Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          QMmw+MFakcuMx0GyAAgI+Qpg+8GPcN+am7E3/ZrZAZM=
Subject key identifier:   E7:ED:DC:C3:54:94:AC:31:23:56:6E:CF:A7:3D:01:79:A9:2B:A2:7F
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       019D28F33EC42B7B2F7F28F18BDAD3A381AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 07:02:03 +0000
Manifest this update:     Thu 26 Mar 2026 07:02:03 +0000
Manifest next update:     Fri 27 Mar 2026 07:02:03 +0000
Files and hashes:         1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: FeQxRkneJKJu6D84Pgk7gEAZ2lcvy9huob1ocGmsVK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:3e:c4:2b:7b:2f:7f:28:f1:8b:da:d3:a3:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: Mar 26 07:02:03 2026 GMT
            Not After : Mar 27 07:02:03 2026 GMT
        Subject: CN=e7eddcc35494ac3123566ecfa73d0179a92ba27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:c4:8d:10:17:5a:72:6f:87:17:7a:ac:ef:
                    8b:3c:ef:ff:1b:91:93:6c:6d:39:a9:6a:89:b5:b9:
                    53:93:2b:30:8c:67:67:2a:a5:ad:f7:b8:18:a6:2f:
                    49:68:b3:96:e0:24:0c:68:64:6d:61:01:1d:6c:c6:
                    30:da:53:30:4e:62:4e:89:8e:de:74:33:b7:ea:a8:
                    4e:88:e7:f5:d7:07:f0:0e:cf:e6:94:c0:a4:41:62:
                    e1:00:ed:24:2c:ff:7e:3f:a9:fa:76:a7:e2:e9:24:
                    8a:7c:95:2f:dc:54:0e:05:8b:bc:e0:de:35:db:08:
                    5a:d6:f7:5c:33:90:2d:94:5f:73:f2:5b:6a:aa:f8:
                    bd:6b:36:4e:74:4d:61:5b:a8:5e:8e:dd:5f:40:13:
                    91:e1:18:8c:dd:5c:26:09:36:b1:51:cd:36:46:c8:
                    07:40:31:57:83:92:74:6c:48:62:ab:db:8f:66:ac:
                    84:a5:62:52:f8:46:f4:d3:7b:f8:e6:fa:ae:5c:8b:
                    80:02:21:b6:02:3b:28:e2:6b:07:a9:b1:ce:45:9a:
                    4f:af:b2:a6:9e:38:1b:9c:b6:35:63:df:88:17:c5:
                    d5:72:4c:14:c9:f3:9e:1e:45:7e:8b:36:8f:19:46:
                    da:fd:0a:67:ff:0b:c5:e5:c2:f7:14:61:c3:9e:33:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:ED:DC:C3:54:94:AC:31:23:56:6E:CF:A7:3D:01:79:A9:2B:A2:7F
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:74:2a:7d:25:7b:50:f7:4d:e2:f1:7d:b3:24:6f:cd:7c:35:
         3f:52:f4:ab:13:33:ed:64:8d:9d:d2:53:99:3c:f4:41:53:0a:
         c8:27:55:66:56:9c:96:8a:1a:77:90:d5:c5:a4:b4:f3:56:e1:
         fe:eb:7c:95:cc:10:16:18:cd:7a:36:5a:4f:c3:e4:9a:7b:cb:
         72:ce:8b:93:2e:ee:d6:43:87:a3:34:4f:97:01:3b:2e:3f:45:
         7e:72:3f:8c:6c:51:b7:6f:86:47:45:29:2e:f7:85:df:b3:82:
         a3:c4:48:09:74:55:66:23:42:73:1b:df:fe:3e:5e:fa:63:f2:
         37:ee:bf:4f:e9:c0:c8:e3:91:b9:9f:2b:b8:58:6d:58:c8:84:
         46:47:b0:43:c9:b1:aa:7f:3b:d5:17:43:27:dc:21:93:f1:ec:
         b2:ac:fe:e2:70:61:79:af:fb:19:67:b1:a1:af:bd:c5:0f:c7:
         d9:85:43:ab:71:46:a5:21:ae:ef:db:bf:7c:7c:78:9c:6e:cb:
         02:ba:53:fd:cc:d1:dd:27:a2:0b:c2:50:2b:d7:56:7a:e8:b5:
         5c:3f:9d:b9:27:b3:6d:3a:34:1b:f5:8c:47:90:77:c8:79:ea:
         8c:b3:e8:04:33:2a:5d:c5:2a:e6:ab:5b:58:ee:b5:53:6f:e9:
         34:c2:63:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8z7EK3svfyjxi9rTo4GqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODhmMGYxYjVkMzQxNjcwMDY5MjAyNzE3ZDYzYzA1NDA0
NjRmZjUwHhcNMjYwMzI2MDcwMjAzWhcNMjYwMzI3MDcwMjAzWjAzMTEwLwYDVQQD
EyhlN2VkZGNjMzU0OTRhYzMxMjM1NjZlY2ZhNzNkMDE3OWE5MmJhMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHEjRAXWnJvhxd6rO+LPO//G5GT
bG05qWqJtblTkyswjGdnKqWt97gYpi9JaLOW4CQMaGRtYQEdbMYw2lMwTmJOiY7e
dDO36qhOiOf11wfwDs/mlMCkQWLhAO0kLP9+P6n6dqfi6SSKfJUv3FQOBYu84N41
2wha1vdcM5AtlF9z8ltqqvi9azZOdE1hW6hejt1fQBOR4RiM3VwmCTaxUc02RsgH
QDFXg5J0bEhiq9uPZqyEpWJS+Eb003v45vquXIuAAiG2Ajso4msHqbHORZpPr7Km
njgbnLY1Y9+IF8XVckwUyfOeHkV+izaPGUba/Qpn/wvF5cL3FGHDnjPr3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOft3MNUlKwxI1Zuz6c9AXmpK6J/MB8GA1UdIwQY
MBaAFGaI8PG100FnAGkgJxfWPAVARk/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2Et
YjEzZDJmZWQxZGM2LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2EtYjEzZDJmZWQxZGM2
LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnQqfSV7
UPdN4vF9syRvzXw1P1L0qxMz7WSNndJTmTz0QVMKyCdVZlaclooad5DVxaS081bh
/ut8lcwQFhjNejZaT8PkmnvLcs6Lky7u1kOHozRPlwE7Lj9FfnI/jGxRt2+GR0Up
LveF37OCo8RICXRVZiNCcxvf/j5e+mPyN+6/T+nAyOORuZ8ruFhtWMiERkewQ8mx
qn871RdDJ9whk/Hssqz+4nBhea/7GWexoa+9xQ/H2YVDq3FGpSGu79u/fHx4nG7L
ArpT/czR3SeiC8JQK9dWeui1XD+duSezbTo0G/WMR5B3yHnqjLPoBDMqXcUq5qtb
WO61U2/pNMJjFw==
-----END CERTIFICATE-----