Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          AyRmZbCX4FYNO+GZIyuC+0lNrZsjhT1/BpbvrtkFY+4=
Subject key identifier:   F8:8D:72:2C:71:B1:EC:3F:B8:9F:84:7E:85:B4:82:C0:6B:12:46:56
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       019D2704C493782878F51C4E35646D62B419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          15C7
Signing time:             Wed 25 Mar 2026 22:01:56 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:56 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:56 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: oQxr6buAMC7KQvyEbQiE8dm7j3sqojogNUUYJnw5BEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c4:93:78:28:78:f5:1c:4e:35:64:6d:62:b4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Mar 25 22:01:56 2026 GMT
            Not After : Mar 26 22:01:56 2026 GMT
        Subject: CN=f88d722c71b1ec3fb89f847e85b482c06b124656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:9f:cf:1f:d8:1e:80:16:9d:ac:cb:f5:fc:
                    b6:56:49:d9:32:83:98:c5:00:bc:13:f0:b4:66:45:
                    a6:2b:f3:d6:42:93:82:c8:2c:82:e1:f2:13:df:b1:
                    66:a3:52:06:71:88:03:09:4d:2a:36:1d:61:88:62:
                    2a:5f:59:50:5b:92:f0:7c:4c:d1:87:68:76:e5:10:
                    59:53:c1:0d:3c:57:33:29:fe:09:ec:95:e7:99:43:
                    b7:5b:ff:78:ec:23:8b:22:50:fe:fa:64:71:d8:32:
                    2a:b8:f7:11:e2:13:15:ae:db:68:a5:63:70:c3:fa:
                    b0:59:60:12:43:75:74:cf:e3:e1:de:95:04:b3:a6:
                    0f:63:7f:78:87:bb:18:15:2b:70:c6:48:ca:aa:30:
                    9c:1f:94:b1:71:ee:23:57:0e:b8:46:10:89:3f:2c:
                    17:d3:19:a6:5e:d6:c0:2b:ee:0e:f3:94:68:db:9a:
                    25:a8:d4:28:ab:a2:4b:cf:12:d4:eb:37:0f:97:6e:
                    6c:55:10:f2:42:de:65:5b:c7:d7:3f:46:39:73:4b:
                    41:de:ec:79:ac:56:47:18:6b:49:39:e4:c4:2c:3e:
                    c6:ca:77:54:03:8d:1b:81:6e:47:56:5e:de:b7:11:
                    5f:33:56:78:ec:d7:06:43:5c:fb:ed:b0:45:6b:f7:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8D:72:2C:71:B1:EC:3F:B8:9F:84:7E:85:B4:82:C0:6B:12:46:56
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:31:9a:b6:d2:db:ee:7e:2d:f0:83:05:fe:d2:28:a1:99:
         84:21:c6:a6:37:f2:14:f5:88:e5:ce:1e:6d:91:1f:09:9f:08:
         19:5a:21:e0:1b:e4:8b:bd:cc:72:be:cf:b3:96:e4:a6:7e:69:
         04:f4:ee:0d:32:7a:82:d9:dc:6d:7f:23:1f:62:be:e3:d9:07:
         76:f4:97:24:fe:d3:ee:b7:c6:f8:65:9b:32:8e:ff:72:21:c8:
         1e:21:11:42:79:27:34:2a:a0:d7:e2:ac:4c:41:49:1e:c9:cc:
         45:c6:8d:e6:b2:af:66:b0:86:fb:34:28:ea:7f:15:2c:c7:39:
         6a:50:17:0f:6e:27:55:d0:f1:bc:5c:9f:6a:fc:79:cd:a9:dc:
         06:4d:2e:50:ed:08:47:99:6f:c7:03:91:1c:45:26:e6:79:cd:
         a8:2a:5e:7f:34:49:49:70:de:ec:34:2f:df:b0:7c:8c:2e:d9:
         a6:60:86:35:8d:e1:f3:92:0f:88:c5:c4:0a:e3:15:f5:95:e7:
         c5:63:05:7c:2a:db:9b:fb:b2:57:39:ee:99:07:28:42:ef:ce:
         6a:30:4d:25:e4:44:81:d5:3c:f6:52:35:dc:47:c9:b1:aa:a7:
         3f:82:7b:62:49:0f:64:73:4b:8c:07:da:d9:e9:f6:2c:ce:ac:
         08:13:03:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMSTeCh49RxONWRtYrQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2U4MDU1MWI5MjM2YmJjMGNkNzFjNTFkMTk1OTE4MGU3
YzhmN2MwHhcNMjYwMzI1MjIwMTU2WhcNMjYwMzI2MjIwMTU2WjAzMTEwLwYDVQQD
EyhmODhkNzIyYzcxYjFlYzNmYjg5Zjg0N2U4NWI0ODJjMDZiMTI0NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bGfzx/YHoAWnazL9fy2VknZMoOY
xQC8E/C0ZkWmK/PWQpOCyCyC4fIT37Fmo1IGcYgDCU0qNh1hiGIqX1lQW5LwfEzR
h2h25RBZU8ENPFczKf4J7JXnmUO3W/947COLIlD++mRx2DIquPcR4hMVrttopWNw
w/qwWWASQ3V0z+Ph3pUEs6YPY394h7sYFStwxkjKqjCcH5Sxce4jVw64RhCJPywX
0xmmXtbAK+4O85Ro25olqNQoq6JLzxLU6zcPl25sVRDyQt5lW8fXP0Y5c0tB3ux5
rFZHGGtJOeTELD7GyndUA40bgW5HVl7etxFfM1Z47NcGQ1z77bBFa/eCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiNcixxsew/uJ+EfoW0gsBrEkZWMB8GA1UdIwQY
MBaAFKY+gFUbkja7wM1xxR0ZWRgOfI98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mNTg0Y2YtZThmMi00NGNiLWJkY2Ut
NDFiNjEwNjlhN2UyLzEvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mNTg0Y2YtZThmMi00NGNiLWJkY2UtNDFiNjEwNjlhN2Uy
LzEvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnwxmrbS
2+5+LfCDBf7SKKGZhCHGpjfyFPWI5c4ebZEfCZ8IGVoh4Bvki73Mcr7Ps5bkpn5p
BPTuDTJ6gtncbX8jH2K+49kHdvSXJP7T7rfG+GWbMo7/ciHIHiERQnknNCqg1+Ks
TEFJHsnMRcaN5rKvZrCG+zQo6n8VLMc5alAXD24nVdDxvFyfavx5zancBk0uUO0I
R5lvxwORHEUm5nnNqCpefzRJSXDe7DQv37B8jC7ZpmCGNY3h85IPiMXECuMV9ZXn
xWMFfCrbm/uyVznumQcoQu/OajBNJeREgdU89lI13EfJsaqnP4J7YkkPZHNLjAfa
2en2LM6sCBMDmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:57 2026 by rpki-client