Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
File:                     _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json)
Hash identifier:          DxcX+s+kfhVv6M1OA5S6rcX54LEJpmYtENqJBF6n+hc=
Subject key identifier:   25:33:77:27:32:5F:B4:C1:26:01:4B:85:33:2B:8C:BF:78:9C:A3:EC
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Certificate issuer:       /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial:       019D389BC90DCBB3E6A3AECBBEA9B59C8C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
Manifest number:          15CE
Signing time:             Sun 29 Mar 2026 08:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:26 +0000
Files and hashes:         1: D2aLgIkWm2axcGDcGw3Kc6UP1GQ.roa (hash: UQaV0l2AX0jwzb/CqymH+ywCUifIbA20+GngTMZKlqk=)
                          2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: jCUp0kCfOnXa0BiJjxe9tCpCp78YsTUHg0MIwSK70KE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:c9:0d:cb:b3:e6:a3:ae:cb:be:a9:b5:9c:8c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
        Validity
            Not Before: Mar 29 08:00:26 2026 GMT
            Not After : Mar 30 08:00:26 2026 GMT
        Subject: CN=25337727325fb4c126014b85332b8cbf789ca3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:78:73:60:af:9c:67:ed:80:95:1e:4e:72:
                    cc:c7:84:b7:d7:57:0c:32:66:37:af:79:c5:67:b5:
                    49:91:3d:96:47:1c:b5:3b:6c:18:9b:fe:13:c8:2a:
                    ee:39:7f:a2:fe:4d:26:dc:cd:21:f7:5e:c5:79:0a:
                    f8:fd:f2:a4:ca:70:01:4e:a3:0d:7b:67:1b:54:92:
                    13:96:fe:d4:e6:33:67:ea:df:36:c4:5d:5b:b7:4f:
                    6b:36:1d:e6:de:45:66:72:55:5c:70:f2:bc:f0:82:
                    2f:82:aa:89:11:6a:59:56:ca:b4:ca:12:79:d1:87:
                    90:76:68:26:07:f2:02:82:2d:48:39:33:35:a9:ff:
                    d8:9e:c8:e0:e3:ab:91:36:01:dd:2b:1b:2f:04:b2:
                    a6:05:fe:c8:a7:e6:de:72:f9:df:b0:da:3f:52:c5:
                    e1:56:a8:93:b2:2a:f5:8c:5f:16:2f:23:54:ea:c2:
                    31:60:ac:37:ee:61:2b:42:fb:f5:0e:ef:82:98:d1:
                    ca:ea:4c:af:fe:b4:a3:b6:0c:16:36:65:5b:d2:21:
                    db:82:7b:94:86:da:67:30:64:e0:bc:fa:93:e1:db:
                    15:5d:31:ce:0f:d3:e4:23:c2:4a:d7:c9:35:d4:49:
                    c9:c2:a5:dd:98:33:69:c8:42:83:16:88:56:98:a8:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:77:27:32:5F:B4:C1:26:01:4B:85:33:2B:8C:BF:78:9C:A3:EC
            X509v3 Authority Key Identifier:
                keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:21:c3:04:45:53:93:99:cc:7b:d4:07:da:69:f4:12:65:98:
         0e:1d:ea:69:c7:83:3c:0a:a1:91:86:4e:9c:ff:65:62:60:29:
         aa:96:5b:52:c1:22:d5:e8:e3:1d:28:c1:f0:6f:9e:cf:e2:b2:
         89:77:8d:de:f2:94:1d:90:79:af:dd:de:aa:a0:d0:d1:bf:e7:
         54:54:77:9c:3b:c3:17:39:52:47:1a:f5:8f:53:fe:ab:3e:c7:
         9b:db:46:72:9d:c1:04:77:77:93:5d:ca:d5:f0:0b:62:0f:4a:
         12:88:17:96:57:08:05:09:b0:a3:55:bd:b1:0a:91:15:b5:c2:
         64:b9:92:ef:f4:e3:34:98:e4:4e:88:9e:16:59:cc:b4:36:bb:
         ac:67:a1:5b:cf:ac:d2:9e:61:65:bb:f4:d0:0b:f4:61:68:b3:
         77:9a:7a:bb:44:22:5a:35:4a:58:d3:fe:1c:6c:a5:ca:0e:b6:
         7f:12:fa:d8:7b:27:49:62:2e:04:07:08:e6:ab:92:03:ee:09:
         8c:39:94:14:86:d8:7e:8b:97:f4:b3:f5:42:84:74:ea:6f:59:
         12:f3:ba:0f:ff:77:e8:ee:ab:e8:b7:a8:d4:b4:0b:1b:bc:75:
         4a:97:9b:d1:c9:ac:1d:2c:c0:e5:b3:b7:28:48:bb:df:04:7a:
         43:de:1a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8kNy7Pmo67Lvqm1nIxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDcyZWUyNTE1YTA3YzY2N2UxYzVjZmRjMDIxMGU2NTgx
YjA5N2IwHhcNMjYwMzI5MDgwMDI2WhcNMjYwMzMwMDgwMDI2WjAzMTEwLwYDVQQD
EygyNTMzNzcyNzMyNWZiNGMxMjYwMTRiODUzMzJiOGNiZjc4OWNhM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzt4c2CvnGftgJUeTnLMx4S311cM
MmY3r3nFZ7VJkT2WRxy1O2wYm/4TyCruOX+i/k0m3M0h917FeQr4/fKkynABTqMN
e2cbVJITlv7U5jNn6t82xF1bt09rNh3m3kVmclVccPK88IIvgqqJEWpZVsq0yhJ5
0YeQdmgmB/ICgi1IOTM1qf/Ynsjg46uRNgHdKxsvBLKmBf7Ip+becvnfsNo/UsXh
VqiTsir1jF8WLyNU6sIxYKw37mErQvv1Du+CmNHK6kyv/rSjtgwWNmVb0iHbgnuU
htpnMGTgvPqT4dsVXTHOD9PkI8JK18k11EnJwqXdmDNpyEKDFohWmKiFwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUzdycyX7TBJgFLhTMrjL94nKPsMB8GA1UdIwQY
MBaAFPwHLuJRWgfGZ+HFz9wCEOZYGwl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYt
YzRiY2YxNDcxYjVhLzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYtYzRiY2YxNDcxYjVh
LzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECHDBEVT
k5nMe9QH2mn0EmWYDh3qaceDPAqhkYZOnP9lYmApqpZbUsEi1ejjHSjB8G+ez+Ky
iXeN3vKUHZB5r93eqqDQ0b/nVFR3nDvDFzlSRxr1j1P+qz7Hm9tGcp3BBHd3k13K
1fALYg9KEogXllcIBQmwo1W9sQqRFbXCZLmS7/TjNJjkToieFlnMtDa7rGehW8+s
0p5hZbv00Av0YWizd5p6u0QiWjVKWNP+HGylyg62fxL62HsnSWIuBAcI5quSA+4J
jDmUFIbYfouX9LP1QoR06m9ZEvO6D/936O6r6Leo1LQLG7x1Speb0cmsHSzA5bO3
KEi73wR6Q94aTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client