Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          nuT+jVujJWprGUeLvuA+yD3pi6VTswmPP9oVLgRVAng=
Subject key identifier:   A9:62:1F:2D:E3:67:7C:4C:44:05:52:77:47:AB:B4:BD:A9:D7:28:09
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       019D371BDE7A9AE24CE26AC94B169E1CFCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          1428
Signing time:             Sun 29 Mar 2026 01:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:06 +0000
Files and hashes:         1: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (hash: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE=)
                          2: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (hash: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA=)
                          3: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: Xk6r2GmNWdY9CApRymRFTu/qdDdxwatArr9RYlgMzww=)
                          4: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (hash: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:de:7a:9a:e2:4c:e2:6a:c9:4b:16:9e:1c:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Mar 29 01:01:06 2026 GMT
            Not After : Mar 30 01:01:06 2026 GMT
        Subject: CN=a9621f2de3677c4c4405527747abb4bda9d72809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:ed:77:2c:1d:36:25:f2:5a:62:f5:52:0a:
                    63:71:c4:a6:68:1d:23:46:fc:fa:2f:a4:9b:cf:e2:
                    88:ab:21:a7:33:a9:5e:eb:10:66:27:fc:17:76:60:
                    84:c1:02:88:3b:f7:43:73:1f:e9:8f:84:71:a9:78:
                    05:07:56:95:db:9a:5c:29:2b:54:f6:07:77:92:1a:
                    93:45:5e:d9:47:b3:bd:a6:37:79:84:dc:c2:7c:3d:
                    29:cf:21:50:93:ca:fa:2a:b6:ab:69:f6:34:27:aa:
                    03:f3:fe:d0:24:71:df:71:d6:5d:3a:9a:00:0e:1e:
                    92:0b:f5:4d:c0:2f:ab:6f:3b:3f:73:63:56:57:29:
                    6f:ab:63:d7:98:42:2a:19:e8:b1:89:b7:3d:b3:6f:
                    b4:46:ce:46:b6:64:9b:95:65:29:ab:22:dc:93:c7:
                    33:79:eb:4a:3a:a9:5f:2a:66:be:86:06:1c:55:04:
                    52:21:0a:49:5a:af:29:88:41:60:c6:03:0b:78:5a:
                    5b:ef:2d:ba:9e:3d:2c:dd:f3:f8:a6:9c:9b:08:df:
                    13:1b:4e:a0:f6:4a:93:87:08:ea:c1:fa:b0:29:f9:
                    b5:41:8e:5c:6e:ad:89:ba:bc:ef:fe:36:9a:79:58:
                    b9:2c:84:3e:a4:71:0b:0d:49:9c:d5:97:5d:61:04:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:1F:2D:E3:67:7C:4C:44:05:52:77:47:AB:B4:BD:A9:D7:28:09
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:69:bc:5c:2d:a9:fa:31:7a:d3:d8:ac:03:d9:51:a5:f3:
         df:3e:38:7e:fa:c7:98:19:05:96:9e:60:20:9f:2b:b3:3e:68:
         3d:13:4c:86:28:09:6c:29:2b:88:53:fe:d4:87:5a:6f:9f:45:
         a4:55:61:82:17:d4:87:ab:a3:16:a4:2c:8c:0f:76:fc:65:74:
         4a:35:be:38:34:6a:f8:68:5e:95:84:b4:19:5c:87:11:94:f0:
         6e:40:95:b1:f8:e1:18:f8:5f:96:8b:22:0d:9d:ef:90:af:59:
         0e:2a:24:6c:e1:67:ce:df:69:f6:2a:f3:89:9a:f1:aa:56:1c:
         c8:b0:3d:23:69:ce:7f:3a:46:c0:66:95:fb:c3:b5:31:39:93:
         e2:95:2c:9e:c0:15:03:a4:d0:cf:59:49:48:7c:53:a4:c2:ee:
         e9:b0:93:b0:d4:ec:65:38:2d:a3:fb:12:a0:97:83:b5:41:c4:
         9e:41:b3:50:27:93:98:60:0d:b8:b8:5a:54:0b:b1:89:5e:e1:
         8f:0c:4d:d7:f6:07:00:99:c6:0d:ef:dc:4c:17:0f:4f:e7:d6:
         f8:0b:10:7d:4b:92:b3:bf:ae:56:c0:1f:c2:89:8b:a9:56:7b:
         a6:d6:07:28:38:6b:76:c2:99:ca:bb:03:eb:8a:c6:4e:97:b3:
         1d:6c:ee:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G956muJM4mrJSxaeHPz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2
OWQxMGUwHhcNMjYwMzI5MDEwMTA2WhcNMjYwMzMwMDEwMTA2WjAzMTEwLwYDVQQD
EyhhOTYyMWYyZGUzNjc3YzRjNDQwNTUyNzc0N2FiYjRiZGE5ZDcyODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgztdywdNiXyWmL1UgpjccSmaB0j
Rvz6L6Sbz+KIqyGnM6le6xBmJ/wXdmCEwQKIO/dDcx/pj4RxqXgFB1aV25pcKStU
9gd3khqTRV7ZR7O9pjd5hNzCfD0pzyFQk8r6KrarafY0J6oD8/7QJHHfcdZdOpoA
Dh6SC/VNwC+rbzs/c2NWVylvq2PXmEIqGeixibc9s2+0Rs5GtmSblWUpqyLck8cz
eetKOqlfKma+hgYcVQRSIQpJWq8piEFgxgMLeFpb7y26nj0s3fP4ppybCN8TG06g
9kqThwjqwfqwKfm1QY5cbq2Jurzv/jaaeVi5LIQ+pHELDUmc1ZddYQRAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKliHy3jZ3xMRAVSd0ertL2p1ygJMB8GA1UdIwQY
MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt
OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4
LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7JpvFwt
qfoxetPYrAPZUaXz3z44fvrHmBkFlp5gIJ8rsz5oPRNMhigJbCkriFP+1Idab59F
pFVhghfUh6ujFqQsjA92/GV0SjW+ODRq+GhelYS0GVyHEZTwbkCVsfjhGPhflosi
DZ3vkK9ZDiokbOFnzt9p9irziZrxqlYcyLA9I2nOfzpGwGaV+8O1MTmT4pUsnsAV
A6TQz1lJSHxTpMLu6bCTsNTsZTgto/sSoJeDtUHEnkGzUCeTmGANuLhaVAuxiV7h
jwxN1/YHAJnGDe/cTBcPT+fW+AsQfUuSs7+uVsAfwomLqVZ7ptYHKDhrdsKZyrsD
64rGTpezHWzu5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client