:C2:C5:0E:CB:91:EF:63
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:11:be:a4:85:20:b8:21:1f:ff:c6:d4:d7:a4:6a:04:3e:
         cf:de:08:a4:81:43:0b:c3:a5:c9:f5:5d:fe:50:89:0c:09:39:
         0e:21:26:7d:dd:79:b2:1c:98:1f:e6:3f:e8:fb:8e:35:fc:e0:
         9d:01:3e:c3:5e:07:14:45:6f:42:c2:4d:83:a9:82:0f:f6:66:
         f5:28:a7:3b:b4:b4:5e:7a:1a:c3:5e:b4:37:86:3b:bf:02:4e:
         af:6a:51:d7:2f:64:88:09:61:c3:53:91:b1:7b:e4:b3:63:9c:
         9f:05:71:cd:a2:53:a1:6d:32:1e:cb:1b:ab:2d:66:da:e1:b9:
         38:d1:13:3e:ba:6f:c7:81:c5:83:ca:0e:25:72:cf:45:1b:8f:
         00:32:63:25:2d:59:18:00:63:bc:4e:96:3d:05:a8:32:db:11:
         84:d8:61:f1:0d:be:b0:da:11:6c:ab:6d:f1:57:d6:50:b6:dd:
         d1:42:8b:21:c5:4c:5c:db:2b:67:7d:d0:57:4c:b5:7f:ee:45:
         92:bb:e8:49:43:56:ef:52:70:82:ae:1d:ef:2e:b2:cc:2f:b7:
         d8:42:00:98:4a:79:e4:3c:06:df:9e:3a:34:5f:1e:2a:c3:e3:
         a3:c4:ce:29:09:3b:ab:bd:d7:56:42:b6:69:ec:4a:43:40:be:
         33:33:4c:c0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZz5htA086GelKi476Afec1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy
ZWEzNjEwHhcNMjYwMzE3MDIwMTI3WhcNMjYwMzE4MDIwMTI3WjAzMTEwLwYDVQQD
EyhhN2UxODQ0N2Y3Njg0ZTExN2IyNDQ2YTk2NmMyYzUwZWNiOTFlZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EerKm9Pt3OmWIebT5kRTOTKKe/X
uP5aY0qbYRRCIe24Ne4nLp/0Vqw1OS0PL0yxZ8eYPtnsdkZgpz3VR7bvzw0YFV0n
xwx+SgG3qws1EjEQxtZEDQT8TsCb7gSbMUS0Dd+jVmBfkDpDnsA3mXSZB4b4/QI7
PzsG8sVIST4yuJUgJ9vtRGuXp7KMhc/o8ZMMN/kEQ6HP1MMNhRRTx1AFCCed36Qa
dQfTLC44opB6Eu9zpSDiBRCPWKKFcvlhOModYjRyySB+xiNpXB9RvsU5HikZUUlf
kZ+ofw61/I17kVA8Rekl0q3oGV7AOhAoMpxGb6P18OzQsMhJDznvuCt/owIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKfhhEf3aE4ReyRGqWbCxQ7Lke9jMB8GA1UdIwQY
MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm
LWEzNjZkYTI1MWE4My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzljL2Y2MTU5MS03Y2E4LTRhOWEtODk5Zi1hMzY2ZGEyNTFh
ODMvMS8xLWk1eXFfZXhjb19hYXFDd1FUMklWSUV1bzJFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7ER
vqSFILghH//G1NekagQ+z94IpIFDC8OlyfVd/lCJDAk5DiEmfd15shyYH+Y/6PuO
NfzgnQE+w14HFEVvQsJNg6mCD/Zm9SinO7S0Xnoaw160N4Y7vwJOr2pR1y9kiAlh
w1ORsXvks2OcnwVxzaJToW0yHssbqy1m2uG5ONETPrpvx4HFg8oOJXLPRRuPADJj
JS1ZGABjvE6WPQWoMtsRhNhh8Q2+sNoRbKtt8VfWULbd0UKLIcVMXNsrZ33QV0y1
f+5FkrvoSUNW71Jwgq4d7y6yzC+32EIAmEp55DwG3546NF8eKsPjo8TOKQk7q73X
VkK2aexKQ0C+MzNMwA==
-----END CERTIFICATE-----
Generated at Tue Mar 17 06:17:30 2026 by rpki-client