Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File:                     jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier:          FWMLuJOePoaDj6Z+ZLEMD2fD/SLRkTBXQenOBU3aLQI=
Subject key identifier:   1A:CF:E3:2B:2E:26:59:BF:AC:6F:39:B6:FA:D6:D1:FD:B3:B0:62:8E
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer:       /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial:       019D27039A85EAE69655C501EE13798036FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number:          105A
Signing time:             Wed 25 Mar 2026 22:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:40 +0000
Files and hashes:         1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: sDc2RCDR+d2v9bgjsMO/G5gtG8vlipgIZNgCxjKIUFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:9a:85:ea:e6:96:55:c5:01:ee:13:79:80:36:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
        Validity
            Not Before: Mar 25 22:00:40 2026 GMT
            Not After : Mar 26 22:00:40 2026 GMT
        Subject: CN=1acfe32b2e2659bfac6f39b6fad6d1fdb3b0628e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:dc:86:d9:9d:42:66:86:17:20:ed:7d:23:
                    c8:9a:e9:8c:7d:18:29:32:a3:75:ab:b2:3b:26:73:
                    94:38:d1:fa:ca:bd:b7:0d:bd:47:05:fb:43:60:31:
                    51:47:e8:2e:8d:bd:e0:07:9c:8a:a4:5e:04:3c:63:
                    96:be:89:3e:63:6c:1d:d3:e3:a5:c8:f2:c0:9c:e7:
                    cc:60:93:cd:9f:dc:81:f8:d4:db:db:62:0a:c5:0f:
                    ed:46:52:82:3c:55:4d:a7:83:c4:23:2c:5b:85:6a:
                    b2:1a:01:86:c9:58:27:aa:d8:6a:68:03:f1:da:64:
                    92:6a:77:c5:d1:0c:9d:9b:e4:41:99:b3:ba:ac:51:
                    9b:1d:03:8a:5f:59:c4:81:46:2d:b4:29:30:65:3c:
                    8e:a9:94:ac:d2:7f:dd:e2:0c:1f:ee:eb:9a:a4:0a:
                    2f:e9:e7:ad:51:bb:b5:a8:1a:0d:12:dd:4b:cd:ed:
                    e2:f0:2d:eb:22:26:91:d7:6d:cf:92:37:a0:ab:7e:
                    c8:5a:40:2c:f1:c5:0f:49:02:ed:39:f7:3d:2d:57:
                    0d:a5:92:7c:8d:8b:c7:d5:56:01:2f:3d:19:32:d0:
                    19:07:87:0a:2d:a6:69:17:17:fb:8c:8f:dc:4c:2d:
                    96:f1:94:4f:5e:7d:3f:ec:60:e9:0f:14:91:85:52:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:E3:2B:2E:26:59:BF:AC:6F:39:B6:FA:D6:D1:FD:B3:B0:62:8E
            X509v3 Authority Key Identifier:
                keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:55:27:78:78:ab:78:0a:65:2b:80:ba:0d:b4:c6:c7:d8:
         05:9d:0b:5f:e1:d6:ba:70:06:50:a0:ee:e0:b6:9c:dd:a7:ca:
         49:3a:5d:a6:09:01:d9:63:86:08:5e:8a:9b:d9:95:f7:28:4e:
         4b:b5:47:7f:40:0f:28:29:17:a6:b9:3e:0c:61:35:f7:8d:19:
         4f:cd:92:f3:35:96:cc:d1:a0:d7:76:ff:bc:63:76:bb:ec:ab:
         51:63:c4:56:9a:2b:6e:76:33:d9:24:38:83:35:ec:a4:20:d4:
         dd:7a:c8:bd:0d:48:0a:9e:13:0d:6c:eb:ea:cd:70:72:b1:be:
         f3:6a:a1:f5:ed:43:5b:0c:81:8f:b8:c8:82:b7:7d:f1:f8:51:
         d8:eb:59:d8:25:40:38:12:76:fc:d4:9d:61:a6:4a:e0:83:97:
         8b:f3:04:75:3a:a4:b8:8a:30:2d:e5:21:13:be:00:59:b0:58:
         44:4a:c2:21:fa:55:f3:03:aa:58:a7:a6:fa:8f:c2:26:8a:76:
         04:78:f7:dd:f3:65:d3:4c:8b:5c:18:30:72:34:dd:27:19:5f:
         10:7c:21:18:94:c1:14:31:88:ba:c3:f2:66:50:fb:01:d6:29:
         9e:4c:10:fc:9f:14:d5:df:76:01:23:88:ec:d7:9a:9f:e9:b9:
         22:fb:45:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA5qF6uaWVcUB7hN5gDb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNmJkNzk5OWI5MTU3YWE0ZmRjNDcxNzQxNDU4MGQ0ZmNl
MjQwMzkwHhcNMjYwMzI1MjIwMDQwWhcNMjYwMzI2MjIwMDQwWjAzMTEwLwYDVQQD
EygxYWNmZTMyYjJlMjY1OWJmYWM2ZjM5YjZmYWQ2ZDFmZGIzYjA2MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN7chtmdQmaGFyDtfSPImumMfRgp
MqN1q7I7JnOUONH6yr23Db1HBftDYDFRR+gujb3gB5yKpF4EPGOWvok+Y2wd0+Ol
yPLAnOfMYJPNn9yB+NTb22IKxQ/tRlKCPFVNp4PEIyxbhWqyGgGGyVgnqthqaAPx
2mSSanfF0Qydm+RBmbO6rFGbHQOKX1nEgUYttCkwZTyOqZSs0n/d4gwf7uuapAov
6eetUbu1qBoNEt1Lze3i8C3rIiaR123Pkjegq37IWkAs8cUPSQLtOfc9LVcNpZJ8
jYvH1VYBLz0ZMtAZB4cKLaZpFxf7jI/cTC2W8ZRPXn0/7GDpDxSRhVI6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrP4ysuJlm/rG85tvrW0f2zsGKOMB8GA1UdIwQY
MBaAFI1r15mbkVeqT9xHF0FFgNT84kA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQt
NjlmYTRmYjAyMWFmLzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQtNjlmYTRmYjAyMWFm
LzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKlVJ3h4
q3gKZSuAug20xsfYBZ0LX+HWunAGUKDu4Lac3afKSTpdpgkB2WOGCF6Km9mV9yhO
S7VHf0APKCkXprk+DGE1940ZT82S8zWWzNGg13b/vGN2u+yrUWPEVporbnYz2SQ4
gzXspCDU3XrIvQ1ICp4TDWzr6s1wcrG+82qh9e1DWwyBj7jIgrd98fhR2OtZ2CVA
OBJ2/NSdYaZK4IOXi/MEdTqkuIowLeUhE74AWbBYRErCIfpV8wOqWKem+o/CJop2
BHj33fNl00yLXBgwcjTdJxlfEHwhGJTBFDGIusPyZlD7AdYpnkwQ/J8U1d92ASOI
7Nean+m5IvtFoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:20 2026 by rpki-client