Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          DTJCVXF2dX46SJMO0u2MUnWxMPfok07XzzL5urgIKBA=
Subject key identifier:   36:B5:A8:76:52:6F:94:04:E4:7A:C5:86:3F:0F:C8:AE:5F:A4:5A:3B
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       019CE4ECCD2E141C098705A4B8111CF9762D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          1869
Signing time:             Fri 13 Mar 2026 02:00:50 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:50 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:50 +0000
Files and hashes:         1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: vlHfs/8Qf4IKOlE8GCD+mav0Sr0JK+/3NEqH5ckbFnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:cd:2e:14:1c:09:87:05:a4:b8:11:1c:f9:76:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Mar 13 02:00:50 2026 GMT
            Not After : Mar 14 02:00:50 2026 GMT
        Subject: CN=36b5a876526f9404e47ac5863f0fc8ae5fa45a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:52:65:81:46:28:45:d5:db:aa:0f:2a:ac:
                    9c:3d:a5:9a:3a:96:6e:34:ed:92:93:28:5b:d7:f4:
                    6f:5e:0c:03:02:fe:f1:c3:5f:e5:34:fd:87:d9:cd:
                    c3:8e:c2:bf:b0:92:75:66:f8:c8:72:b1:da:c6:68:
                    62:5f:b4:a8:0d:87:24:08:4f:e0:f8:ac:6c:bf:b2:
                    e0:ae:56:cc:25:6b:a5:18:95:a9:a6:d9:42:de:45:
                    33:16:61:70:c9:a3:bb:1c:3d:29:d6:3d:e7:00:91:
                    f9:4f:5f:0e:db:84:e9:07:6e:1f:c9:48:58:e4:27:
                    36:0e:26:45:43:5a:38:6d:34:bf:0c:79:b4:e9:c9:
                    6e:41:93:03:aa:84:4d:3c:13:b2:65:f2:1d:8c:39:
                    d5:76:6e:c6:b0:54:ce:d6:c9:c6:3e:eb:28:ca:7a:
                    a5:c2:6d:25:21:47:cd:dc:ed:1b:cf:bc:a9:b3:59:
                    0d:7b:2a:20:c9:4b:25:43:8d:94:65:cc:f6:9e:23:
                    5f:8c:a4:40:84:f8:98:03:dd:7d:f8:57:85:3f:59:
                    f3:e5:01:08:55:d1:0c:7d:36:40:8c:ce:06:b9:ab:
                    bc:23:f8:c7:f5:da:24:28:aa:bd:aa:77:58:2b:e0:
                    c7:91:34:e7:51:d3:3b:65:b6:ca:75:3b:f3:fd:1a:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:A8:76:52:6F:94:04:E4:7A:C5:86:3F:0F:C8:AE:5F:A4:5A:3B
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:12:19:69:0f:f7:05:b3:01:a8:59:55:6e:bc:96:86:b1:66:
         29:0f:83:03:6e:cd:27:01:97:7b:c1:97:d1:a5:6d:92:2d:c0:
         bf:20:36:53:b4:03:cd:1d:f1:6e:27:7d:5e:d3:66:6e:d2:ed:
         c5:fb:57:3a:fb:cd:52:df:48:b5:7e:1c:11:09:76:24:95:a0:
         4f:8c:d0:ec:31:83:c9:9a:8b:6b:f1:49:c4:70:50:03:5b:e0:
         6c:6f:90:05:e0:31:95:f2:77:7e:a7:4f:0c:c7:69:27:7a:85:
         79:0a:d4:6c:24:2c:a9:ff:a4:4b:16:ac:0b:d4:61:79:e8:10:
         ab:2a:8a:ce:41:34:de:02:c1:9a:40:87:4b:d4:ea:6b:ab:d2:
         ff:4c:5e:96:11:69:93:18:9d:49:83:e4:05:ac:e1:5c:25:4d:
         16:9c:4a:e8:02:30:8e:4f:e2:a6:9a:09:3d:27:9c:56:95:4d:
         61:9d:cc:ae:f1:87:f6:05:07:85:c8:28:2a:95:f6:9f:fc:0b:
         9b:2e:f5:22:8c:ab:9a:dc:08:e7:94:3a:00:9e:ad:ce:90:87:
         f0:70:27:e6:aa:62:8f:73:18:1e:1a:4a:d4:1d:62:83:2b:4a:
         11:2f:85:56:ea:21:65:82:c4:36:3f:1b:5d:c2:dc:2d:ad:60:
         55:d2:ef:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7M0uFBwJhwWkuBEc+XYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjYwMzEzMDIwMDUwWhcNMjYwMzE0MDIwMDUwWjAzMTEwLwYDVQQD
EygzNmI1YTg3NjUyNmY5NDA0ZTQ3YWM1ODYzZjBmYzhhZTVmYTQ1YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBSZYFGKEXV26oPKqycPaWaOpZu
NO2Skyhb1/RvXgwDAv7xw1/lNP2H2c3DjsK/sJJ1ZvjIcrHaxmhiX7SoDYckCE/g
+Kxsv7LgrlbMJWulGJWpptlC3kUzFmFwyaO7HD0p1j3nAJH5T18O24TpB24fyUhY
5Cc2DiZFQ1o4bTS/DHm06cluQZMDqoRNPBOyZfIdjDnVdm7GsFTO1snGPusoynql
wm0lIUfN3O0bz7yps1kNeyogyUslQ42UZcz2niNfjKRAhPiYA919+FeFP1nz5QEI
VdEMfTZAjM4Guau8I/jH9dokKKq9qndYK+DHkTTnUdM7ZbbKdTvz/RpHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa1qHZSb5QE5HrFhj8PyK5fpFo7MB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRIZaQ/3
BbMBqFlVbryWhrFmKQ+DA27NJwGXe8GX0aVtki3AvyA2U7QDzR3xbid9XtNmbtLt
xftXOvvNUt9ItX4cEQl2JJWgT4zQ7DGDyZqLa/FJxHBQA1vgbG+QBeAxlfJ3fqdP
DMdpJ3qFeQrUbCQsqf+kSxasC9RheegQqyqKzkE03gLBmkCHS9Tqa6vS/0xelhFp
kxidSYPkBazhXCVNFpxK6AIwjk/ippoJPSecVpVNYZ3MrvGH9gUHhcgoKpX2n/wL
my71IoyrmtwI55Q6AJ6tzpCH8HAn5qpij3MYHhpK1B1igytKES+FVuohZYLENj8b
XcLcLa1gVdLvAQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:45 2026 by rpki-client