Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File:                     Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier:          j+QXppFawGB46MbtWli5BLjN/SOG62690c0jOPEdt/k=
Subject key identifier:   4C:2B:97:95:19:A6:30:A9:DF:D0:E9:D3:9D:F7:DE:77:C7:0C:31:DD
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer:       /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial:       019D26CD0AD43E8DE1EAF8C58BF26D4546D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 21:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:05 +0000
Files and hashes:         1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: wyFzeIMxdqnv1+EN9PpWzSTsJHAL6LqZJJZ2+p1elwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:0a:d4:3e:8d:e1:ea:f8:c5:8b:f2:6d:45:46:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
        Validity
            Not Before: Mar 25 21:01:05 2026 GMT
            Not After : Mar 26 21:01:05 2026 GMT
        Subject: CN=4c2b979519a630a9dfd0e9d39df7de77c70c31dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:05:85:e5:b4:9a:11:78:77:f7:7b:08:83:
                    00:17:6f:7e:c0:a8:fb:54:55:12:84:1b:08:d2:f4:
                    ec:8b:d7:a5:72:3f:d3:48:71:b3:4b:6a:d4:72:7e:
                    97:0c:b3:6c:6f:20:1e:60:20:88:91:1f:17:e1:2f:
                    d2:d1:a7:d1:d9:cd:2f:37:14:08:57:1e:42:79:0e:
                    ec:4e:b8:ba:4c:74:7b:e8:1b:21:9e:e4:4c:73:01:
                    86:76:96:24:f6:c5:02:03:97:a7:19:d9:67:a4:54:
                    fd:fd:8d:d1:42:80:2f:85:f7:d3:a9:a0:f9:92:49:
                    d9:d9:6c:7e:8c:03:86:c0:66:60:8d:15:d8:b3:5d:
                    bf:95:cd:74:22:7d:f3:6e:09:9a:1a:1c:ba:d5:80:
                    53:83:29:fa:61:75:d5:da:ad:aa:a8:c4:46:19:de:
                    31:17:29:ed:b5:7c:50:89:c3:45:21:4f:f8:fa:30:
                    59:a9:de:1e:4b:74:74:d8:ff:67:f3:f4:0e:d7:70:
                    c2:cf:82:f2:fd:55:68:25:af:f6:ef:87:6d:8f:28:
                    c1:94:03:a6:bd:be:16:c9:d7:49:07:00:5b:e3:ee:
                    9f:33:80:67:a5:56:a0:fe:38:e7:95:69:6c:76:e6:
                    95:48:80:95:09:53:13:ed:56:8c:3f:2a:30:c2:22:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:97:95:19:A6:30:A9:DF:D0:E9:D3:9D:F7:DE:77:C7:0C:31:DD
            X509v3 Authority Key Identifier:
                keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:61:32:2a:4f:86:9f:bc:b4:ee:6f:a7:4a:23:50:08:e6:34:
         2a:f8:40:2d:ad:5b:88:e8:f1:b9:4a:16:f5:11:ce:ed:1b:fe:
         17:3e:f7:27:9e:d6:17:29:fe:34:f6:78:e6:2b:91:82:95:dd:
         3e:5f:0a:f8:b4:4d:17:5b:12:55:92:82:fc:9d:8b:35:65:13:
         2e:4a:89:4f:0d:9d:57:1d:bb:35:5e:16:de:6d:84:3f:16:a8:
         0e:2f:3b:ae:d3:4a:54:03:d2:ee:19:a9:17:d6:fe:68:93:5d:
         ee:c5:c8:eb:b9:05:b1:6b:bf:a8:b5:6e:e9:b7:4d:6d:e0:53:
         ff:05:92:e6:f5:57:05:14:cd:83:c4:3f:f5:e8:6e:c0:90:f4:
         29:36:44:f1:41:c7:7a:ab:90:db:4b:c5:1c:fc:fb:37:2c:58:
         8a:46:fd:53:a1:6e:a0:7d:13:eb:6a:30:81:52:da:f2:82:b9:
         52:63:e1:7c:f2:d1:02:a5:d5:04:5b:5b:aa:f9:7e:a4:dd:67:
         57:d4:27:d0:b6:4b:71:7d:39:90:8f:0f:64:d0:49:a8:66:24:
         dd:af:d7:1e:46:17:a7:e3:36:a3:f8:26:ea:5a:85:c7:19:0c:
         f0:25:b0:fc:a6:47:2a:84:05:fc:73:62:09:f5:a4:b4:89:09:
         b7:77:a2:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzQrUPo3h6vjFi/JtRUbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmU2NjE2OTU3NDFkODVjZmVkY2Y2ZmZiY2Y3NDY5OTk1
OTU2OWYwHhcNMjYwMzI1MjEwMTA1WhcNMjYwMzI2MjEwMTA1WjAzMTEwLwYDVQQD
Eyg0YzJiOTc5NTE5YTYzMGE5ZGZkMGU5ZDM5ZGY3ZGU3N2M3MGMzMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZYFheW0mhF4d/d7CIMAF29+wKj7
VFUShBsI0vTsi9elcj/TSHGzS2rUcn6XDLNsbyAeYCCIkR8X4S/S0afR2c0vNxQI
Vx5CeQ7sTri6THR76BshnuRMcwGGdpYk9sUCA5enGdlnpFT9/Y3RQoAvhffTqaD5
kknZ2Wx+jAOGwGZgjRXYs12/lc10In3zbgmaGhy61YBTgyn6YXXV2q2qqMRGGd4x
FynttXxQicNFIU/4+jBZqd4eS3R02P9n8/QO13DCz4Ly/VVoJa/274dtjyjBlAOm
vb4WyddJBwBb4+6fM4BnpVag/jjnlWlsduaVSICVCVMT7VaMPyowwiKoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwrl5UZpjCp39Dp05333nfHDDHdMB8GA1UdIwQY
MBaAFCn+ZhaVdB2Fz+3Pb/vPdGmZWVafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgt
MmU4ODBhN2E4MmNhLzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgtMmU4ODBhN2E4MmNh
LzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWEyKk+G
n7y07m+nSiNQCOY0KvhALa1biOjxuUoW9RHO7Rv+Fz73J57WFyn+NPZ45iuRgpXd
Pl8K+LRNF1sSVZKC/J2LNWUTLkqJTw2dVx27NV4W3m2EPxaoDi87rtNKVAPS7hmp
F9b+aJNd7sXI67kFsWu/qLVu6bdNbeBT/wWS5vVXBRTNg8Q/9ehuwJD0KTZE8UHH
equQ20vFHPz7NyxYikb9U6FuoH0T62owgVLa8oK5UmPhfPLRAqXVBFtbqvl+pN1n
V9Qn0LZLcX05kI8PZNBJqGYk3a/XHkYXp+M2o/gm6lqFxxkM8CWw/KZHKoQF/HNi
CfWktIkJt3eiXQ==
-----END CERTIFICATE-----