Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          VJNZA5NGSsWdy2Z1PlMgCOluWHN+AdtH5JxAClSbdsg=
Subject key identifier:   60:84:18:5D:98:82:80:AE:0E:AD:CB:D5:CD:33:B1:6F:FD:14:68:71
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       019D26967EBB79AD2A6C9C991793F8ABEB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          1051
Signing time:             Wed 25 Mar 2026 20:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:30 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: uUT88egu75rPQCQWtFSZLiT48nGK3QqfZO43gkGeP4c=)
                          2: bwUes-crYnDaWmfkSgjmaGPderc.roa (hash: X7axPRZQ+Fy3248GsJnvoTWbu+uAo3jc8nap7n2R83o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:7e:bb:79:ad:2a:6c:9c:99:17:93:f8:ab:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Mar 25 20:01:30 2026 GMT
            Not After : Mar 26 20:01:30 2026 GMT
        Subject: CN=6084185d988280ae0eadcbd5cd33b16ffd146871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:27:6c:5a:e8:82:5a:a6:01:5b:ed:36:66:
                    70:9f:97:2d:b1:4e:a4:a7:90:2b:ea:b2:f4:2e:88:
                    71:ce:2f:70:45:a4:6d:8e:93:9d:18:8b:4b:ea:d5:
                    86:9f:38:3f:52:a9:cc:a8:8e:95:d8:bd:29:9e:78:
                    a2:c3:ba:74:aa:fb:86:f9:80:55:38:1c:a9:d9:a1:
                    b0:50:b9:48:a5:06:23:30:ca:17:66:6b:98:e7:59:
                    3b:88:25:92:41:24:69:f9:72:d6:77:d8:b1:62:b2:
                    35:85:ff:26:9d:fa:3b:2e:32:56:66:b0:af:b4:81:
                    e3:d5:32:68:52:53:5a:d7:b7:b3:16:81:e3:54:60:
                    24:af:c9:91:6d:64:5c:ce:69:64:bc:65:de:2f:b9:
                    a3:da:85:b3:f0:23:9f:da:3c:b1:51:07:ca:76:90:
                    10:ee:75:4b:57:88:8f:cd:8b:7c:55:60:26:ff:11:
                    04:ae:d1:e3:1f:5e:1d:40:3d:ed:10:0f:1e:85:9b:
                    b4:a4:e1:d9:90:37:e5:44:e7:72:a0:e4:7c:f9:bb:
                    b9:4b:17:b1:9f:68:7d:73:57:9a:8f:e0:7b:49:e5:
                    c1:a9:37:17:cc:95:33:d6:39:88:32:9d:6a:40:be:
                    44:5d:7c:ef:26:f1:69:4d:71:7c:f7:46:f6:b6:e1:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:84:18:5D:98:82:80:AE:0E:AD:CB:D5:CD:33:B1:6F:FD:14:68:71
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:66:cc:af:26:a9:81:a9:c6:4d:b2:10:f9:0a:3f:5d:61:e0:
         dd:12:ec:ff:68:60:d4:fa:3b:e2:e8:9e:17:53:93:6f:55:e8:
         94:28:f2:f5:75:1a:25:d6:07:42:4c:a7:6c:82:cf:3c:d8:81:
         15:ed:73:7d:00:c6:ec:d3:85:8a:f1:61:27:89:26:5b:3a:64:
         3c:e5:1b:57:18:80:7b:57:df:b5:14:51:6b:f8:8a:f0:00:f3:
         6d:5f:d5:a8:40:07:3b:a0:74:8b:71:b2:f2:47:45:b1:43:89:
         94:57:ea:41:39:4a:9b:ad:a0:61:4a:bb:21:1b:69:bb:e1:1c:
         98:3c:0f:d9:64:ee:11:f9:d6:11:df:4f:f3:11:b2:91:1f:79:
         d9:e9:07:4c:44:d4:e8:ab:2a:2c:95:30:bb:97:55:37:55:f4:
         9a:92:bd:f8:f5:2b:11:10:4f:47:a0:37:c6:ae:3b:69:8d:70:
         ff:2b:3f:25:1c:ed:e8:37:bd:02:31:f7:4e:46:d7:fb:6f:34:
         a9:64:bb:68:40:e9:54:a3:ac:b7:e7:86:46:35:25:18:f5:c4:
         3f:ec:88:8a:cc:7c:21:51:c0:38:1c:84:be:f6:89:0c:0c:2b:
         41:2f:8a:2d:33:88:65:5f:84:ae:59:dd:4c:80:0b:1c:05:07:
         cc:0d:ba:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mln67ea0qbJyZF5P4q+srMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTUzNjQzOTVjY2ZkODU0Mzk3NzM1OGZhOWI3MWY5Mjcx
NTQ0ZjYwHhcNMjYwMzI1MjAwMTMwWhcNMjYwMzI2MjAwMTMwWjAzMTEwLwYDVQQD
Eyg2MDg0MTg1ZDk4ODI4MGFlMGVhZGNiZDVjZDMzYjE2ZmZkMTQ2ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYknbFroglqmAVvtNmZwn5ctsU6k
p5Ar6rL0Lohxzi9wRaRtjpOdGItL6tWGnzg/UqnMqI6V2L0pnniiw7p0qvuG+YBV
OByp2aGwULlIpQYjMMoXZmuY51k7iCWSQSRp+XLWd9ixYrI1hf8mnfo7LjJWZrCv
tIHj1TJoUlNa17ezFoHjVGAkr8mRbWRczmlkvGXeL7mj2oWz8COf2jyxUQfKdpAQ
7nVLV4iPzYt8VWAm/xEErtHjH14dQD3tEA8ehZu0pOHZkDflROdyoOR8+bu5Sxex
n2h9c1eaj+B7SeXBqTcXzJUz1jmIMp1qQL5EXXzvJvFpTXF890b2tuFLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCEGF2YgoCuDq3L1c0zsW/9FGhxMB8GA1UdIwQY
MBaAFNCVNkOVzP2FQ5dzWPqbcfknFUT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGIt
ZTA3OTUyZGI5NjdiLzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGItZTA3OTUyZGI5Njdi
LzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWbMryap
ganGTbIQ+Qo/XWHg3RLs/2hg1Po74uieF1OTb1XolCjy9XUaJdYHQkynbILPPNiB
Fe1zfQDG7NOFivFhJ4kmWzpkPOUbVxiAe1fftRRRa/iK8ADzbV/VqEAHO6B0i3Gy
8kdFsUOJlFfqQTlKm62gYUq7IRtpu+EcmDwP2WTuEfnWEd9P8xGykR952ekHTETU
6KsqLJUwu5dVN1X0mpK9+PUrERBPR6A3xq47aY1w/ys/JRzt6De9AjH3TkbX+280
qWS7aEDpVKOst+eGRjUlGPXEP+yIisx8IVHAOByEvvaJDAwrQS+KLTOIZV+Erlnd
TIALHAUHzA260w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:37 2026 by rpki-client