Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          CzyY0A8F9jGI0BvoVzSp23ZSQYRrE8B3emgotTsp/e0=
Subject key identifier:   77:B7:36:FD:34:C7:92:00:C7:7D:5E:8C:FC:BC:AC:20:B8:E6:EC:27
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019CAA21CB1EBA4FF923256A619D3CF85826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          1825
Signing time:             Sun 01 Mar 2026 16:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:07 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: hmfwk1JXwksYSNfYATszzZeAEmWOlhCSWHSZdKlE4Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:cb:1e:ba:4f:f9:23:25:6a:61:9d:3c:f8:58:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Mar  1 16:01:07 2026 GMT
            Not After : Mar  2 16:01:07 2026 GMT
        Subject: CN=77b736fd34c79200c77d5e8cfcbcac20b8e6ec27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:c4:c9:0a:91:a5:40:27:e1:f8:fc:a6:56:
                    b5:9b:66:d0:53:85:4d:f5:0a:30:fc:e5:70:04:cd:
                    91:cc:ab:a4:09:ba:15:ce:01:5c:a1:87:45:0e:08:
                    3c:b0:4b:93:ef:d7:56:a2:c4:a3:ec:0b:46:0b:6e:
                    d3:cc:72:d5:eb:fd:c4:1b:bb:3e:e2:50:e4:66:bb:
                    df:15:ac:4f:8c:ec:2c:72:42:e5:62:10:c7:9a:7b:
                    d3:37:a4:80:a3:8a:0c:81:21:46:f5:14:ee:9f:60:
                    b6:f9:f2:fc:04:7f:f9:89:17:70:d6:e1:e4:2d:ba:
                    14:f9:cc:a5:13:e6:6f:da:46:a4:61:5a:c9:56:76:
                    6b:9e:cf:27:59:b8:8b:c7:68:de:5d:4a:4a:4a:f6:
                    43:2a:50:bf:c4:3b:05:6a:de:97:fc:dc:26:7d:62:
                    83:f5:74:d1:83:de:0f:bf:9e:55:59:3f:83:93:34:
                    fe:b8:f5:32:d1:f4:3c:68:99:b8:cc:41:76:7b:1e:
                    1b:95:35:a9:9c:c5:f8:e3:d2:5b:cf:c1:44:e4:66:
                    54:a8:ee:73:e9:50:a7:50:d1:8a:f6:ae:9f:fc:6f:
                    37:3a:dd:1c:d9:6a:ab:56:98:2b:9d:98:ad:bd:33:
                    67:44:fe:c0:8c:98:f9:63:81:13:d7:73:12:d0:13:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B7:36:FD:34:C7:92:00:C7:7D:5E:8C:FC:BC:AC:20:B8:E6:EC:27
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:cc:c4:ec:74:ea:e2:9f:0c:ba:46:c1:ee:18:13:1a:20:
         bd:97:75:82:99:ab:7c:c6:e3:06:04:ae:54:53:b5:43:85:d4:
         62:ef:c9:b2:27:39:2f:c5:6e:27:4d:39:c9:93:c0:d4:b6:bf:
         ef:e2:1f:e9:2e:ee:47:6a:91:16:f3:ed:19:f5:19:8f:da:56:
         64:4f:1d:d5:9e:56:8e:b5:a5:76:5c:df:d8:87:df:30:71:cc:
         ac:e4:db:97:a2:20:b5:a1:a7:19:a8:e0:d5:5f:f7:1c:10:af:
         7f:ea:fa:81:2f:36:50:b1:82:4f:e4:d2:61:3c:58:ee:fd:3d:
         76:27:c5:d2:b6:6a:87:e9:d5:13:af:fd:58:2c:58:78:57:1a:
         9b:5f:54:46:14:87:3f:b5:e6:8c:05:ae:9f:02:89:dd:52:6d:
         8b:f5:25:57:52:9b:91:54:f3:b2:31:c1:12:e0:28:58:61:0b:
         60:15:56:60:17:24:99:82:61:f3:66:10:d0:db:fd:af:c6:ea:
         16:87:6d:ec:ea:4b:6f:87:8b:5f:e2:0a:3d:15:eb:cf:4d:fb:
         ff:55:5f:34:9e:32:eb:0f:47:d6:7a:db:25:03:55:48:7f:26:
         5c:54:eb:77:f3:0a:9d:0f:77:0e:dd:df:b9:0c:24:65:94:c2:
         2b:b8:55:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIcseuk/5IyVqYZ08+FgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjYwMzAxMTYwMTA3WhcNMjYwMzAyMTYwMTA3WjAzMTEwLwYDVQQD
Eyg3N2I3MzZmZDM0Yzc5MjAwYzc3ZDVlOGNmY2JjYWMyMGI4ZTZlYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmDEyQqRpUAn4fj8pla1m2bQU4VN
9Qow/OVwBM2RzKukCboVzgFcoYdFDgg8sEuT79dWosSj7AtGC27TzHLV6/3EG7s+
4lDkZrvfFaxPjOwsckLlYhDHmnvTN6SAo4oMgSFG9RTun2C2+fL8BH/5iRdw1uHk
LboU+cylE+Zv2kakYVrJVnZrns8nWbiLx2jeXUpKSvZDKlC/xDsFat6X/NwmfWKD
9XTRg94Pv55VWT+DkzT+uPUy0fQ8aJm4zEF2ex4blTWpnMX449Jbz8FE5GZUqO5z
6VCnUNGK9q6f/G83Ot0c2WqrVpgrnZitvTNnRP7AjJj5Y4ET13MS0BOUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe3Nv00x5IAx31ejPy8rCC45uwnMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4rMxOx0
6uKfDLpGwe4YExogvZd1gpmrfMbjBgSuVFO1Q4XUYu/Jsic5L8VuJ005yZPA1La/
7+If6S7uR2qRFvPtGfUZj9pWZE8d1Z5WjrWldlzf2IffMHHMrOTbl6IgtaGnGajg
1V/3HBCvf+r6gS82ULGCT+TSYTxY7v09difF0rZqh+nVE6/9WCxYeFcam19URhSH
P7XmjAWunwKJ3VJti/UlV1KbkVTzsjHBEuAoWGELYBVWYBckmYJh82YQ0Nv9r8bq
Fodt7OpLb4eLX+IKPRXrz037/1VfNJ4y6w9H1nrbJQNVSH8mXFTrd/MKnQ93Dt3f
uQwkZZTCK7hVaw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:12 2026 by rpki-client