Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
File:                     j33ZCSspRN36oXbsIwf26Y9N44M.mft (raw, json)
Hash identifier:          5cq9lH6y4UeciD5oDTWt2bjpaCWbeG26u5pgOGT3dkc=
Subject key identifier:   B5:93:ED:24:AA:FF:6E:C7:57:60:E4:E9:08:5F:12:A6:12:05:7C:FF
Authority key identifier: 8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83
Certificate issuer:       /CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
Certificate serial:       019D265F2509521D7F1D126FEAE86333AE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
Manifest number:          01F2
Signing time:             Wed 25 Mar 2026 19:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:02 +0000
Files and hashes:         1: j33ZCSspRN36oXbsIwf26Y9N44M.crl (hash: fq3ZZ3r957wlDiJFbH+ygRcT+cQ3/ZG9Sx1ZlBhEezU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:25:09:52:1d:7f:1d:12:6f:ea:e8:63:33:ae:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
        Validity
            Not Before: Mar 25 19:01:02 2026 GMT
            Not After : Mar 26 19:01:02 2026 GMT
        Subject: CN=b593ed24aaff6ec75760e4e9085f12a612057cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:5d:f7:60:ad:fa:30:a6:6f:90:82:cf:05:
                    63:e7:77:f8:c9:2f:bd:18:c0:30:b9:77:73:f4:46:
                    93:4c:39:e9:12:2e:28:2d:d2:78:81:cb:30:7c:6a:
                    ef:96:5c:cc:6b:4f:36:5d:d2:5b:18:c9:5d:51:4f:
                    27:02:18:e7:d6:44:61:6b:32:29:0a:ad:85:43:2e:
                    80:5c:1f:21:04:a8:1a:e5:c7:b4:17:18:80:ba:c0:
                    64:26:3e:9a:93:d6:f2:13:f9:40:c3:8f:a9:eb:39:
                    66:a4:b8:bd:da:6f:10:9b:5c:26:4f:96:ec:57:06:
                    8e:88:fc:c8:14:c3:9d:f8:dd:38:42:c9:80:38:e3:
                    92:b6:2c:1c:07:8c:ef:6e:33:f1:3b:10:ed:6f:1c:
                    42:98:b8:10:2e:cb:f1:44:75:28:74:88:de:6c:e0:
                    8a:5f:de:1d:6c:51:da:0c:89:1e:7c:be:b2:53:3e:
                    93:90:83:c3:4c:cb:97:71:eb:66:56:9c:c2:ca:7f:
                    e5:7d:e4:af:3f:d2:30:57:4f:6b:44:62:c0:27:54:
                    b3:67:30:0c:38:ef:23:20:48:80:55:55:f6:80:c6:
                    dd:a1:70:c1:1b:7e:9a:da:f1:a6:e1:ae:59:ba:29:
                    d0:1e:b0:93:84:10:e8:33:4d:cb:ab:59:32:fa:60:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:ED:24:AA:FF:6E:C7:57:60:E4:E9:08:5F:12:A6:12:05:7C:FF
            X509v3 Authority Key Identifier:
                keyid:8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:de:ef:c0:55:d9:05:0d:09:b3:5b:f5:46:30:92:45:92:
         46:8b:c8:fe:77:0d:54:f9:7a:b8:58:1d:13:63:de:0c:fc:9b:
         cd:18:a2:8a:2c:19:0f:a5:f9:f6:4b:02:ae:59:79:74:1e:87:
         92:b8:58:7e:4b:7f:42:1a:ce:37:35:4a:9f:23:e1:e2:61:51:
         46:e9:9e:4b:95:51:99:26:5a:3b:49:44:f4:55:34:dc:75:7f:
         a6:2d:64:01:ca:30:76:27:3a:6d:6c:5e:b1:f2:ae:4c:7c:19:
         c0:b0:91:06:bb:2b:53:52:99:10:6d:32:79:0c:51:a9:5a:ba:
         e7:55:64:b9:ab:e0:1c:b9:a6:4d:4b:46:c4:29:15:68:a7:6a:
         e4:03:9b:2f:50:9b:02:97:1f:d4:5f:f7:15:21:b8:ec:32:bd:
         19:90:90:aa:53:3d:d3:94:5d:1b:75:e9:81:3c:3e:9b:23:d7:
         4b:2e:f2:5c:2a:e4:a3:d7:18:8f:4f:53:06:d4:88:76:ad:66:
         bb:c7:0d:55:6f:73:0a:52:03:e6:95:21:bf:fc:19:4d:86:1a:
         0b:cc:84:4a:ac:15:9e:dd:8c:01:4d:83:37:03:51:f9:13:85:
         9b:43:25:a0:06:c8:8b:84:7a:c0:c4:c4:bb:96:69:05:cc:1e:
         63:04:a1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXyUJUh1/HRJv6uhjM64lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2RkOTA5MmIyOTQ0ZGRmYWExNzZlYzIzMDdmNmU5OGY0
ZGUzODMwHhcNMjYwMzI1MTkwMTAyWhcNMjYwMzI2MTkwMTAyWjAzMTEwLwYDVQQD
EyhiNTkzZWQyNGFhZmY2ZWM3NTc2MGU0ZTkwODVmMTJhNjEyMDU3Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn9d92Ct+jCmb5CCzwVj53f4yS+9
GMAwuXdz9EaTTDnpEi4oLdJ4gcswfGrvllzMa082XdJbGMldUU8nAhjn1kRhazIp
Cq2FQy6AXB8hBKga5ce0FxiAusBkJj6ak9byE/lAw4+p6zlmpLi92m8Qm1wmT5bs
VwaOiPzIFMOd+N04QsmAOOOStiwcB4zvbjPxOxDtbxxCmLgQLsvxRHUodIjebOCK
X94dbFHaDIkefL6yUz6TkIPDTMuXcetmVpzCyn/lfeSvP9IwV09rRGLAJ1SzZzAM
OO8jIEiAVVX2gMbdoXDBG36a2vGm4a5ZuinQHrCThBDoM03Lq1ky+mAbCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWT7SSq/27HV2Dk6QhfEqYSBXz/MB8GA1UdIwQY
MBaAFI992QkrKUTd+qF27CMH9umPTeODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQt
ZDZlY2FkMmQ1MTMyLzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQtZDZlY2FkMmQ1MTMy
LzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuXe78BV
2QUNCbNb9UYwkkWSRovI/ncNVPl6uFgdE2PeDPybzRiiiiwZD6X59ksCrll5dB6H
krhYfkt/QhrONzVKnyPh4mFRRumeS5VRmSZaO0lE9FU03HV/pi1kAcowdic6bWxe
sfKuTHwZwLCRBrsrU1KZEG0yeQxRqVq651VkuavgHLmmTUtGxCkVaKdq5AObL1Cb
Apcf1F/3FSG47DK9GZCQqlM905RdG3XpgTw+myPXSy7yXCrko9cYj09TBtSIdq1m
u8cNVW9zClID5pUhv/wZTYYaC8yESqwVnt2MAU2DNwNR+ROFm0MloAbIi4R6wMTE
u5ZpBcweYwShcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:44 2026 by rpki-client