Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File:                     K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier:          XvUuBbtsIpk04kts9uRVYFPV6+tqEhnVxpL/SybmwBQ=
Subject key identifier:   02:A8:34:3D:62:F5:82:81:68:B1:79:92:EB:D7:D5:AA:DD:D0:27:79
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer:       /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial:       019D2583EC99D80A98F818ACE2603B70358C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number:          0DB0
Signing time:             Wed 25 Mar 2026 15:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:35 +0000
Files and hashes:         1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: y3gzue8vjU4oB0NRrW8Aa3874LjOa1OmUyX2LoZ8BF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:ec:99:d8:0a:98:f8:18:ac:e2:60:3b:70:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
        Validity
            Not Before: Mar 25 15:01:35 2026 GMT
            Not After : Mar 26 15:01:35 2026 GMT
        Subject: CN=02a8343d62f5828168b17992ebd7d5aaddd02779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:03:5c:a1:cf:5f:54:aa:04:ed:aa:84:38:
                    79:de:7b:80:09:1c:8c:01:17:e3:99:1f:6f:d4:3c:
                    3e:ce:f8:0d:fd:71:b1:5a:49:8d:76:56:d5:97:93:
                    d6:4f:cb:d6:69:29:b3:77:bf:c0:a4:5b:2c:ef:a2:
                    42:e2:f8:14:ba:13:67:9a:e9:8d:bb:5b:04:cf:22:
                    57:0e:a1:cf:32:92:6e:f3:cb:b9:7e:d8:03:f3:f0:
                    93:09:c2:34:2d:8d:a9:2f:88:f7:3d:67:85:1d:bc:
                    26:6a:58:a2:c9:39:1d:12:2c:c0:68:51:56:92:e6:
                    ae:ac:9f:eb:2f:65:05:83:12:56:63:5d:97:84:bd:
                    86:eb:e9:82:7a:3d:51:ba:e7:6b:12:a3:4f:47:c3:
                    ef:b6:70:f3:83:ba:f9:c2:6c:2b:77:a5:88:b4:42:
                    51:63:92:27:83:63:5f:fc:0e:2c:cc:c9:1a:ff:de:
                    7a:17:c3:1f:8e:65:75:d6:08:36:41:9a:12:92:af:
                    01:41:15:43:c7:f3:a9:9f:28:2d:fc:e0:b5:64:e0:
                    10:6c:8a:23:db:08:03:3f:07:e7:c2:e4:c4:96:63:
                    cf:64:0d:6b:8c:66:ac:1c:88:f4:63:69:42:9d:fc:
                    95:50:d9:87:04:cb:e2:77:19:a9:6d:32:49:f2:4e:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:34:3D:62:F5:82:81:68:B1:79:92:EB:D7:D5:AA:DD:D0:27:79
            X509v3 Authority Key Identifier:
                keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:17:a9:61:1a:79:12:70:d3:54:0e:26:a6:55:ef:8d:fc:26:
         38:05:3a:dd:39:b5:6e:2d:12:56:6c:d7:2a:db:a6:a0:59:5f:
         2c:8a:8f:10:fb:00:8b:ff:1e:e2:b6:4d:65:d9:79:e3:bd:19:
         4c:72:a4:9a:a9:82:44:66:bd:83:f2:b9:1c:3d:61:73:a7:90:
         cd:d1:82:8d:e9:37:97:d7:81:e8:b8:80:8a:96:af:72:15:10:
         37:25:f4:5c:b8:c4:6b:4f:9c:ad:f4:1e:9f:70:fd:d5:d6:95:
         e0:5f:7f:ef:c1:a7:fa:03:52:ac:0d:78:ec:2c:9a:67:c5:7c:
         8f:f7:08:80:d7:f8:6c:28:29:ef:9f:64:86:db:e3:c6:b8:63:
         0e:88:35:00:ea:f7:49:4a:d9:bc:ec:16:71:02:4c:12:f0:92:
         25:e6:0e:34:70:fc:b8:fc:9c:04:7a:fb:25:a0:3e:52:44:f5:
         5a:cd:87:6c:09:d0:e3:ab:23:66:e6:81:f0:53:03:be:c9:e0:
         32:10:f2:d8:78:30:a5:ac:64:33:52:fb:d7:6e:ea:93:e3:94:
         4d:70:86:ee:29:69:09:b0:e8:21:0a:e8:af:b3:82:3a:f4:3b:
         1a:95:8b:fc:81:1f:7a:f1:c4:42:ed:24:b2:2d:7e:bf:c8:88:
         46:a1:2a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg+yZ2AqY+Bis4mA7cDWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmIzNTAwNWQzMDIyODA0NDM2ZDcyZGMzYzljODY1Y2Zh
YWEwMDMwHhcNMjYwMzI1MTUwMTM1WhcNMjYwMzI2MTUwMTM1WjAzMTEwLwYDVQQD
EygwMmE4MzQzZDYyZjU4MjgxNjhiMTc5OTJlYmQ3ZDVhYWRkZDAyNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VYDXKHPX1SqBO2qhDh53nuACRyM
ARfjmR9v1Dw+zvgN/XGxWkmNdlbVl5PWT8vWaSmzd7/ApFss76JC4vgUuhNnmumN
u1sEzyJXDqHPMpJu88u5ftgD8/CTCcI0LY2pL4j3PWeFHbwmaliiyTkdEizAaFFW
kuaurJ/rL2UFgxJWY12XhL2G6+mCej1RuudrEqNPR8PvtnDzg7r5wmwrd6WItEJR
Y5Ing2Nf/A4szMka/956F8MfjmV11gg2QZoSkq8BQRVDx/Opnygt/OC1ZOAQbIoj
2wgDPwfnwuTElmPPZA1rjGasHIj0Y2lCnfyVUNmHBMvidxmpbTJJ8k4SFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKoND1i9YKBaLF5kuvX1ard0Cd5MB8GA1UdIwQY
MBaAFCtrNQBdMCKARDbXLcPJyGXPqqADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgt
ZjE4ZmJmNTk2ZWJhLzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgtZjE4ZmJmNTk2ZWJh
LzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhepYRp5
EnDTVA4mplXvjfwmOAU63Tm1bi0SVmzXKtumoFlfLIqPEPsAi/8e4rZNZdl5470Z
THKkmqmCRGa9g/K5HD1hc6eQzdGCjek3l9eB6LiAipavchUQNyX0XLjEa0+crfQe
n3D91daV4F9/78Gn+gNSrA147CyaZ8V8j/cIgNf4bCgp759khtvjxrhjDog1AOr3
SUrZvOwWcQJMEvCSJeYONHD8uPycBHr7JaA+UkT1Ws2HbAnQ46sjZuaB8FMDvsng
MhDy2HgwpaxkM1L7127qk+OUTXCG7ilpCbDoIQror7OCOvQ7GpWL/IEfevHEQu0k
si1+v8iIRqEqSA==
-----END CERTIFICATE-----