Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File:                     87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier:          a2vNw76kpgAVLX7uRg7MuHMuwbgp9s1balIyIzVXzYY=
Subject key identifier:   25:D4:FF:EC:E8:82:A3:55:EA:93:8B:B6:8F:32:76:B6:A4:79:D2:93
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer:       /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial:       019CAFECEAFC1C1EC833DBC4166655F33AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number:          1853
Signing time:             Mon 02 Mar 2026 19:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:05 +0000
Files and hashes:         1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: pHBM7mAN5wObQvBBlbYWQdeScYuHW3IOxmvb1O+PPJM=)
                          2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=)
                          3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=)
                          4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=)
                          5: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=)
                          6: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=)
                          7: pdyHb8mFNixwJ_XvAUyJS_Ow2g4.roa (hash: OBr/r8tvBWJlq/QSHh/DOJUhlx6WHps7Ga/Udvbou0U=)
                          8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=)
                          9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=)
                          10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:ea:fc:1c:1e:c8:33:db:c4:16:66:55:f3:3a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
        Validity
            Not Before: Mar  2 19:01:05 2026 GMT
            Not After : Mar  3 19:01:05 2026 GMT
        Subject: CN=25d4ffece882a355ea938bb68f3276b6a479d293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:53:b0:33:9a:08:24:d5:3b:68:28:5d:05:
                    64:64:2a:6b:2f:fc:4b:eb:40:40:11:18:64:02:9f:
                    3a:7d:01:cb:93:7a:08:2a:32:48:05:35:d7:2d:f0:
                    6c:12:16:1d:d5:1f:1f:c0:dd:f7:dc:62:40:70:a8:
                    32:56:4a:17:88:27:ee:97:fb:5e:93:d9:26:a1:bc:
                    fe:7e:7c:ac:41:84:24:72:79:de:ac:c9:ee:32:e6:
                    19:f8:82:0d:8e:f0:b6:98:e1:e6:c6:0d:fe:f7:49:
                    23:2b:f0:b4:bc:8e:40:26:84:f0:9a:c9:47:6e:cb:
                    20:0f:d1:68:3b:6e:f4:94:3f:54:0e:3c:cf:40:39:
                    46:b6:cc:33:d6:c1:64:e3:65:7a:5d:92:68:73:c4:
                    90:dd:88:8c:7a:2b:0c:f3:ab:9d:14:57:15:32:7a:
                    23:f1:8b:fe:8d:fc:42:ee:30:97:a3:5d:dc:93:76:
                    e6:4c:63:e8:be:a5:c4:cc:89:91:56:2b:55:52:89:
                    04:d1:fe:fc:a8:ab:51:8d:8e:02:dc:46:25:42:ad:
                    f2:03:9f:69:63:e7:a0:fc:c6:82:1d:00:27:e8:27:
                    3b:ec:0d:0d:87:16:fa:a3:ad:1a:44:56:5d:84:68:
                    37:de:4c:1d:8d:a2:bf:c6:f4:f3:17:1c:ae:f7:0b:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:FF:EC:E8:82:A3:55:EA:93:8B:B6:8F:32:76:B6:A4:79:D2:93
            X509v3 Authority Key Identifier:
                keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:95:2f:a8:63:12:85:4d:c8:60:29:7f:24:7d:64:d0:47:
         21:b5:1d:56:8d:d9:58:07:6a:46:07:65:93:2e:c2:92:9c:91:
         62:56:5f:11:d6:69:81:90:13:e4:51:75:20:57:2c:12:ee:74:
         02:a0:45:06:4a:46:72:28:99:2f:ad:38:d0:c9:9f:5a:4e:2e:
         5d:a1:18:ee:96:25:64:61:3f:3a:76:e0:d7:dc:08:fa:4e:9e:
         49:37:a6:23:c9:9d:1b:cf:2b:b3:92:58:e9:e9:bb:e5:61:b3:
         63:c8:7b:49:43:b3:8e:8f:eb:ce:d7:c3:18:ce:d0:8c:a0:68:
         26:b6:a6:d2:7a:32:ce:36:5a:d4:12:31:7d:eb:f3:b3:19:a8:
         f9:1b:6e:41:60:f4:22:c9:ba:bb:3d:af:2c:0d:4a:f4:97:b4:
         93:e0:7f:80:09:2c:0d:51:c9:6f:bb:dd:e3:84:e7:32:77:82:
         57:bb:84:9b:02:13:4e:2a:98:d8:0b:75:de:44:02:9e:75:42:
         56:20:90:a0:fb:9e:33:94:55:cf:24:2b:fc:87:7c:2a:24:89:
         0a:b1:3a:06:a4:e2:6a:46:a3:45:2a:88:d9:50:dc:d3:91:d6:
         de:71:56:fa:12:22:3e:c8:cc:fc:79:94:8f:78:5b:b4:9f:e6:
         11:d1:81:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7Or8HB7IM9vEFmZV8zrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjYwMzAyMTkwMTA1WhcNMjYwMzAzMTkwMTA1WjAzMTEwLwYDVQQD
EygyNWQ0ZmZlY2U4ODJhMzU1ZWE5MzhiYjY4ZjMyNzZiNmE0NzlkMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnolTsDOaCCTVO2goXQVkZCprL/xL
60BAERhkAp86fQHLk3oIKjJIBTXXLfBsEhYd1R8fwN333GJAcKgyVkoXiCful/te
k9kmobz+fnysQYQkcnnerMnuMuYZ+IINjvC2mOHmxg3+90kjK/C0vI5AJoTwmslH
bssgD9FoO270lD9UDjzPQDlGtswz1sFk42V6XZJoc8SQ3YiMeisM86udFFcVMnoj
8Yv+jfxC7jCXo13ck3bmTGPovqXEzImRVitVUokE0f78qKtRjY4C3EYlQq3yA59p
Y+eg/MaCHQAn6Cc77A0Nhxb6o60aRFZdhGg33kwdjaK/xvTzFxyu9wsupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXU/+zogqNV6pOLto8ydrakedKTMB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmqVL6hj
EoVNyGApfyR9ZNBHIbUdVo3ZWAdqRgdlky7CkpyRYlZfEdZpgZAT5FF1IFcsEu50
AqBFBkpGciiZL6040MmfWk4uXaEY7pYlZGE/Onbg19wI+k6eSTemI8mdG88rs5JY
6em75WGzY8h7SUOzjo/rztfDGM7QjKBoJram0noyzjZa1BIxfevzsxmo+RtuQWD0
Ism6uz2vLA1K9Je0k+B/gAksDVHJb7vd44TnMneCV7uEmwITTiqY2At13kQCnnVC
ViCQoPueM5RVzyQr/Id8KiSJCrE6BqTiakajRSqI2VDc05HW3nFW+hIiPsjM/HmU
j3hbtJ/mEdGBLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:21 2026 by rpki-client