Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File:                     k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier:          fytl7i5dmU0siPZgJ8P2tfBtNLgZuYE8lBvJLRGjeeU=
Subject key identifier:   13:33:A4:88:91:58:C4:67:9A:7E:39:1C:E8:70:D4:88:E3:54:0E:C0
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer:       /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial:       019D2703AD94C35B9E8F58D2C5B2468CEBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:45 +0000
Files and hashes:         1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: 6FDQIDnBopfgwpNhaFeJsiN+tjYVopue5HUwM+Js0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ad:94:c3:5b:9e:8f:58:d2:c5:b2:46:8c:eb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
        Validity
            Not Before: Mar 25 22:00:45 2026 GMT
            Not After : Mar 26 22:00:45 2026 GMT
        Subject: CN=1333a4889158c4679a7e391ce870d488e3540ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:d8:f2:87:dd:c8:bc:7d:59:8f:84:9f:7c:
                    7a:bd:dd:c0:ce:bb:8a:3f:65:24:fc:a5:83:29:d6:
                    e2:da:89:ef:18:20:da:60:17:8c:68:0f:72:75:80:
                    e1:f9:d2:de:9b:00:21:79:4b:bb:47:d4:fb:a8:a6:
                    ee:a2:06:ef:91:24:d5:f7:6c:8c:4b:e2:d2:01:a1:
                    75:dc:98:57:bd:69:0f:06:e1:11:0b:e8:9e:24:b8:
                    fa:fc:21:da:f3:ef:03:1b:09:8f:c9:d0:59:54:8e:
                    f5:41:4f:7a:bd:2d:21:02:d2:d5:52:1a:68:71:16:
                    b9:c3:5c:66:6e:70:cd:ef:a2:52:2e:ce:a9:55:d3:
                    b3:7e:09:57:b5:7e:b3:8e:37:96:e4:0e:09:6d:79:
                    c2:e6:b4:a3:73:f8:62:c2:a8:9d:1a:70:10:14:8a:
                    cd:ac:dc:1f:a1:ae:ce:69:cf:80:9e:70:6f:07:71:
                    ef:18:90:ba:36:c2:4a:d3:e8:de:41:27:f3:d1:f1:
                    be:be:72:22:56:4b:25:36:5f:26:86:b0:85:71:0b:
                    ee:52:8d:df:ee:91:15:c9:cd:19:2e:fb:1c:b7:48:
                    c3:6c:e6:c8:01:9e:22:f2:bc:29:1c:10:db:e5:a3:
                    ca:19:99:6e:46:92:46:d0:df:33:17:fc:10:8b:b4:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:A4:88:91:58:C4:67:9A:7E:39:1C:E8:70:D4:88:E3:54:0E:C0
            X509v3 Authority Key Identifier:
                keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:a4:fa:30:29:8f:b7:49:e9:44:08:26:24:7c:ed:0d:39:
         8c:e0:7b:c2:c8:14:22:1b:bd:fd:8e:d7:8a:63:2f:dd:f4:c3:
         da:e2:f6:cb:01:4f:ce:15:2b:02:97:35:e5:d5:8c:f1:a6:68:
         7a:02:2b:f1:93:65:cc:56:bf:11:ce:5d:a7:42:cd:a6:15:3e:
         70:d5:c1:a0:a9:69:31:1a:08:f0:1c:36:41:06:80:ab:b8:df:
         b2:bd:3a:16:cb:26:e7:a2:3e:c9:a0:db:a1:e6:70:13:73:2a:
         21:b5:40:c5:3c:f6:b4:54:6c:98:79:d8:28:ae:a0:23:4f:7c:
         9e:58:32:03:db:4e:a4:f9:8c:b1:db:c9:e3:85:d3:8d:80:a4:
         8e:43:04:fa:46:68:30:50:49:20:c5:3f:08:d8:90:35:3b:21:
         81:ae:74:15:79:eb:02:c6:fc:42:f7:cf:9c:45:76:52:df:89:
         fb:f0:8b:61:85:ef:ba:2e:84:67:18:85:eb:65:18:9a:c7:73:
         80:72:07:71:43:13:d0:99:d7:b5:4f:87:af:e5:31:6c:3b:5d:
         0d:95:0e:25:f2:67:2a:b6:01:f0:0c:76:a4:98:04:bd:9b:64:
         37:41:38:3d:07:25:98:08:2f:b4:fa:ef:4a:8b:72:b1:70:87:
         4c:12:97:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA62Uw1uej1jSxbJGjOuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmE3ZTAwOGVjNmIwMDIxMDNhMWJkMWVkNjk2YjE3NmY4
N2IzNTIwHhcNMjYwMzI1MjIwMDQ1WhcNMjYwMzI2MjIwMDQ1WjAzMTEwLwYDVQQD
EygxMzMzYTQ4ODkxNThjNDY3OWE3ZTM5MWNlODcwZDQ4OGUzNTQwZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1jY8ofdyLx9WY+En3x6vd3AzruK
P2Uk/KWDKdbi2onvGCDaYBeMaA9ydYDh+dLemwAheUu7R9T7qKbuogbvkSTV92yM
S+LSAaF13JhXvWkPBuERC+ieJLj6/CHa8+8DGwmPydBZVI71QU96vS0hAtLVUhpo
cRa5w1xmbnDN76JSLs6pVdOzfglXtX6zjjeW5A4JbXnC5rSjc/hiwqidGnAQFIrN
rNwfoa7Oac+AnnBvB3HvGJC6NsJK0+jeQSfz0fG+vnIiVkslNl8mhrCFcQvuUo3f
7pEVyc0ZLvsct0jDbObIAZ4i8rwpHBDb5aPKGZluRpJG0N8zF/wQi7TGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMzpIiRWMRnmn45HOhw1IjjVA7AMB8GA1UdIwQY
MBaAFJP6fgCOxrACEDob0e1paxdvh7NSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEt
ZjdlOTFhYzBmYWQ5LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEtZjdlOTFhYzBmYWQ5
LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVek+jAp
j7dJ6UQIJiR87Q05jOB7wsgUIhu9/Y7XimMv3fTD2uL2ywFPzhUrApc15dWM8aZo
egIr8ZNlzFa/Ec5dp0LNphU+cNXBoKlpMRoI8Bw2QQaAq7jfsr06Fssm56I+yaDb
oeZwE3MqIbVAxTz2tFRsmHnYKK6gI098nlgyA9tOpPmMsdvJ44XTjYCkjkME+kZo
MFBJIMU/CNiQNTshga50FXnrAsb8QvfPnEV2Ut+J+/CLYYXvui6EZxiF62UYmsdz
gHIHcUMT0JnXtU+Hr+UxbDtdDZUOJfJnKrYB8Ax2pJgEvZtkN0E4PQclmAgvtPrv
SotysXCHTBKXHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:22 2026 by rpki-client