Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          /3kUWnEQ9YSDp0nidubmXh1xp/3VJHeZ+RGpTA/OBlY=
Subject key identifier:   5B:DC:B6:57:C5:2A:97:C7:22:CF:F5:F2:A6:2B:73:4A:56:40:ED:11
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       019D3A1C3FE495E9A8A65C33DF028C8CE980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 15:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:22 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: 9XwLNNLebk7luBZdC9kwbPT8yXQM7QVLZSkgvzG6PDM=)
                          2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:3f:e4:95:e9:a8:a6:5c:33:df:02:8c:8c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Mar 29 15:00:22 2026 GMT
            Not After : Mar 30 15:00:22 2026 GMT
        Subject: CN=5bdcb657c52a97c722cff5f2a62b734a5640ed11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:c2:b8:fc:2a:c2:4a:46:a1:9e:27:38:ad:
                    e9:1d:f5:4f:c2:e8:ec:b1:fd:3c:3e:c7:8f:d0:ae:
                    f7:19:2b:93:2c:55:57:25:3b:57:b0:63:83:42:ee:
                    9c:f8:8b:0b:2d:ab:86:ee:2a:ed:e4:40:f4:97:ce:
                    c8:c0:30:f9:8f:29:71:2c:f3:20:76:d8:52:6d:9e:
                    2c:3b:3f:10:83:eb:f0:50:86:5a:19:43:d3:79:ab:
                    31:70:f9:1f:d1:eb:1a:4f:e4:f7:61:30:38:d0:23:
                    ee:01:c0:02:3e:16:35:8d:8a:9a:f5:4c:75:7d:98:
                    31:54:fc:27:0d:03:25:1b:1d:51:18:eb:17:b7:96:
                    9d:e4:08:20:8f:e7:c7:6c:1d:7b:32:fa:83:89:d6:
                    d7:09:dd:76:3f:14:2d:a2:52:05:19:da:00:e1:35:
                    98:29:09:39:41:96:27:7e:48:fa:6b:e1:ac:88:a8:
                    e3:be:2c:fc:15:b8:a0:93:50:5c:75:95:7b:09:84:
                    10:1b:4d:cb:8d:e4:4a:da:a2:5f:0b:d2:2e:6f:57:
                    0f:dd:25:74:8b:5d:11:af:dc:bd:1d:a6:e6:fd:c9:
                    ef:a3:90:b8:ca:b4:ad:ad:6e:aa:d8:d0:72:f0:a4:
                    21:0b:d1:0a:d6:13:18:b9:ec:36:08:ff:45:58:df:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:B6:57:C5:2A:97:C7:22:CF:F5:F2:A6:2B:73:4A:56:40:ED:11
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:f0:33:36:94:7d:26:95:ef:96:ae:b2:d0:02:90:a2:7c:
         3b:28:37:46:5f:cf:24:d5:b4:ae:2a:6e:ac:03:7c:ed:c0:33:
         4f:4c:cf:f8:6b:8a:36:91:31:5a:c3:02:1a:85:bc:2d:68:ca:
         21:2d:1f:bb:79:7d:f3:db:39:f3:db:88:ed:65:f7:56:dd:eb:
         11:9b:04:97:b9:16:39:eb:09:fe:35:ba:d1:ea:22:c8:1b:82:
         be:b5:39:bd:0b:b8:1c:f6:eb:f4:e8:90:3d:4b:db:8e:5d:8d:
         77:a1:3c:b9:26:8e:74:22:4e:4f:58:63:3a:ed:34:82:22:fd:
         0f:53:34:f4:3d:18:b2:f6:21:f2:f4:ef:d2:c0:cd:d1:1a:08:
         d2:0c:50:5d:c2:92:09:fb:2f:56:84:11:af:00:19:ac:de:1e:
         48:bf:23:15:ca:7f:40:d7:bf:fe:ff:02:12:49:e0:8e:9d:6b:
         ec:af:87:26:49:56:89:a4:00:e9:a7:fe:8b:bc:d1:8d:27:35:
         5f:13:76:84:df:89:9a:5b:48:73:8c:42:1f:f0:3a:40:38:c2:
         d6:01:d9:3e:be:13:dc:70:e8:22:ea:d5:58:61:27:a8:15:34:
         df:b4:cb:98:38:64:2a:53:70:70:92:1b:29:05:78:b9:53:4b:
         73:2d:95:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HD/klemoplwz3wKMjOmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYWZkZmZhY2Y5YzM2OThlZjdhMzZiMmU2MGJlNzdiODBl
NjJkMDEwHhcNMjYwMzI5MTUwMDIyWhcNMjYwMzMwMTUwMDIyWjAzMTEwLwYDVQQD
Eyg1YmRjYjY1N2M1MmE5N2M3MjJjZmY1ZjJhNjJiNzM0YTU2NDBlZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x3CuPwqwkpGoZ4nOK3pHfVPwujs
sf08PseP0K73GSuTLFVXJTtXsGODQu6c+IsLLauG7irt5ED0l87IwDD5jylxLPMg
dthSbZ4sOz8Qg+vwUIZaGUPTeasxcPkf0esaT+T3YTA40CPuAcACPhY1jYqa9Ux1
fZgxVPwnDQMlGx1RGOsXt5ad5Aggj+fHbB17MvqDidbXCd12PxQtolIFGdoA4TWY
KQk5QZYnfkj6a+GsiKjjviz8Fbigk1BcdZV7CYQQG03LjeRK2qJfC9Iub1cP3SV0
i10Rr9y9Habm/cnvo5C4yrStrW6q2NBy8KQhC9EK1hMYuew2CP9FWN8grQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvctlfFKpfHIs/18qYrc0pWQO0RMB8GA1UdIwQY
MBaAFDKv3/rPnDaY73o2suYL53uA5i0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQt
MjVkMzBlYmNmY2FkLzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQtMjVkMzBlYmNmY2Fk
LzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj7wMzaU
fSaV75austACkKJ8Oyg3Rl/PJNW0ripurAN87cAzT0zP+GuKNpExWsMCGoW8LWjK
IS0fu3l989s589uI7WX3Vt3rEZsEl7kWOesJ/jW60eoiyBuCvrU5vQu4HPbr9OiQ
PUvbjl2Nd6E8uSaOdCJOT1hjOu00giL9D1M09D0YsvYh8vTv0sDN0RoI0gxQXcKS
CfsvVoQRrwAZrN4eSL8jFcp/QNe//v8CEkngjp1r7K+HJklWiaQA6af+i7zRjSc1
XxN2hN+JmltIc4xCH/A6QDjC1gHZPr4T3HDoIurVWGEnqBU037TLmDhkKlNwcJIb
KQV4uVNLcy2VZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:22 2026 by rpki-client