Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File:                     339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier:          AXB4ZLlAXhNGyLVoheluOQKfK8yHTP2iNY7u2zxfzKA=
Subject key identifier:   17:4E:EC:8C:49:B5:BE:15:2F:00:25:E7:AF:B1:7B:17:E1:EE:A0:AE
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       019CAC7E095C29F142D7822EAB03F23C3C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number:          1544
Signing time:             Mon 02 Mar 2026 03:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:06 +0000
Files and hashes:         1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: hW26aeVZOQ1/4gmK42hfLVf4OLRn3P5R3180f08sSk8=)
                          2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:09:5c:29:f1:42:d7:82:2e:ab:03:f2:3c:3c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Mar  2 03:01:06 2026 GMT
            Not After : Mar  3 03:01:06 2026 GMT
        Subject: CN=174eec8c49b5be152f0025e7afb17b17e1eea0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:96:a3:ea:1c:43:fd:8a:fa:45:7c:3e:ab:
                    a4:c6:f2:20:a0:46:c5:ff:be:03:49:78:15:d7:dd:
                    05:4e:a2:fc:e9:21:5d:53:d3:a4:6c:de:d4:3f:eb:
                    5c:6a:9b:b4:6b:6b:b3:11:ff:3f:5e:fe:4a:e8:38:
                    f9:a1:e1:94:fb:80:84:74:e1:4d:fa:3c:25:55:cd:
                    da:52:f1:94:c6:28:63:23:7e:f1:1a:76:e0:61:fd:
                    98:ba:29:37:a1:ca:69:52:db:6a:18:f2:d7:03:b1:
                    9e:33:0d:c6:8f:85:8d:60:a3:d3:c2:09:a6:e6:0d:
                    7c:3b:fd:7f:4d:07:0d:06:38:62:7c:95:0e:a0:6b:
                    6e:9b:f1:3c:a5:3c:de:be:2b:3f:5d:f5:2e:24:79:
                    60:91:dd:f8:cd:01:ee:89:04:7c:b9:5a:43:13:83:
                    93:96:fc:72:ee:d4:18:41:e6:c1:f7:14:57:35:52:
                    12:3b:81:d5:82:7d:e9:49:6a:7d:e1:b3:f4:60:a5:
                    56:c0:7f:6f:b8:de:53:4d:b4:9a:af:30:d4:e1:c1:
                    98:74:66:80:de:a0:51:4a:94:56:07:4e:1c:d2:fb:
                    7f:04:4a:b8:6d:ee:b1:25:76:f1:5d:4f:79:a2:19:
                    db:3e:cf:d4:10:34:6c:1d:77:f3:0e:30:f3:db:2f:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:EC:8C:49:B5:BE:15:2F:00:25:E7:AF:B1:7B:17:E1:EE:A0:AE
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:8e:3a:6a:e8:b1:38:80:9b:47:9c:24:cf:b2:c2:25:36:
         ec:5a:5c:08:cb:ee:21:43:ce:54:d3:ec:f5:51:4a:40:78:25:
         7a:03:96:a4:8c:cf:b9:17:9a:83:31:fc:dd:7c:c7:3b:2b:c8:
         68:d3:97:56:d8:d6:74:c3:bb:0e:76:d5:2c:a3:02:ec:86:59:
         a2:6b:8f:a1:c0:ca:97:02:74:7a:f9:d7:ac:17:bc:21:d1:93:
         72:47:46:e5:5f:ad:f2:d4:e3:47:36:d2:bc:47:36:2e:e0:46:
         8e:cd:a9:11:b2:e8:38:82:cb:69:29:0a:b1:11:24:95:e1:92:
         d5:1d:ec:8f:b7:4c:28:23:91:70:f3:ca:27:d8:84:3f:be:3b:
         7b:17:f5:41:97:e4:1c:b0:4b:cd:08:77:8a:0e:ba:24:4d:2c:
         f9:88:c1:54:18:cd:08:bb:34:ee:bc:94:6f:25:45:96:00:aa:
         a9:9c:d8:e7:af:a7:1c:f5:9c:32:4a:3f:bd:82:51:70:5c:a4:
         50:f3:08:31:c5:f7:e8:69:d1:13:42:41:7a:3b:35:36:92:27:
         dc:b6:8e:f4:42:4e:8e:0b:da:11:54:65:57:18:dd:0a:33:67:
         58:4f:78:16:a2:93:80:40:0e:17:65:d7:5b:d9:52:1f:ad:18:
         2a:9f:ec:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfglcKfFC14IuqwPyPDxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0
ZDBjYTAwHhcNMjYwMzAyMDMwMTA2WhcNMjYwMzAzMDMwMTA2WjAzMTEwLwYDVQQD
EygxNzRlZWM4YzQ5YjViZTE1MmYwMDI1ZTdhZmIxN2IxN2UxZWVhMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5iWo+ocQ/2K+kV8PqukxvIgoEbF
/74DSXgV190FTqL86SFdU9OkbN7UP+tcapu0a2uzEf8/Xv5K6Dj5oeGU+4CEdOFN
+jwlVc3aUvGUxihjI37xGnbgYf2Yuik3ocppUttqGPLXA7GeMw3Gj4WNYKPTwgmm
5g18O/1/TQcNBjhifJUOoGtum/E8pTzevis/XfUuJHlgkd34zQHuiQR8uVpDE4OT
lvxy7tQYQebB9xRXNVISO4HVgn3pSWp94bP0YKVWwH9vuN5TTbSarzDU4cGYdGaA
3qBRSpRWB04c0vt/BEq4be6xJXbxXU95ohnbPs/UEDRsHXfzDjDz2y8lfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdO7IxJtb4VLwAl56+xexfh7qCuMB8GA1UdIwQY
MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt
ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5
LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIyOOmro
sTiAm0ecJM+ywiU27FpcCMvuIUPOVNPs9VFKQHglegOWpIzPuReagzH83XzHOyvI
aNOXVtjWdMO7DnbVLKMC7IZZomuPocDKlwJ0evnXrBe8IdGTckdG5V+t8tTjRzbS
vEc2LuBGjs2pEbLoOILLaSkKsREkleGS1R3sj7dMKCORcPPKJ9iEP747exf1QZfk
HLBLzQh3ig66JE0s+YjBVBjNCLs07ryUbyVFlgCqqZzY56+nHPWcMko/vYJRcFyk
UPMIMcX36GnRE0JBejs1NpIn3LaO9EJOjgvaEVRlVxjdCjNnWE94FqKTgEAOF2XX
W9lSH60YKp/sfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:44 2026 by rpki-client