Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File:                     Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier:          brLkjX7TNJ+jNJe3nWNhySTnVK7zMi5fJtihwo+3Lpw=
Subject key identifier:   27:83:ED:35:F0:5B:E8:F3:F5:F3:34:44:A2:50:49:F8:22:38:64:C1
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer:       /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial:       019CAC0FECE622B62D9DB799197D93E38301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number:          1694
Signing time:             Mon 02 Mar 2026 01:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:50 +0000
Files and hashes:         1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: LCQPO9FREy5giDNa8KMzdWqq5mfQ/+MFFZaLXNDtz8Y=)
                          2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:ec:e6:22:b6:2d:9d:b7:99:19:7d:93:e3:83:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
        Validity
            Not Before: Mar  2 01:00:50 2026 GMT
            Not After : Mar  3 01:00:50 2026 GMT
        Subject: CN=2783ed35f05be8f3f5f33444a25049f8223864c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:39:73:2c:27:df:b9:32:1f:8a:81:5d:33:
                    24:c2:1a:53:d5:6e:f1:60:bb:8b:8b:f5:60:e0:32:
                    84:13:0c:62:47:6a:5a:be:28:d2:46:29:51:9e:cf:
                    86:29:b5:7c:3b:90:aa:b5:92:fe:d2:27:e9:e5:52:
                    2a:fc:55:b7:ec:d9:c7:8b:89:b8:a7:e0:da:90:a1:
                    bc:4e:0f:77:09:33:05:8f:e5:ed:8b:31:a0:9c:66:
                    42:ce:85:9c:e3:80:92:04:bf:59:03:98:85:63:8a:
                    f6:57:82:70:02:3f:c5:dd:ee:97:29:e3:dc:b7:71:
                    db:73:d7:26:a8:2a:43:27:0e:b7:ca:8b:b0:1a:75:
                    4c:34:aa:81:7c:ca:92:93:46:ed:bb:80:72:1a:0e:
                    6a:16:10:32:67:89:45:76:d4:ae:95:0b:03:cf:79:
                    c2:25:97:b0:f2:20:e7:43:c5:31:7a:43:f8:c0:7e:
                    e5:d4:59:31:9b:99:bd:2c:24:0a:6c:c7:06:b8:5e:
                    d4:10:00:92:c9:95:39:13:c5:2e:9d:d2:e8:eb:ca:
                    e1:20:bb:08:b2:ce:ae:01:90:25:da:26:72:c5:71:
                    8a:05:8f:d9:e1:f1:f4:31:59:af:09:fb:4e:9b:b1:
                    4c:06:1a:f0:d3:e2:de:f1:2d:e6:08:c7:cc:3f:45:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:ED:35:F0:5B:E8:F3:F5:F3:34:44:A2:50:49:F8:22:38:64:C1
            X509v3 Authority Key Identifier:
                keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:ca:8e:a2:44:0c:8b:f7:b9:ed:df:7b:fc:7c:ca:fd:41:
         da:2c:ee:59:92:ea:60:12:40:84:a4:ec:b6:01:b3:77:0e:76:
         70:0a:ce:67:9b:22:39:4e:00:d1:25:8f:ae:6e:ea:e7:0a:27:
         38:77:da:cf:ee:cd:6c:ed:91:e6:fa:3e:55:a2:cd:42:11:c6:
         40:ea:8c:32:b5:13:8c:65:8d:ee:23:b8:ba:b0:94:97:1c:a3:
         df:07:d4:19:d3:ef:0e:fc:5a:b8:8d:de:ad:37:27:b5:17:51:
         a1:92:8a:20:61:f8:fc:2b:9a:d8:19:ca:16:5d:92:56:00:d7:
         9c:b4:8a:b5:7d:0a:bc:a4:38:a2:83:72:88:0e:4a:c2:be:9e:
         b3:da:ad:46:3d:b7:fd:07:8a:63:7b:67:1b:6c:a4:9f:3e:7d:
         b4:c1:b5:20:17:cf:2f:9f:30:50:d5:bb:b5:d9:81:d3:e9:86:
         1a:6d:d1:84:41:32:fe:24:3c:ca:ef:d3:ae:9a:f2:a1:61:7a:
         9a:6d:5a:1d:ca:4c:3f:26:01:b6:6f:2b:5c:59:2c:ab:3e:73:
         fc:dd:77:ab:24:8f:f2:c9:20:ec:01:f4:03:d0:72:dd:bf:de:
         92:6d:36:e9:0c:0f:9c:8b:05:82:2e:30:32:66:fe:2a:08:74:
         d0:a6:67:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+zmIrYtnbeZGX2T44MBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjYwMzAyMDEwMDUwWhcNMjYwMzAzMDEwMDUwWjAzMTEwLwYDVQQD
EygyNzgzZWQzNWYwNWJlOGYzZjVmMzM0NDRhMjUwNDlmODIyMzg2NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoig5cywn37kyH4qBXTMkwhpT1W7x
YLuLi/Vg4DKEEwxiR2pavijSRilRns+GKbV8O5CqtZL+0ifp5VIq/FW37NnHi4m4
p+DakKG8Tg93CTMFj+XtizGgnGZCzoWc44CSBL9ZA5iFY4r2V4JwAj/F3e6XKePc
t3Hbc9cmqCpDJw63youwGnVMNKqBfMqSk0btu4ByGg5qFhAyZ4lFdtSulQsDz3nC
JZew8iDnQ8UxekP4wH7l1Fkxm5m9LCQKbMcGuF7UEACSyZU5E8UundLo68rhILsI
ss6uAZAl2iZyxXGKBY/Z4fH0MVmvCftOm7FMBhrw0+Le8S3mCMfMP0XKDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeD7TXwW+jz9fM0RKJQSfgiOGTBMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZzKjqJE
DIv3ue3fe/x8yv1B2izuWZLqYBJAhKTstgGzdw52cArOZ5siOU4A0SWPrm7q5won
OHfaz+7NbO2R5vo+VaLNQhHGQOqMMrUTjGWN7iO4urCUlxyj3wfUGdPvDvxauI3e
rTcntRdRoZKKIGH4/Cua2BnKFl2SVgDXnLSKtX0KvKQ4ooNyiA5Kwr6es9qtRj23
/QeKY3tnG2yknz59tMG1IBfPL58wUNW7tdmB0+mGGm3RhEEy/iQ8yu/TrpryoWF6
mm1aHcpMPyYBtm8rXFksqz5z/N13qySP8skg7AH0A9By3b/ekm026QwPnIsFgi4w
Mmb+Kgh00KZn3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:34 2026 by rpki-client