Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File:                     SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier:          9avcIs0BAaG6MwMLOMK83WaZT2xYOn2cRATzIj6HzRA=
Subject key identifier:   CC:EA:8B:D8:86:A7:BE:58:EA:D1:BE:FC:37:12:3A:ED:52:91:BE:F0
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer:       /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial:       019D0441C18053C2F764569768C8B2C5A476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number:          1646
Signing time:             Thu 19 Mar 2026 04:01:51 +0000
Manifest this update:     Thu 19 Mar 2026 04:01:51 +0000
Manifest next update:     Fri 20 Mar 2026 04:01:51 +0000
Files and hashes:         1: OislEKggcD7E5vmHMkHdlxKY_PU.roa (hash: nRjbdFsuY+3HF6/aKivZHmFTEVBOZaLeegL6y1Mg1XI=)
                          2: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: nOGweg42z1xRyoh4A6U3O54DyTb7Q6DKdAznDHcNR9w=)
                          3: UEFaeg6w-_BLecRaFg0sOx9sg6M.roa (hash: 9IROvPnjTuXAULj8Qy8+zmh7VrKhPM1ptKS41BLzE2g=)
                          4: ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa (hash: 6CDsrf9c3/gJRcfyyOm7TzYrVAd5utDrsPb/K0wVSTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:41:c1:80:53:c2:f7:64:56:97:68:c8:b2:c5:a4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
        Validity
            Not Before: Mar 19 04:01:51 2026 GMT
            Not After : Mar 20 04:01:51 2026 GMT
        Subject: CN=ccea8bd886a7be58ead1befc37123aed5291bef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:36:49:2a:3f:b0:7a:d2:59:8d:d2:1b:78:
                    0d:7b:bf:7a:5d:71:dd:44:dc:55:4f:f5:bb:c2:af:
                    f7:ef:70:98:72:92:57:43:ec:6c:24:f4:4c:13:f2:
                    ac:70:4b:f9:2c:0e:cf:5b:7c:06:5c:a1:28:ee:af:
                    ff:b4:76:47:cc:d6:98:8b:cc:1e:9c:e1:e4:d3:3e:
                    f1:96:8e:8f:bd:4a:82:33:0d:f4:c3:eb:70:1d:d4:
                    f5:ab:44:0e:9c:0f:ee:f9:f5:aa:6a:5d:84:cb:46:
                    00:96:89:ff:86:4d:8a:61:87:2a:93:64:74:85:a2:
                    19:64:4b:38:95:25:b1:2d:df:98:fb:90:a0:67:f4:
                    71:ce:d7:6c:ee:a2:29:fa:36:8d:b5:89:62:83:83:
                    a4:53:41:a5:fb:4a:df:8f:31:31:c1:1e:26:de:f5:
                    fb:d5:d7:81:71:e3:ca:5f:e1:ca:18:6d:81:eb:67:
                    76:0f:c1:1c:44:ec:c3:78:44:59:cf:93:8e:23:72:
                    c1:c9:d8:8d:6a:bd:f4:ea:54:41:23:b2:de:c1:d3:
                    ac:ef:69:a2:79:90:64:c3:83:dd:3e:ef:a6:57:71:
                    4a:83:99:7d:57:99:b7:a0:86:6d:ee:26:62:2a:74:
                    c5:3b:fd:97:10:ae:2e:77:07:ce:d9:ff:6f:34:bc:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:8B:D8:86:A7:BE:58:EA:D1:BE:FC:37:12:3A:ED:52:91:BE:F0
            X509v3 Authority Key Identifier:
                keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:26:99:ec:52:0d:2e:69:fe:ed:4f:ea:2b:bc:b0:de:cc:64:
         20:f2:a5:22:d4:dd:c4:1b:cc:41:6f:67:ad:27:0d:51:2d:93:
         ef:eb:a7:4d:05:8d:12:de:68:b5:f8:be:30:a9:2f:48:2c:e1:
         7d:f6:d2:26:4b:9c:10:6a:e2:57:87:6b:d9:9b:90:e3:5b:be:
         05:ad:72:dd:ee:19:f7:fa:9b:43:3b:2a:05:ff:70:65:3d:a9:
         f5:46:94:6f:7e:10:6e:f4:bd:39:dc:1b:e9:75:7d:91:96:fe:
         96:23:08:90:84:2e:a2:66:7b:86:55:5f:e0:6c:99:0d:bf:5b:
         44:85:03:9d:e6:3f:42:8f:f3:6c:83:42:b6:b2:f9:37:55:74:
         d2:f2:f2:eb:4c:2f:0f:78:14:b5:52:aa:78:fd:c7:88:4b:5e:
         34:ca:99:ed:59:43:34:f4:53:30:1c:00:58:b1:15:bd:ce:14:
         bd:ef:f3:69:c8:20:db:f7:65:24:7b:4f:04:13:b6:3c:57:3a:
         e0:f5:a4:70:e3:a4:79:85:ca:82:d8:6d:1a:ae:fb:a9:82:7c:
         33:3c:fe:32:c7:f1:cf:40:ed:92:c3:3c:b6:63:71:62:15:cf:
         aa:8c:b6:af:7f:51:1f:f8:b8:9a:23:bd:7a:ff:d8:68:1d:2e:
         32:d1:7a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0EQcGAU8L3ZFaXaMiyxaR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh
ZDBlMWUwHhcNMjYwMzE5MDQwMTUxWhcNMjYwMzIwMDQwMTUxWjAzMTEwLwYDVQQD
EyhjY2VhOGJkODg2YTdiZTU4ZWFkMWJlZmMzNzEyM2FlZDUyOTFiZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwII2SSo/sHrSWY3SG3gNe796XXHd
RNxVT/W7wq/373CYcpJXQ+xsJPRME/KscEv5LA7PW3wGXKEo7q//tHZHzNaYi8we
nOHk0z7xlo6PvUqCMw30w+twHdT1q0QOnA/u+fWqal2Ey0YAlon/hk2KYYcqk2R0
haIZZEs4lSWxLd+Y+5CgZ/Rxztds7qIp+jaNtYlig4OkU0Gl+0rfjzExwR4m3vX7
1deBcePKX+HKGG2B62d2D8EcROzDeERZz5OOI3LBydiNar306lRBI7LewdOs72mi
eZBkw4PdPu+mV3FKg5l9V5m3oIZt7iZiKnTFO/2XEK4udwfO2f9vNLzF6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzqi9iGp75Y6tG+/DcSOu1Skb7wMB8GA1UdIwQY
MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt
YWU2Yjg0YzI4MTk1LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1
LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyaZ7FIN
Lmn+7U/qK7yw3sxkIPKlItTdxBvMQW9nrScNUS2T7+unTQWNEt5otfi+MKkvSCzh
ffbSJkucEGriV4dr2ZuQ41u+Ba1y3e4Z9/qbQzsqBf9wZT2p9UaUb34QbvS9Odwb
6XV9kZb+liMIkIQuomZ7hlVf4GyZDb9bRIUDneY/Qo/zbINCtrL5N1V00vLy60wv
D3gUtVKqeP3HiEteNMqZ7VlDNPRTMBwAWLEVvc4Uve/zacgg2/dlJHtPBBO2PFc6
4PWkcOOkeYXKgthtGq77qYJ8Mzz+Msfxz0DtksM8tmNxYhXPqoy2r39RH/i4miO9
ev/YaB0uMtF6pg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:22 2026 by rpki-client