Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File:                     4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier:          mNO7dLVE98xwwmY+qu4/lzFe2DDAurRYmiD8DXZ+TVE=
Subject key identifier:   77:D7:26:C2:C6:E5:A2:92:52:83:D2:B6:93:1C:31:C9:AC:F7:D9:77
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       019CAA5928B421E8E97C4FE8A1442AF10EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 17:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:35 +0000
Files and hashes:         1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: o2nXOSGP5Ekbhl9MenLakyyggINxQkgvHLXCabczcZ8=)
                          2: I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa (hash: Z+HeN443sRDuiL/lJ2AnO37Q1Ethfs5BRmHnOhLCr4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:28:b4:21:e8:e9:7c:4f:e8:a1:44:2a:f1:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: Mar  1 17:01:35 2026 GMT
            Not After : Mar  2 17:01:35 2026 GMT
        Subject: CN=77d726c2c6e5a2925283d2b6931c31c9acf7d977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:24:87:d6:10:52:4a:a2:01:7f:1c:d9:67:
                    bf:a2:c1:4e:cc:f6:7c:31:5e:43:ac:36:ac:84:bc:
                    51:cd:6d:05:d1:28:65:26:2d:0c:76:cf:26:e3:43:
                    85:c9:9a:ab:ad:a6:29:e3:d0:e5:2f:27:df:50:bc:
                    6e:7d:05:b6:e5:28:ab:f9:d1:ad:d0:f8:08:78:37:
                    fd:40:f6:d5:8d:3b:8d:1f:06:98:39:4e:42:5e:77:
                    b6:4c:51:18:45:1c:9f:6f:00:20:7f:f1:f7:5d:ac:
                    3c:87:61:ad:15:68:d3:5e:33:31:f8:05:09:a2:a5:
                    f8:a1:51:e8:83:3c:a6:c2:ed:0f:8c:a1:1b:71:35:
                    79:fd:a9:f4:32:c6:eb:8e:e1:6a:41:bd:4f:ad:a2:
                    45:ad:c2:5f:78:d1:b4:97:6e:f5:14:4e:61:98:19:
                    ac:1a:26:e6:ff:de:f5:53:dc:69:03:c9:c2:ac:f0:
                    01:88:62:e6:30:32:5d:87:a6:b9:14:e8:39:60:60:
                    c9:21:ae:f7:44:bd:a2:a3:8e:75:c5:47:64:b5:19:
                    f4:4b:d6:f1:80:94:b0:ef:ca:27:c2:5e:a1:85:2e:
                    a7:10:ce:3b:bd:18:13:4b:28:eb:bb:77:82:7b:ff:
                    4c:ed:29:0c:e0:4d:de:11:0a:69:b3:24:6f:dc:b4:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:26:C2:C6:E5:A2:92:52:83:D2:B6:93:1C:31:C9:AC:F7:D9:77
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:f1:54:9c:6c:7b:ee:06:85:75:25:e3:c1:27:0e:54:34:
         03:25:af:98:9e:0a:8b:23:e9:d6:16:67:e7:c5:48:2b:04:31:
         46:f2:b1:a5:e2:37:fc:df:53:63:1b:d1:9e:c1:59:e4:e7:ca:
         89:80:37:17:c0:c0:68:dc:5b:0a:8f:1b:28:f8:9e:68:28:92:
         3d:c5:96:ab:ae:87:15:e8:0c:6f:78:11:15:b2:05:eb:9f:9e:
         22:bb:04:05:be:ca:e7:23:0c:38:8d:67:49:69:ae:68:31:11:
         f6:5e:f0:23:0c:6b:50:83:af:96:d2:f2:5c:05:15:2f:ff:f2:
         17:3b:30:d9:0a:61:9a:e2:31:e8:2d:a4:3f:50:a9:8e:72:00:
         7e:d0:4d:69:93:c4:62:b5:da:08:6c:3d:72:22:13:5f:03:9c:
         c6:3a:49:bb:d4:b0:fc:0b:bd:73:21:22:8d:0a:bd:ae:eb:6f:
         df:d2:59:43:80:fa:17:82:12:59:91:38:ce:76:a6:8f:8a:98:
         62:a6:04:d9:c9:4d:8d:0e:7d:a7:74:2d:4b:07:eb:92:dc:cf:
         dd:ff:c6:38:38:47:fc:16:e7:51:ee:2e:2d:a9:9d:99:b8:b8:
         0e:bc:2c:d9:17:b5:e7:06:7d:3c:07:83:e4:82:5d:8e:fd:76:
         c6:72:e6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSi0IejpfE/ooUQq8Q7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3
ZjEzMzAwHhcNMjYwMzAxMTcwMTM1WhcNMjYwMzAyMTcwMTM1WjAzMTEwLwYDVQQD
Eyg3N2Q3MjZjMmM2ZTVhMjkyNTI4M2QyYjY5MzFjMzFjOWFjZjdkOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY4kh9YQUkqiAX8c2We/osFOzPZ8
MV5DrDashLxRzW0F0ShlJi0Mds8m40OFyZqrraYp49DlLyffULxufQW25Sir+dGt
0PgIeDf9QPbVjTuNHwaYOU5CXne2TFEYRRyfbwAgf/H3Xaw8h2GtFWjTXjMx+AUJ
oqX4oVHogzymwu0PjKEbcTV5/an0MsbrjuFqQb1PraJFrcJfeNG0l271FE5hmBms
Gibm/971U9xpA8nCrPABiGLmMDJdh6a5FOg5YGDJIa73RL2io451xUdktRn0S9bx
gJSw78onwl6hhS6nEM47vRgTSyjru3eCe/9M7SkM4E3eEQppsyRv3LSl1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfXJsLG5aKSUoPStpMcMcms99l3MB8GA1UdIwQY
MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut
ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl
LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwnxVJxs
e+4GhXUl48EnDlQ0AyWvmJ4KiyPp1hZn58VIKwQxRvKxpeI3/N9TYxvRnsFZ5OfK
iYA3F8DAaNxbCo8bKPieaCiSPcWWq66HFegMb3gRFbIF65+eIrsEBb7K5yMMOI1n
SWmuaDER9l7wIwxrUIOvltLyXAUVL//yFzsw2QphmuIx6C2kP1CpjnIAftBNaZPE
YrXaCGw9ciITXwOcxjpJu9Sw/Au9cyEijQq9rutv39JZQ4D6F4ISWZE4znamj4qY
YqYE2clNjQ59p3QtSwfrktzP3f/GODhH/BbnUe4uLamdmbi4Drws2Re15wZ9PAeD
5IJdjv12xnLmRA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:36 2026 by rpki-client