Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          JzXj6DMA2SqIA0Ei7e9rV07vGQA3TZMTkq34t61WKYU=
Subject key identifier:   FE:7B:FE:8A:3D:AC:0E:94:88:92:BE:FE:16:43:D1:31:58:5E:5F:46
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       019D382DE764731D3FD26CB06469E39B01D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 06:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:25 +0000
Files and hashes:         1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
                          2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: 80almT0LpfHV2KV5gpnDKCU5BZ+PVIJc2a8vKxSerQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:e7:64:73:1d:3f:d2:6c:b0:64:69:e3:9b:01:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Mar 29 06:00:25 2026 GMT
            Not After : Mar 30 06:00:25 2026 GMT
        Subject: CN=fe7bfe8a3dac0e948892befe1643d131585e5f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:a7:73:47:56:9d:82:33:2e:fe:54:70:29:
                    fd:b8:70:02:ac:67:f6:68:d4:8a:0b:f6:c0:c3:30:
                    db:23:a3:fa:32:58:9b:e3:53:99:c5:3e:14:9e:aa:
                    74:87:b6:c3:69:eb:d1:4c:ae:f5:33:c7:09:59:c6:
                    a2:2c:16:e2:ab:cd:95:bf:6d:76:36:7d:ee:1d:9a:
                    7e:f0:95:2c:d1:81:41:f4:39:3e:5b:99:b1:5b:bf:
                    b7:7a:70:da:c8:7c:bd:bd:e0:02:02:2b:4a:37:d0:
                    c9:b0:98:78:f5:ae:4e:8e:db:43:c2:f9:38:77:b0:
                    df:19:a7:e0:87:68:74:27:a4:60:31:3a:29:69:34:
                    65:91:1d:ef:e2:69:55:03:1c:a3:75:e8:fc:42:96:
                    71:69:f8:16:fb:cf:42:62:44:d0:ec:d5:31:f3:dd:
                    ab:f4:b9:0c:c3:c2:05:eb:55:9c:e2:76:2f:c4:fd:
                    9a:1c:10:d0:8b:23:9e:b3:83:ba:78:73:8f:21:f9:
                    e5:52:db:3a:32:37:bd:72:89:ee:03:63:a3:fc:0c:
                    4a:ba:a0:f5:78:8f:f1:80:08:f0:67:6f:2f:39:49:
                    08:88:2a:20:4f:f4:2d:2e:dc:60:60:88:65:05:a4:
                    01:c2:c1:3b:4c:bb:51:58:69:1a:a4:e2:87:60:bc:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:FE:8A:3D:AC:0E:94:88:92:BE:FE:16:43:D1:31:58:5E:5F:46
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:19:9a:aa:45:9f:ae:a3:a0:f5:ab:48:75:91:0b:da:23:
         97:5e:05:74:45:04:91:70:1d:74:d9:ef:d4:34:82:18:26:6a:
         a1:83:45:f3:7a:1e:75:dc:a0:bd:09:55:61:02:76:ab:cb:ca:
         eb:aa:7f:2f:ed:d4:ed:3b:5b:87:d2:0e:fd:6d:da:fd:08:35:
         cd:ec:aa:9a:ff:ba:b2:94:06:54:a8:05:67:7c:c9:2a:d2:83:
         0a:c0:74:59:74:f8:95:bf:a4:95:42:53:08:5f:e5:2d:c8:dd:
         1f:d9:4a:f5:ca:df:f1:b7:74:e0:51:9a:68:3c:47:d9:2e:f8:
         e4:04:67:1e:08:e2:c1:c5:66:56:af:aa:b7:c8:4f:9f:51:db:
         df:6e:34:f3:e4:88:38:05:b3:44:0d:86:86:13:74:8f:85:35:
         5f:f1:56:dc:88:54:ba:81:6f:61:d4:ae:59:c4:1c:83:cb:c1:
         fb:52:c7:60:36:03:a8:a2:0c:5e:bd:25:c5:59:f7:32:1d:5f:
         39:74:d0:be:7f:b9:22:0b:c6:e9:1c:a3:09:94:70:78:f7:b9:
         93:97:43:cb:47:61:14:8f:8f:3c:97:74:d6:b4:ee:19:4b:b4:
         8a:4d:f5:d2:b1:5e:99:47:5d:62:ab:bf:9b:bf:90:f4:56:8b:
         72:ce:a3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ledkcx0/0mywZGnjmwHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzEwY2Y4MWQyMTc3N2E5OGQzZDk5OWRjMWU2ZWFlMDU1
ZjdjM2MwHhcNMjYwMzI5MDYwMDI1WhcNMjYwMzMwMDYwMDI1WjAzMTEwLwYDVQQD
EyhmZTdiZmU4YTNkYWMwZTk0ODg5MmJlZmUxNjQzZDEzMTU4NWU1ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Oenc0dWnYIzLv5UcCn9uHACrGf2
aNSKC/bAwzDbI6P6Mlib41OZxT4Unqp0h7bDaevRTK71M8cJWcaiLBbiq82Vv212
Nn3uHZp+8JUs0YFB9Dk+W5mxW7+3enDayHy9veACAitKN9DJsJh49a5OjttDwvk4
d7DfGafgh2h0J6RgMTopaTRlkR3v4mlVAxyjdej8QpZxafgW+89CYkTQ7NUx892r
9LkMw8IF61Wc4nYvxP2aHBDQiyOes4O6eHOPIfnlUts6Mje9conuA2Oj/AxKuqD1
eI/xgAjwZ28vOUkIiCogT/QtLtxgYIhlBaQBwsE7TLtRWGkapOKHYLxD5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP57/oo9rA6UiJK+/hZD0TFYXl9GMB8GA1UdIwQY
MBaAFDNxDPgdIXd6mNPZmdwebq4FX3w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2Ut
M2I1ZTgzZjYyNmUzLzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2UtM2I1ZTgzZjYyNmUz
LzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdisZmqpF
n66joPWrSHWRC9ojl14FdEUEkXAddNnv1DSCGCZqoYNF83oeddygvQlVYQJ2q8vK
66p/L+3U7Ttbh9IO/W3a/Qg1zeyqmv+6spQGVKgFZ3zJKtKDCsB0WXT4lb+klUJT
CF/lLcjdH9lK9crf8bd04FGaaDxH2S745ARnHgjiwcVmVq+qt8hPn1Hb32408+SI
OAWzRA2GhhN0j4U1X/FW3IhUuoFvYdSuWcQcg8vB+1LHYDYDqKIMXr0lxVn3Mh1f
OXTQvn+5IgvG6RyjCZRwePe5k5dDy0dhFI+PPJd01rTuGUu0ik310rFemUddYqu/
m7+Q9FaLcs6jEg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client