Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File:                     a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier:          9LWKN6PYrBpNz5+Lxezln4YfypmDngznsmdgueOGtbw=
Subject key identifier:   CB:63:41:D3:C1:74:97:A1:85:8D:16:52:AC:AF:4F:49:C4:16:93:11
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer:       /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial:       019D25BAC004F95F4B8E9418A28EA01BEA8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number:          16
Signing time:             Wed 25 Mar 2026 16:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:28 +0000
Files and hashes:         1: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: do4KbUboyB8gzrhFXBeJMuLiXwD7ggxOiDDSzbhk/fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:c0:04:f9:5f:4b:8e:94:18:a2:8e:a0:1b:ea:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
        Validity
            Not Before: Mar 25 16:01:28 2026 GMT
            Not After : Mar 26 16:01:28 2026 GMT
        Subject: CN=cb6341d3c17497a1858d1652acaf4f49c4169311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:f9:9b:78:1e:7d:3e:27:43:2d:87:57:f1:
                    6c:fb:cf:89:12:cf:eb:39:5d:f4:9d:15:20:f3:d9:
                    77:aa:dd:49:cc:54:ba:8d:d0:0b:a9:43:e0:2a:92:
                    8f:e4:4f:67:fa:bb:47:7a:fc:72:c4:d1:4f:61:f3:
                    ef:c9:10:1c:45:93:d6:4f:f7:34:68:82:91:a3:55:
                    df:e8:ba:aa:f4:5c:a0:fe:41:07:50:7b:f6:b4:9a:
                    40:27:26:d5:6b:de:84:23:d3:f8:70:ca:9f:07:eb:
                    b6:bb:0f:98:7b:0b:bb:35:98:00:bf:81:c7:08:3a:
                    ec:4d:bb:4e:c4:9c:06:a0:c1:6a:28:9a:24:88:a3:
                    d1:87:cb:be:a6:36:c0:f1:24:cd:30:ac:0a:7d:65:
                    54:bf:63:1b:e6:6d:d7:e3:8f:08:92:ac:7b:28:e9:
                    0f:ef:c4:ee:fa:91:4b:39:f2:e4:c3:c0:3f:3b:d7:
                    ff:1f:ee:aa:0d:ea:5c:e0:dc:b7:60:e5:9a:fe:91:
                    60:fe:5e:dc:a3:ae:f6:f5:ac:50:41:fd:4e:c3:7a:
                    85:f5:66:67:af:7f:9c:2e:b4:bf:0d:b5:bc:59:e5:
                    72:ee:42:a5:d5:1a:9b:7f:26:77:c6:30:c2:04:c2:
                    19:ee:ce:a9:a3:e1:f7:b9:ef:c0:6c:e2:9b:55:93:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:41:D3:C1:74:97:A1:85:8D:16:52:AC:AF:4F:49:C4:16:93:11
            X509v3 Authority Key Identifier:
                keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:e1:89:76:af:57:d6:ea:4c:c8:10:08:e2:be:23:2e:88:
         9c:c2:e4:e9:30:92:4f:4d:b0:35:22:be:39:ea:0e:73:dd:1b:
         ec:37:de:ce:25:5c:5f:c4:16:f8:fb:43:80:85:42:0d:dd:a7:
         28:62:2b:3a:54:35:35:39:52:38:47:0a:98:05:b0:7d:ad:c6:
         9c:47:95:ca:2b:a4:db:1e:e8:7d:b9:4c:41:c4:1d:d3:c0:10:
         6e:35:cb:33:f6:a4:22:55:97:dc:ed:27:f2:bd:c2:33:4e:4c:
         0f:a1:b8:49:04:d5:0b:5e:d7:07:9b:24:dc:85:77:9b:ea:71:
         bf:aa:ef:21:b5:c8:70:c3:b4:2e:2c:7f:b8:76:1c:7c:d1:65:
         e2:ab:a8:77:2b:6b:bb:47:c3:99:11:44:97:b6:5c:7e:7f:be:
         49:1e:76:05:28:99:87:18:f1:17:22:43:44:3a:18:e4:95:ef:
         04:5c:65:f4:f0:6b:33:ed:54:25:ea:50:de:45:e2:13:ee:20:
         68:4f:3a:27:84:c6:8c:48:31:f5:28:54:c5:db:4d:d7:5e:1a:
         f8:6f:06:2d:d8:da:a5:a4:85:6e:5b:1c:48:b4:0e:11:a3:2c:
         1a:b4:13:02:e8:9e:bd:c6:40:e2:f4:2e:b2:ec:8c:39:01:ca:
         88:6c:24:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lusAE+V9LjpQYoo6gG+qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjQ0MDcxYmE1YTY3Nzg3MjE1MTlhMTg2MjIxMjgwNGU2
MDM0Y2MwHhcNMjYwMzI1MTYwMTI4WhcNMjYwMzI2MTYwMTI4WjAzMTEwLwYDVQQD
EyhjYjYzNDFkM2MxNzQ5N2ExODU4ZDE2NTJhY2FmNGY0OWM0MTY5MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPr5m3gefT4nQy2HV/Fs+8+JEs/r
OV30nRUg89l3qt1JzFS6jdALqUPgKpKP5E9n+rtHevxyxNFPYfPvyRAcRZPWT/c0
aIKRo1Xf6Lqq9Fyg/kEHUHv2tJpAJybVa96EI9P4cMqfB+u2uw+Yewu7NZgAv4HH
CDrsTbtOxJwGoMFqKJokiKPRh8u+pjbA8STNMKwKfWVUv2Mb5m3X448Ikqx7KOkP
78Tu+pFLOfLkw8A/O9f/H+6qDepc4Ny3YOWa/pFg/l7co6729axQQf1Ow3qF9WZn
r3+cLrS/DbW8WeVy7kKl1RqbfyZ3xjDCBMIZ7s6po+H3ue/AbOKbVZPJpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtjQdPBdJehhY0WUqyvT0nEFpMRMB8GA1UdIwQY
MBaAFGv0QHG6Wmd4chUZoYYiEoBOYDTMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZTI2YjktNTAyOS00OGUzLWFhZTYt
NDg1MGI3MTI4MDA2LzEvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZTI2YjktNTAyOS00OGUzLWFhZTYtNDg1MGI3MTI4MDA2
LzEvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmvhiXav
V9bqTMgQCOK+Iy6InMLk6TCST02wNSK+OeoOc90b7DfeziVcX8QW+PtDgIVCDd2n
KGIrOlQ1NTlSOEcKmAWwfa3GnEeVyiuk2x7ofblMQcQd08AQbjXLM/akIlWX3O0n
8r3CM05MD6G4SQTVC17XB5sk3IV3m+pxv6rvIbXIcMO0Lix/uHYcfNFl4quodytr
u0fDmRFEl7Zcfn++SR52BSiZhxjxFyJDRDoY5JXvBFxl9PBrM+1UJepQ3kXiE+4g
aE86J4TGjEgx9ShUxdtN114a+G8GLdjapaSFblscSLQOEaMsGrQTAuievcZA4vQu
suyMOQHKiGwkvQ==
-----END CERTIFICATE-----