Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          DHS2QdyCPN16zmktwy5Q65WLfBb+PO6dEKmifXa6l3Q=
Subject key identifier:   41:B0:D1:0A:A7:57:EE:9C:D5:28:91:BF:7F:DD:13:44:82:B8:43:58
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       019CE4ECA06AD0B2E9949A876878ACC2B009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          1863
Signing time:             Fri 13 Mar 2026 02:00:38 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:38 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:38 +0000
Files and hashes:         1: Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa (hash: yU2DLGFjN9TCcYSlsrT9XWj7qaKv71819e5tIEo7sAw=)
                          2: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: MLv3zbyDpXTY5Xk7QdLk2zYjM9KNvUKSamopyWpa/1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:a0:6a:d0:b2:e9:94:9a:87:68:78:ac:c2:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: Mar 13 02:00:38 2026 GMT
            Not After : Mar 14 02:00:38 2026 GMT
        Subject: CN=41b0d10aa757ee9cd52891bf7fdd134482b84358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:f1:7e:a0:81:8c:e8:05:a1:ab:3f:e4:24:
                    fa:e3:83:ae:b5:ba:ca:54:c2:58:06:7b:e9:51:58:
                    28:39:53:ad:b8:3c:04:7a:aa:c0:06:0f:39:d3:4c:
                    c9:3b:28:88:cb:14:76:37:09:35:db:8e:4f:9d:79:
                    1d:1a:e3:d7:50:34:3c:0a:b6:ec:40:2d:3f:eb:c6:
                    8b:96:b6:7d:4f:6b:a1:16:e9:87:0c:22:fb:ce:a9:
                    46:7f:36:c7:8a:9f:42:70:4a:1e:55:65:f4:38:5a:
                    8a:fd:3c:30:74:a2:ea:3d:ee:46:98:36:c3:98:1a:
                    e6:fb:94:47:e0:db:d5:ad:6a:04:ed:6e:0c:38:cb:
                    16:a7:38:da:a1:11:1e:6e:7f:63:29:bd:82:6d:e2:
                    81:70:cc:72:f1:ac:40:a4:4a:82:07:1c:38:6a:c7:
                    31:38:2f:9d:42:c6:60:c5:4e:ee:a9:70:d2:76:26:
                    74:37:e1:a4:82:a1:92:18:5f:30:ef:86:12:1f:1d:
                    6b:b4:47:aa:4b:7c:47:cd:f8:27:9d:84:a7:bd:52:
                    02:ee:97:d2:4f:c5:51:77:f6:5c:f5:6b:b5:e7:3f:
                    4a:50:6a:0e:35:6f:20:41:7d:e5:c2:e8:b8:fe:e0:
                    09:c3:b6:94:ca:c1:9d:e5:d3:18:ab:32:61:6a:14:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:D1:0A:A7:57:EE:9C:D5:28:91:BF:7F:DD:13:44:82:B8:43:58
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:21:59:5f:2d:35:4f:3b:0d:9b:c7:3e:0d:88:e8:9d:d6:
         44:25:e5:5b:b1:cd:08:55:ff:e4:7c:3f:06:fc:0b:b6:f1:92:
         44:b5:8e:a1:b3:84:eb:46:4c:24:67:09:7b:ed:05:8a:06:69:
         85:ce:77:27:35:ea:3d:62:62:99:24:e8:71:47:59:b0:5c:26:
         fb:b2:b0:2e:4d:30:06:c8:f6:ac:69:8a:82:6c:70:d2:b3:de:
         42:89:57:c1:9c:0c:9c:db:0c:8a:03:88:a6:8b:d3:22:35:65:
         88:c0:9b:53:c9:8f:e1:25:87:ff:59:02:24:99:39:1d:a3:f3:
         81:a1:f2:e4:f1:8e:fa:c9:21:d5:79:a0:97:2c:49:4f:65:02:
         30:eb:b3:eb:24:ae:c3:d2:63:26:e7:53:aa:79:b2:8b:7a:88:
         27:59:d2:25:ff:14:2a:fc:f7:8e:fe:0a:9d:97:a1:75:0c:22:
         6b:2c:4d:2f:1c:c2:ec:29:85:e8:36:b9:ec:76:e5:9a:2b:42:
         52:4d:f7:c2:a1:e5:72:15:fb:93:07:d9:51:0f:14:0f:97:2c:
         c8:a1:a9:53:09:68:39:91:9d:b9:c7:08:5d:3f:53:90:70:65:
         8d:f9:51:99:32:3e:78:74:df:82:4c:d4:08:88:9b:a7:87:a4:
         a0:99:e7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7KBq0LLplJqHaHiswrAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl
YTlmODgwHhcNMjYwMzEzMDIwMDM4WhcNMjYwMzE0MDIwMDM4WjAzMTEwLwYDVQQD
Eyg0MWIwZDEwYWE3NTdlZTljZDUyODkxYmY3ZmRkMTM0NDgyYjg0MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSTxfqCBjOgFoas/5CT644OutbrK
VMJYBnvpUVgoOVOtuDwEeqrABg8500zJOyiIyxR2Nwk1245PnXkdGuPXUDQ8Crbs
QC0/68aLlrZ9T2uhFumHDCL7zqlGfzbHip9CcEoeVWX0OFqK/TwwdKLqPe5GmDbD
mBrm+5RH4NvVrWoE7W4MOMsWpzjaoREebn9jKb2CbeKBcMxy8axApEqCBxw4ascx
OC+dQsZgxU7uqXDSdiZ0N+GkgqGSGF8w74YSHx1rtEeqS3xHzfgnnYSnvVIC7pfS
T8VRd/Zc9Wu15z9KUGoONW8gQX3lwui4/uAJw7aUysGd5dMYqzJhahRklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGw0QqnV+6c1SiRv3/dE0SCuENYMB8GA1UdIwQY
MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt
NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw
LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZshWV8t
NU87DZvHPg2I6J3WRCXlW7HNCFX/5Hw/BvwLtvGSRLWOobOE60ZMJGcJe+0FigZp
hc53JzXqPWJimSTocUdZsFwm+7KwLk0wBsj2rGmKgmxw0rPeQolXwZwMnNsMigOI
povTIjVliMCbU8mP4SWH/1kCJJk5HaPzgaHy5PGO+skh1XmglyxJT2UCMOuz6ySu
w9JjJudTqnmyi3qIJ1nSJf8UKvz3jv4KnZehdQwiayxNLxzC7CmF6Da57HblmitC
Uk33wqHlchX7kwfZUQ8UD5csyKGpUwloOZGduccIXT9TkHBljflRmTI+eHTfgkzU
CIibp4ekoJnngg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:35 2026 by rpki-client