Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          Iz3nFhL5mFVINdtE8nkS3NYOTVKlQi0F5M755qHa7pY=
Subject key identifier:   FD:0E:F8:8C:F0:A9:77:7B:98:CA:37:5D:01:38:C8:80:AD:08:3D:9B
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019D382E3D997324BE0F261F42D4E3FFF638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 06:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:47 +0000
Files and hashes:         1: EQcXmsGZVVYkzBROBdXqoKe1Ndo.roa (hash: nByWMCw0nioYifxgn/+QEUzppUElVTO5RKZgZTpSfek=)
                          2: GOKl_HgtHfM22hM8HA5SESUac7k.roa (hash: 9WYCow1eFtG0OZYI4lYrZV4DtE2HmFDni29YhIkALTY=)
                          3: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: g3T8xlI++rCL5nrFu9lKl+r5u2fwknbS/ZqgusyB1M0=)
                          4: yjmhn9zBn-5iLGupIJe7hZRJHEI.roa (hash: mUPbuC6CRqfm+IKqCyjDmA5vrXV/CLfdXuRnH6W/B2M=)
                          5: zseUJgVeCwjihWSVg8qrP6U6zOY.roa (hash: 3GL/igz6eaoQ/qNe14Emh1CvM3j7cI74/xHiIs5bkLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:3d:99:73:24:be:0f:26:1f:42:d4:e3:ff:f6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Mar 29 06:00:47 2026 GMT
            Not After : Mar 30 06:00:47 2026 GMT
        Subject: CN=fd0ef88cf0a9777b98ca375d0138c880ad083d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:5d:4c:23:60:46:60:f6:f5:3c:b6:3f:11:
                    82:3b:53:7e:fa:d2:64:0a:cb:d8:af:2d:e8:28:01:
                    58:12:31:a0:b0:6a:36:17:ed:f3:16:cc:ac:45:f5:
                    ae:d2:4c:ba:6d:a4:39:ec:3d:bc:b0:47:a3:c8:0a:
                    85:9d:a4:55:c9:94:74:34:65:fc:a4:31:24:84:fb:
                    dd:81:1f:30:33:4f:fc:d1:ca:c6:8d:06:75:b4:dd:
                    95:ee:5e:ca:7a:a7:c9:12:04:2f:39:af:32:21:66:
                    2d:72:58:62:98:82:02:78:1e:b7:28:96:5f:ea:e9:
                    41:4a:2a:18:3d:2d:55:76:3d:2a:05:54:ad:68:52:
                    22:78:16:84:0a:49:02:2d:4b:ea:13:2c:59:d7:c0:
                    c1:25:55:e8:ae:5d:13:4e:3b:33:e9:1e:0a:1b:22:
                    62:2d:e4:01:95:09:0d:da:af:c4:1c:a5:46:78:7e:
                    4a:01:42:09:cc:ef:4f:ac:ff:97:ae:92:4f:34:5d:
                    6d:97:94:62:c7:ac:0b:3d:72:6c:f2:76:0a:99:f3:
                    21:38:17:5e:42:d9:e1:3a:2a:67:8f:60:f0:aa:8f:
                    8a:82:48:37:99:fc:67:98:9a:1a:87:ce:93:3d:7d:
                    93:19:37:26:04:0a:7b:08:0b:22:d9:53:e4:f4:0c:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:F8:8C:F0:A9:77:7B:98:CA:37:5D:01:38:C8:80:AD:08:3D:9B
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:05:73:df:f9:bf:41:cc:5c:55:a3:89:4d:2c:11:44:e4:d9:
         2d:6a:eb:d8:52:2f:61:fb:35:9c:eb:43:c2:9a:f6:5f:db:d7:
         a9:1a:71:e3:32:20:e4:4e:bb:aa:9a:0a:4e:24:24:bd:0d:16:
         66:2f:a4:7a:e7:64:89:5d:48:4e:fd:47:d7:b1:4a:1e:67:56:
         4d:fa:51:38:ee:ea:da:46:20:f8:f2:89:ce:ed:19:be:f8:20:
         23:ca:18:4f:f5:5f:04:e3:5a:2a:33:19:d3:7c:13:e0:03:ab:
         67:ea:41:a1:c9:9f:e3:b5:99:a9:6d:ff:81:48:fd:21:b5:38:
         25:48:64:a1:ba:25:16:7f:24:db:95:00:08:af:d2:78:cb:32:
         21:95:6c:ec:26:90:f1:3e:51:2d:07:bc:fe:e2:71:d9:0e:7a:
         a3:11:e8:4c:4d:8c:66:f1:40:e7:02:54:ab:a3:a2:f1:e7:6f:
         ee:d6:fc:a6:bc:05:7b:f8:0a:e3:31:b8:19:71:e9:f9:55:7e:
         e9:d0:b3:08:0e:a7:01:46:89:ee:a8:1b:a1:57:b7:1a:e9:ab:
         ad:9d:07:80:2d:1c:1d:28:23:ff:5e:87:05:83:14:c7:07:8a:
         c6:ae:17:bd:6e:88:ed:8b:44:9b:69:b4:01:e0:41:dd:bd:e8:
         b3:82:28:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lj2ZcyS+DyYfQtTj//Y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx
Y2Q2ODYwHhcNMjYwMzI5MDYwMDQ3WhcNMjYwMzMwMDYwMDQ3WjAzMTEwLwYDVQQD
EyhmZDBlZjg4Y2YwYTk3NzdiOThjYTM3NWQwMTM4Yzg4MGFkMDgzZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiBdTCNgRmD29Ty2PxGCO1N++tJk
CsvYry3oKAFYEjGgsGo2F+3zFsysRfWu0ky6baQ57D28sEejyAqFnaRVyZR0NGX8
pDEkhPvdgR8wM0/80crGjQZ1tN2V7l7KeqfJEgQvOa8yIWYtclhimIICeB63KJZf
6ulBSioYPS1Vdj0qBVStaFIieBaECkkCLUvqEyxZ18DBJVXorl0TTjsz6R4KGyJi
LeQBlQkN2q/EHKVGeH5KAUIJzO9PrP+XrpJPNF1tl5Rix6wLPXJs8nYKmfMhOBde
QtnhOipnj2Dwqo+Kgkg3mfxnmJoah86TPX2TGTcmBAp7CAsi2VPk9Axr4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0O+IzwqXd7mMo3XQE4yICtCD2bMB8GA1UdIwQY
MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt
MDU3NjRjN2VkYWE3LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3
LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwVz3/m/
QcxcVaOJTSwRROTZLWrr2FIvYfs1nOtDwpr2X9vXqRpx4zIg5E67qpoKTiQkvQ0W
Zi+keudkiV1ITv1H17FKHmdWTfpROO7q2kYg+PKJzu0ZvvggI8oYT/VfBONaKjMZ
03wT4AOrZ+pBocmf47WZqW3/gUj9IbU4JUhkobolFn8k25UACK/SeMsyIZVs7CaQ
8T5RLQe8/uJx2Q56oxHoTE2MZvFA5wJUq6Oi8edv7tb8prwFe/gK4zG4GXHp+VV+
6dCzCA6nAUaJ7qgboVe3GumrrZ0HgC0cHSgj/16HBYMUxweKxq4XvW6I7YtEm2m0
AeBB3b3os4IoYw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client