Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File:                     RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier:          bpyhlL7G1uNrfV+IvPxGIUcGCCP/UMd5FFJaaaVpe9I=
Subject key identifier:   80:B0:BF:9E:87:30:11:65:51:3C:F6:D9:25:00:91:67:CC:24:53:E6
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer:       /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial:       019D2703BAAD1B825A7F181FA7566F32DA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:48 +0000
Files and hashes:         1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: Ko7vYAV1v5rpIHDTY5chI1oq03VYUf8uk4/l3281sdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ba:ad:1b:82:5a:7f:18:1f:a7:56:6f:32:da:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
        Validity
            Not Before: Mar 25 22:00:48 2026 GMT
            Not After : Mar 26 22:00:48 2026 GMT
        Subject: CN=80b0bf9e87301165513cf6d925009167cc2453e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:f8:e5:66:9f:79:8a:c9:88:da:74:67:94:
                    46:f8:5a:0f:63:7e:95:cc:6c:1c:e3:64:80:d4:be:
                    f3:6c:b2:28:9b:70:94:e3:3f:b9:1c:7e:9f:17:84:
                    59:49:40:c1:36:3a:fe:84:88:31:93:5a:ab:e6:b1:
                    09:f1:07:99:d8:33:d1:e4:fc:15:f7:67:4e:91:52:
                    03:33:5b:65:c4:6f:f5:0c:a7:b1:18:e6:3f:38:ca:
                    b1:d5:0d:56:32:7e:87:01:b1:f0:af:bb:ad:f8:a2:
                    2f:88:6e:90:b8:76:c9:fe:8f:b0:49:0c:4b:e1:21:
                    90:d4:4d:fa:f6:cd:fe:53:cc:9a:0e:3f:a6:1f:da:
                    95:06:f6:80:37:6d:dd:02:a4:3a:04:cc:57:2c:ad:
                    de:47:8b:c0:da:79:a0:7b:62:22:7b:d8:11:29:92:
                    8c:da:bf:f6:01:9b:61:1d:fe:92:ca:50:e0:14:de:
                    18:d0:5a:f6:5c:cf:c0:ef:48:ef:78:65:cd:06:83:
                    1b:e2:21:d9:7e:26:87:bb:83:b5:0c:26:19:d1:f5:
                    f0:2c:f6:64:75:9b:7d:17:78:e3:b6:44:99:2b:10:
                    64:34:53:ff:4e:f1:66:9a:96:02:0c:8a:c4:f5:ae:
                    05:c4:7d:b5:69:8f:85:1e:f7:39:17:e7:81:27:2d:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:BF:9E:87:30:11:65:51:3C:F6:D9:25:00:91:67:CC:24:53:E6
            X509v3 Authority Key Identifier:
                keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:10:1b:6e:55:fe:ba:bd:76:38:94:3a:c7:ff:c9:25:e4:7c:
         30:8d:c5:e5:d9:8f:c6:e4:0b:95:d5:4c:53:8f:4a:5a:ee:33:
         eb:78:80:28:be:e9:bd:e3:c3:88:32:0c:6a:e9:a2:41:86:87:
         73:44:3e:7f:b2:3b:91:5f:c8:ea:18:5c:45:fe:b7:ad:0d:81:
         59:06:87:ee:91:6e:fb:f2:be:03:e3:78:64:53:ba:f4:2e:e9:
         c3:00:cb:a5:5f:58:a9:53:15:b9:9b:fe:83:6e:3f:ff:e0:0c:
         91:0e:8e:fd:22:2d:04:43:f3:88:f9:48:04:88:63:e5:96:22:
         1e:24:72:e0:f7:dd:79:e3:9c:99:2d:c8:d7:8c:61:7e:6f:13:
         5d:90:2f:fe:91:3b:5d:13:6f:a1:35:a3:4a:9f:9e:79:a0:35:
         bc:5c:2b:20:4f:fe:ca:66:09:c4:eb:91:c8:ec:5c:32:02:c2:
         8c:52:85:79:ce:05:cb:db:84:2d:21:45:98:ae:05:22:23:56:
         2e:59:c6:05:d8:e1:63:ae:e7:7c:22:f5:6f:0a:fa:54:cc:6d:
         85:2b:e2:33:c9:7e:ea:2c:34:97:f5:32:03:47:f0:f7:1c:b8:
         5d:69:f6:ee:74:8f:95:a5:06:3b:61:cf:69:44:97:3b:77:47:
         69:bc:57:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7qtG4Jafxgfp1ZvMtqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTgxY2U3MTk0MmQ0NTcyOWY4NzA2ZTJiYjFiMDE0OWE1
MmI0MTUwHhcNMjYwMzI1MjIwMDQ4WhcNMjYwMzI2MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg4MGIwYmY5ZTg3MzAxMTY1NTEzY2Y2ZDkyNTAwOTE2N2NjMjQ1M2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPb45WafeYrJiNp0Z5RG+FoPY36V
zGwc42SA1L7zbLIom3CU4z+5HH6fF4RZSUDBNjr+hIgxk1qr5rEJ8QeZ2DPR5PwV
92dOkVIDM1tlxG/1DKexGOY/OMqx1Q1WMn6HAbHwr7ut+KIviG6QuHbJ/o+wSQxL
4SGQ1E369s3+U8yaDj+mH9qVBvaAN23dAqQ6BMxXLK3eR4vA2nmge2Iie9gRKZKM
2r/2AZthHf6SylDgFN4Y0Fr2XM/A70jveGXNBoMb4iHZfiaHu4O1DCYZ0fXwLPZk
dZt9F3jjtkSZKxBkNFP/TvFmmpYCDIrE9a4FxH21aY+FHvc5F+eBJy2WRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICwv56HMBFlUTz22SUAkWfMJFPmMB8GA1UdIwQY
MBaAFEWYHOcZQtRXKfhwbiuxsBSaUrQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUt
NjIxMjgwMmFlMTZlLzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUtNjIxMjgwMmFlMTZl
LzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxAbblX+
ur12OJQ6x//JJeR8MI3F5dmPxuQLldVMU49KWu4z63iAKL7pvePDiDIMaumiQYaH
c0Q+f7I7kV/I6hhcRf63rQ2BWQaH7pFu+/K+A+N4ZFO69C7pwwDLpV9YqVMVuZv+
g24//+AMkQ6O/SItBEPziPlIBIhj5ZYiHiRy4PfdeeOcmS3I14xhfm8TXZAv/pE7
XRNvoTWjSp+eeaA1vFwrIE/+ymYJxOuRyOxcMgLCjFKFec4Fy9uELSFFmK4FIiNW
LlnGBdjhY67nfCL1bwr6VMxthSviM8l+6iw0l/UyA0fw9xy4XWn27nSPlaUGO2HP
aUSXO3dHabxXoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:57 2026 by rpki-client