Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
File:                     TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json)
Hash identifier:          yyJC5YaIxqP6xd612gR7vttZQrTR79O6U4oDIwwICG4=
Subject key identifier:   AB:11:69:01:B4:6B:49:9B:51:42:8E:C3:12:A0:1F:40:4E:05:A2:1A
Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Certificate issuer:       /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Certificate serial:       019D258370FE8D1B71C78DE86B350B724251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
Manifest number:          0D68
Signing time:             Wed 25 Mar 2026 15:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:04 +0000
Files and hashes:         1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: mDrumsyQc37UBNL3zHPTK4Ycbed/IZfKdt/mLODUgK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:70:fe:8d:1b:71:c7:8d:e8:6b:35:0b:72:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
        Validity
            Not Before: Mar 25 15:01:04 2026 GMT
            Not After : Mar 26 15:01:04 2026 GMT
        Subject: CN=ab116901b46b499b51428ec312a01f404e05a21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:22:06:4d:3b:ab:ea:41:8c:01:7d:45:f2:
                    b9:31:04:04:8c:03:f0:0c:00:01:29:63:bd:4a:e1:
                    98:cd:49:83:6e:d3:0a:23:44:76:e3:ce:ae:7d:1e:
                    b2:7e:d0:f5:a2:ba:c3:40:36:17:91:97:c7:b9:d4:
                    0a:3d:7c:2a:ed:f1:c1:b0:d7:82:47:d7:a9:0d:fc:
                    5f:04:c2:16:c3:44:bc:e8:2c:21:b1:b4:e9:af:95:
                    16:c9:ad:12:65:f0:ac:03:7b:25:25:e2:12:cf:3c:
                    fc:fe:c4:0e:9c:68:f8:66:90:d2:f7:30:7d:3b:90:
                    6d:1e:ae:85:ad:15:9c:9f:d2:d4:ed:52:b5:14:cc:
                    83:c8:5b:1d:70:f3:53:38:de:bc:be:17:04:6a:87:
                    ce:13:1a:ad:4b:a4:f6:d1:d0:25:93:6d:04:66:1c:
                    b0:0b:e5:50:14:32:03:16:1b:02:e9:15:bb:f0:47:
                    fa:d2:cb:5b:15:b8:95:7c:5f:fb:12:9b:cd:ba:bf:
                    77:76:87:75:fb:8a:b5:c6:fb:7d:52:ae:b6:9c:48:
                    4f:cc:a4:86:b9:8f:0a:6f:b6:1a:27:5e:8a:cf:3b:
                    10:63:b5:65:d6:aa:59:45:50:63:fb:94:b0:3b:8b:
                    18:cd:c8:73:c4:16:e2:79:77:48:84:b8:5d:7b:ae:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:11:69:01:B4:6B:49:9B:51:42:8E:C3:12:A0:1F:40:4E:05:A2:1A
            X509v3 Authority Key Identifier:
                keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e1:ec:94:3f:d8:a7:74:32:54:ae:11:db:29:70:c0:4a:30:
         7a:2d:58:76:97:ff:ce:d3:0a:5e:b9:fc:cd:09:08:13:0d:66:
         1b:9c:4f:2e:28:97:28:7c:1d:bc:fd:6e:8a:a0:96:dd:2a:92:
         e4:1f:08:af:9b:67:4a:85:c1:76:eb:70:e4:52:4e:ab:d0:49:
         3b:f1:76:4b:3b:a6:e6:6e:46:d5:a7:88:27:47:e0:47:56:87:
         17:54:36:ec:2e:5a:00:ae:a6:97:07:0a:7a:c0:54:74:30:41:
         ba:45:26:a4:c4:9d:6f:99:d3:86:cc:b8:f8:39:d4:86:4d:79:
         62:99:54:87:91:26:15:ff:73:44:c6:2a:1e:65:c7:20:a4:01:
         d2:25:2c:ac:9b:17:fc:68:db:f1:d0:c4:70:40:3d:5f:bf:5a:
         79:8c:88:9f:0f:72:b2:0a:ce:53:40:30:87:57:7a:1d:cc:fe:
         2c:9c:fa:be:a1:19:20:d8:5b:ec:8f:cd:d3:4a:89:e1:2e:22:
         b5:53:4c:ee:60:08:43:05:c3:1b:6c:42:6c:e5:6e:31:0f:00:
         99:d6:b4:f8:44:c3:d4:81:45:16:0c:aa:e7:c4:91:44:c2:a8:
         1a:42:5c:20:b8:54:5b:ce:80:60:7d:73:a0:0e:79:c1:e2:4d:
         33:d1:98:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3D+jRtxx43oazULckJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWMyNjdhZTJmMWJmOTVlNmQ3YTE0MjA4MGU1ZGY3YTMx
Mzk0OTIwHhcNMjYwMzI1MTUwMTA0WhcNMjYwMzI2MTUwMTA0WjAzMTEwLwYDVQQD
EyhhYjExNjkwMWI0NmI0OTliNTE0MjhlYzMxMmEwMWY0MDRlMDVhMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bYiBk07q+pBjAF9RfK5MQQEjAPw
DAABKWO9SuGYzUmDbtMKI0R2486ufR6yftD1orrDQDYXkZfHudQKPXwq7fHBsNeC
R9epDfxfBMIWw0S86CwhsbTpr5UWya0SZfCsA3slJeISzzz8/sQOnGj4ZpDS9zB9
O5BtHq6FrRWcn9LU7VK1FMyDyFsdcPNTON68vhcEaofOExqtS6T20dAlk20EZhyw
C+VQFDIDFhsC6RW78Ef60stbFbiVfF/7EpvNur93dod1+4q1xvt9Uq62nEhPzKSG
uY8Kb7YaJ16KzzsQY7Vl1qpZRVBj+5SwO4sYzchzxBbieXdIhLhde65NLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsRaQG0a0mbUUKOwxKgH0BOBaIaMB8GA1UdIwQY
MBaAFE7sJnri8b+V5tehQggOXfejE5SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMt
NmI5NmM4MzYxMjY1LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMtNmI5NmM4MzYxMjY1
LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOHslD/Y
p3QyVK4R2ylwwEowei1Ydpf/ztMKXrn8zQkIEw1mG5xPLiiXKHwdvP1uiqCW3SqS
5B8Ir5tnSoXBdutw5FJOq9BJO/F2Szum5m5G1aeIJ0fgR1aHF1Q27C5aAK6mlwcK
esBUdDBBukUmpMSdb5nThsy4+DnUhk15YplUh5EmFf9zRMYqHmXHIKQB0iUsrJsX
/Gjb8dDEcEA9X79aeYyInw9ysgrOU0Awh1d6Hcz+LJz6vqEZINhb7I/N00qJ4S4i
tVNM7mAIQwXDG2xCbOVuMQ8Amda0+ETD1IFFFgyq58SRRMKoGkJcILhUW86AYH1z
oA55weJNM9GYJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:44 2026 by rpki-client