Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File:                     1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier:          kYK3ObHVp39Aly31O0kbmMnEZN0zZtGKwd+QgEE8ja8=
Subject key identifier:   41:8C:F9:4E:9D:93:4A:6A:82:36:20:CF:72:46:56:59:07:7D:74:22
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer:       /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial:       019D0FD7D6045C08407E81D2254A2621A895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number:          1879
Signing time:             Sat 21 Mar 2026 10:01:36 +0000
Manifest this update:     Sat 21 Mar 2026 10:01:36 +0000
Manifest next update:     Sun 22 Mar 2026 10:01:36 +0000
Files and hashes:         1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: 1N4Tpm9z5khEMZ0afFXPIAjiaTbIXgGgYD7IbkyBL6s=)
                          2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0f:d7:d6:04:5c:08:40:7e:81:d2:25:4a:26:21:a8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
        Validity
            Not Before: Mar 21 10:01:36 2026 GMT
            Not After : Mar 22 10:01:36 2026 GMT
        Subject: CN=418cf94e9d934a6a823620cf72465659077d7422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:dc:d8:24:c5:21:ee:41:fe:30:aa:a4:2e:
                    c0:39:ac:fb:53:04:fa:88:38:ee:13:00:03:c5:ff:
                    e3:4b:ee:f7:76:25:17:f9:52:a0:70:1c:2a:97:35:
                    d9:43:3e:44:cc:48:65:ab:8e:06:9c:d2:a8:7d:97:
                    2a:f1:26:24:a7:e3:43:44:f1:e8:84:f9:06:b0:2a:
                    0b:aa:5d:8b:33:98:93:76:1d:ce:8e:ce:bd:d7:47:
                    98:20:d8:04:46:6e:3a:13:50:7d:f7:78:83:29:b5:
                    f5:9b:03:fa:fc:c8:bb:16:95:df:6a:e5:06:fe:fc:
                    1f:36:a6:aa:93:48:b6:15:8d:24:0b:2d:44:23:37:
                    9f:dc:b5:38:da:e4:a9:16:65:20:e0:19:2c:82:52:
                    ee:64:2e:11:d4:bc:73:c5:3e:d7:d2:98:06:7e:3a:
                    79:96:29:03:e6:50:28:a4:81:64:07:6c:d5:70:7e:
                    88:02:c1:2a:12:c5:c2:f8:49:4a:6e:4d:1e:2f:e4:
                    7e:fc:5d:cc:1d:49:27:44:13:6f:16:18:b7:a3:93:
                    31:ed:b8:6b:01:8b:0a:e7:9f:7c:6f:54:92:d3:eb:
                    b4:a8:f6:76:8e:38:9f:2a:32:e8:05:db:28:28:e0:
                    10:1b:87:b7:f7:51:47:e8:e5:56:f7:97:41:cd:da:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:F9:4E:9D:93:4A:6A:82:36:20:CF:72:46:56:59:07:7D:74:22
            X509v3 Authority Key Identifier:
                keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:56:bd:dd:6a:19:24:5e:4d:36:ea:e1:1b:02:ba:85:80:
         c9:5f:ac:d3:54:af:0a:be:da:c1:c4:53:c8:da:8c:6b:cc:a2:
         bf:f3:08:54:a0:25:98:77:b0:c9:8f:e6:7f:01:a7:32:ce:f2:
         c7:16:c9:47:bd:fd:61:0e:25:0f:7e:dc:d2:bc:8b:da:c4:dd:
         7d:ab:4f:15:85:d0:17:70:3c:62:a8:5c:38:66:72:b6:5c:a7:
         f8:67:44:60:0c:5b:0a:f4:53:db:14:5c:95:e7:5f:8c:9e:58:
         af:85:3a:e6:c1:de:38:75:6a:c9:bc:16:82:d2:97:f5:f7:f0:
         6b:e8:06:fd:84:95:1c:a9:65:d0:35:32:77:09:67:02:90:ce:
         df:54:27:d8:98:4e:09:b3:7f:93:d3:09:78:68:ac:72:34:33:
         d9:3b:a6:4d:05:9e:0f:4c:90:10:8c:08:61:52:b8:11:d8:3f:
         ff:83:ff:85:3b:93:92:ca:6d:62:49:58:5a:01:7e:cf:57:ca:
         6c:b2:28:c7:4a:73:da:31:7e:28:ba:11:23:14:1a:9d:a8:f9:
         d7:0a:47:7f:f7:9a:d0:7f:0e:89:8a:97:11:04:75:a1:32:b4:
         0d:3e:5a:24:dd:07:44:0e:6c:a7:6f:a1:fd:d3:65:93:57:bd:
         88:71:4d:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0P19YEXAhAfoHSJUomIaiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5
NzFmOTcwHhcNMjYwMzIxMTAwMTM2WhcNMjYwMzIyMTAwMTM2WjAzMTEwLwYDVQQD
Eyg0MThjZjk0ZTlkOTM0YTZhODIzNjIwY2Y3MjQ2NTY1OTA3N2Q3NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gbc2CTFIe5B/jCqpC7AOaz7UwT6
iDjuEwADxf/jS+73diUX+VKgcBwqlzXZQz5EzEhlq44GnNKofZcq8SYkp+NDRPHo
hPkGsCoLql2LM5iTdh3Ojs6910eYINgERm46E1B993iDKbX1mwP6/Mi7FpXfauUG
/vwfNqaqk0i2FY0kCy1EIzef3LU42uSpFmUg4BksglLuZC4R1LxzxT7X0pgGfjp5
likD5lAopIFkB2zVcH6IAsEqEsXC+ElKbk0eL+R+/F3MHUknRBNvFhi3o5Mx7bhr
AYsK5598b1SS0+u0qPZ2jjifKjLoBdsoKOAQG4e391FH6OVW95dBzdpb4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEGM+U6dk0pqgjYgz3JGVlkHfXQiMB8GA1UdIwQY
MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4
LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj
MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQVW
vd1qGSReTTbq4RsCuoWAyV+s01SvCr7awcRTyNqMa8yiv/MIVKAlmHewyY/mfwGn
Ms7yxxbJR739YQ4lD37c0ryL2sTdfatPFYXQF3A8YqhcOGZytlyn+GdEYAxbCvRT
2xRcledfjJ5Yr4U65sHeOHVqybwWgtKX9ffwa+gG/YSVHKll0DUydwlnApDO31Qn
2JhOCbN/k9MJeGiscjQz2TumTQWeD0yQEIwIYVK4Edg//4P/hTuTksptYklYWgF+
z1fKbLIox0pz2jF+KLoRIxQanaj51wpHf/ea0H8OiYqXEQR1oTK0DT5aJN0HRA5s
p2+h/dNlk1e9iHFNAw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:19:02 2026 by rpki-client