Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          isrJ9h0npi9m083aqAVStnEc1dtyW1mMqMLnP2/GJv4=
Subject key identifier:   BD:78:55:19:B9:4B:C1:88:A1:E2:D6:67:2B:BD:C0:41:6B:09:46:F3
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019D38D3D789C64F39977DA8EC6CD1A155CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          1897
Signing time:             Sun 29 Mar 2026 09:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:40 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: BijH9HPw9BZ6hgek0lUVZY++VL1PwtwzSYjvv3mNykw=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa (hash: fXQllw8VZVYHGOPsqntwHwX5QpNIrlOnadEQ+JteA+I=)
                          6: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:d7:89:c6:4f:39:97:7d:a8:ec:6c:d1:a1:55:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Mar 29 09:01:40 2026 GMT
            Not After : Mar 30 09:01:40 2026 GMT
        Subject: CN=bd785519b94bc188a1e2d6672bbdc0416b0946f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:5b:6c:c8:65:f3:9a:47:ad:ad:ff:c5:4c:
                    ff:8a:22:b2:e3:ae:d4:2d:fa:58:d9:10:d3:d7:82:
                    81:87:f9:33:0c:e8:7e:41:4d:fb:98:08:56:12:1b:
                    ef:cf:9c:11:fc:7e:ca:b8:28:69:c3:de:42:f3:b1:
                    5d:97:f4:28:8a:45:bc:dd:f9:df:30:ac:a7:29:04:
                    ec:9a:a8:57:8c:05:7d:45:c5:af:0a:6b:e5:03:33:
                    4c:1a:9e:27:da:ef:78:23:b7:10:d8:1f:4d:eb:50:
                    00:bf:b0:c6:e1:f3:d6:70:53:a1:32:66:7e:85:62:
                    9b:89:0f:3f:b9:ee:92:fe:fe:df:27:24:1e:93:ac:
                    f9:c9:be:a3:56:ec:ba:08:da:19:03:35:d1:9e:5f:
                    82:f4:76:b2:25:22:1b:f3:e1:fa:e0:f9:9b:c5:c1:
                    af:b7:00:75:60:b9:40:80:3e:ff:68:52:f5:14:29:
                    6f:ac:4f:8e:88:81:e8:d6:04:9a:a4:29:bf:6f:3f:
                    a2:fa:01:78:fc:d7:86:39:d6:ca:af:f8:67:32:62:
                    2c:c5:e1:1f:03:e1:c8:8e:e3:97:91:e7:da:be:33:
                    56:76:f8:fb:06:8f:eb:d7:c5:9a:40:6e:06:23:ad:
                    c2:46:de:e0:39:c0:bd:4f:36:13:e3:b9:14:97:43:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:55:19:B9:4B:C1:88:A1:E2:D6:67:2B:BD:C0:41:6B:09:46:F3
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:09:af:94:1a:ad:39:f0:36:95:3b:ba:b7:84:75:fa:08:
         1c:84:93:df:2e:43:74:b8:59:62:87:45:b2:db:2c:c9:56:77:
         15:d1:cc:ed:af:20:73:39:0e:dd:d2:f9:e8:22:d5:57:b3:96:
         68:84:ec:a5:57:c3:c0:19:5f:df:04:39:05:e7:8a:31:db:63:
         72:4f:fc:69:0b:e3:4e:b5:90:9b:52:d5:77:2a:5e:b5:e6:37:
         ae:d7:da:f5:01:01:64:4e:56:c9:b3:cc:15:7c:01:d3:59:1b:
         7e:cb:d0:58:0a:6f:fc:fb:5f:80:d4:7e:c2:f8:3e:e4:c5:a3:
         8b:9a:b9:64:ab:27:ab:b9:42:03:c6:d0:21:d4:f2:7a:70:42:
         ef:37:03:69:86:f7:e0:03:76:e7:03:b1:11:6a:a4:62:3d:3c:
         58:81:48:3a:9f:02:74:54:2e:6f:b3:44:56:8b:f1:1b:de:21:
         c4:3c:66:2b:f0:b4:07:49:55:f4:2f:08:2e:5d:59:c2:bb:13:
         e7:61:72:df:19:b2:7b:4e:e2:be:bd:8f:94:2e:9a:ba:6c:4b:
         f5:62:b2:31:6c:b9:fc:05:57:31:32:a9:ed:17:0f:2b:fc:7c:
         28:b7:0f:d4:2d:f0:7d:9d:de:88:ce:0c:f2:d9:8e:af:e0:9a:
         dd:a5:57:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409eJxk85l32o7GzRoVXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjYwMzI5MDkwMTQwWhcNMjYwMzMwMDkwMTQwWjAzMTEwLwYDVQQD
EyhiZDc4NTUxOWI5NGJjMTg4YTFlMmQ2NjcyYmJkYzA0MTZiMDk0NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru5bbMhl85pHra3/xUz/iiKy467U
LfpY2RDT14KBh/kzDOh+QU37mAhWEhvvz5wR/H7KuChpw95C87Fdl/QoikW83fnf
MKynKQTsmqhXjAV9RcWvCmvlAzNMGp4n2u94I7cQ2B9N61AAv7DG4fPWcFOhMmZ+
hWKbiQ8/ue6S/v7fJyQek6z5yb6jVuy6CNoZAzXRnl+C9HayJSIb8+H64PmbxcGv
twB1YLlAgD7/aFL1FClvrE+OiIHo1gSapCm/bz+i+gF4/NeGOdbKr/hnMmIsxeEf
A+HIjuOXkefavjNWdvj7Bo/r18WaQG4GI63CRt7gOcC9TzYT47kUl0NpvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL14VRm5S8GIoeLWZyu9wEFrCUbzMB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc0Jr5Qa
rTnwNpU7ureEdfoIHIST3y5DdLhZYodFstssyVZ3FdHM7a8gczkO3dL56CLVV7OW
aITspVfDwBlf3wQ5BeeKMdtjck/8aQvjTrWQm1LVdypeteY3rtfa9QEBZE5WybPM
FXwB01kbfsvQWApv/PtfgNR+wvg+5MWji5q5ZKsnq7lCA8bQIdTyenBC7zcDaYb3
4AN25wOxEWqkYj08WIFIOp8CdFQub7NEVovxG94hxDxmK/C0B0lV9C8ILl1ZwrsT
52Fy3xmye07ivr2PlC6aumxL9WKyMWy5/AVXMTKp7RcPK/x8KLcP1C3wfZ3eiM4M
8tmOr+Ca3aVXYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:51 2026 by rpki-client