Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File:                     wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier:          3C6AEAGu8b0es8Lk9Dqzy9YHnVxx/Dd/kDlEC8qNbxw=
Subject key identifier:   15:FD:0F:B4:2D:24:02:B3:8B:7C:9E:A8:54:F5:34:3B:F2:15:70:02
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer:       /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial:       019D254C6C5B1630AB76469B822F8AB56B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number:          06A7
Signing time:             Wed 25 Mar 2026 14:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:58 +0000
Files and hashes:         1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: pcOsibIWYCfRjeHAJVWTzCF7Zx8L456rOH9o9Q9Tc08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:6c:5b:16:30:ab:76:46:9b:82:2f:8a:b5:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
        Validity
            Not Before: Mar 25 14:00:58 2026 GMT
            Not After : Mar 26 14:00:58 2026 GMT
        Subject: CN=15fd0fb42d2402b38b7c9ea854f5343bf2157002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:f8:aa:dc:7c:72:8f:3b:c1:a6:ee:b9:a6:
                    65:67:b1:c1:8e:83:b9:9c:1a:89:ee:43:05:8b:83:
                    09:b3:a0:e0:52:4a:05:fd:34:4c:9c:3b:cf:3c:5e:
                    61:94:af:16:74:b5:f1:f3:a8:e7:ad:30:17:a3:f0:
                    1c:ea:73:f3:fe:84:0d:2c:66:0b:37:21:1c:8c:d2:
                    13:8a:3f:9f:0d:d6:09:94:46:82:cf:b2:d8:0f:fc:
                    b3:15:fa:cc:58:f5:0d:ce:51:39:08:5c:f9:84:54:
                    97:0f:c7:e3:10:f3:40:00:98:ab:13:75:ef:0c:4e:
                    e8:17:7e:c2:ac:0b:cb:f0:a3:82:54:d4:c7:55:3a:
                    59:60:1e:0d:1b:95:f2:41:0b:07:f8:56:13:23:a7:
                    96:34:75:fc:ef:0e:ac:8d:ce:19:da:69:05:53:20:
                    d8:f0:6d:4a:a1:89:0c:9b:5e:e0:2f:59:7d:1a:44:
                    cb:5a:ca:81:66:53:3a:56:21:cf:8a:7a:05:5a:36:
                    3e:74:83:f5:0a:d6:72:3e:88:ff:91:0e:8a:73:12:
                    e6:ea:1d:f6:4b:08:f8:80:a4:e5:d9:0e:d5:35:6f:
                    4b:4f:02:81:4c:22:5b:1b:a1:67:ca:0d:34:41:1e:
                    b8:54:8c:b2:57:0c:46:6f:62:52:94:8d:6b:c0:98:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:0F:B4:2D:24:02:B3:8B:7C:9E:A8:54:F5:34:3B:F2:15:70:02
            X509v3 Authority Key Identifier:
                keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:88:3e:0a:6a:f8:fc:25:0a:25:68:67:dd:e5:54:79:62:20:
         ca:02:ce:88:d5:9c:1d:65:93:93:f7:ba:f4:6d:91:ec:37:0d:
         3d:1b:77:05:16:9b:86:4d:f8:63:96:a1:13:71:85:66:6b:da:
         fa:d1:4d:dd:25:f1:50:ad:04:10:24:d7:23:87:c5:9a:7f:3b:
         3e:11:f9:96:c3:fb:cf:66:e5:ef:36:ba:2f:aa:43:ae:65:48:
         16:24:60:97:54:49:68:93:ca:70:0b:83:d8:66:0a:23:05:be:
         57:ce:fd:c6:aa:25:42:a1:97:e4:c2:b5:49:f7:ca:04:ad:58:
         9d:91:d8:08:5d:94:76:00:46:30:cb:25:69:35:9b:1b:c5:ea:
         63:51:13:a5:c5:3a:e3:bc:d0:61:28:7a:0f:b1:95:bd:fd:8e:
         c5:11:05:1f:58:3d:d7:b5:3d:47:0d:f3:c7:f7:71:64:c7:2a:
         07:2f:33:c4:dc:c4:e4:05:ea:bb:87:8e:0a:c9:d1:8b:2b:9c:
         c3:e1:c3:ff:34:0c:84:51:71:65:f3:8d:0c:04:03:e9:a9:43:
         c8:b4:a5:4f:c3:8d:5f:0d:a0:0d:05:c6:67:d5:54:8e:cd:68:
         b5:b9:cc:c3:c3:8c:a5:2a:44:62:18:d1:cf:c7:54:53:12:e2:
         b7:81:3a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTGxbFjCrdkabgi+KtWtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmMwNzJjMzU5MDlkNTI1MzIyYjAyNzU4NmJhY2ZhZDEx
OWYxN2QwHhcNMjYwMzI1MTQwMDU4WhcNMjYwMzI2MTQwMDU4WjAzMTEwLwYDVQQD
EygxNWZkMGZiNDJkMjQwMmIzOGI3YzllYTg1NGY1MzQzYmYyMTU3MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNP4qtx8co87wabuuaZlZ7HBjoO5
nBqJ7kMFi4MJs6DgUkoF/TRMnDvPPF5hlK8WdLXx86jnrTAXo/Ac6nPz/oQNLGYL
NyEcjNITij+fDdYJlEaCz7LYD/yzFfrMWPUNzlE5CFz5hFSXD8fjEPNAAJirE3Xv
DE7oF37CrAvL8KOCVNTHVTpZYB4NG5XyQQsH+FYTI6eWNHX87w6sjc4Z2mkFUyDY
8G1KoYkMm17gL1l9GkTLWsqBZlM6ViHPinoFWjY+dIP1CtZyPoj/kQ6KcxLm6h32
Swj4gKTl2Q7VNW9LTwKBTCJbG6Fnyg00QR64VIyyVwxGb2JSlI1rwJgKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX9D7QtJAKzi3yeqFT1NDvyFXACMB8GA1UdIwQY
MBaAFMEsByw1kJ1SUyKwJ1hrrPrRGfF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEt
ZjZiNTQ3ZmVlOGUwLzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEtZjZiNTQ3ZmVlOGUw
LzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4g+Cmr4
/CUKJWhn3eVUeWIgygLOiNWcHWWTk/e69G2R7DcNPRt3BRabhk34Y5ahE3GFZmva
+tFN3SXxUK0EECTXI4fFmn87PhH5lsP7z2bl7za6L6pDrmVIFiRgl1RJaJPKcAuD
2GYKIwW+V879xqolQqGX5MK1SffKBK1YnZHYCF2UdgBGMMslaTWbG8XqY1ETpcU6
47zQYSh6D7GVvf2OxREFH1g917U9Rw3zx/dxZMcqBy8zxNzE5AXqu4eOCsnRiyuc
w+HD/zQMhFFxZfONDAQD6alDyLSlT8ONXw2gDQXGZ9VUjs1otbnMw8OMpSpEYhjR
z8dUUxLit4E6hQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:49 2026 by rpki-client