Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier:          OLW+pC9W9dK25h+593cR8NGWfyUEbeTxW15fxrwlWeE=
Subject key identifier:   BA:06:69:3A:A7:9D:25:98:DC:74:60:07:0E:97:38:2A:39:B3:05:6B
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer:       /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial:       019D2704A63979368B04E767603C06620270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number:          1813
Signing time:             Wed 25 Mar 2026 22:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:49 +0000
Files and hashes:         1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: UF8CR/zQO5fZ5bFGqngLJ4P6tMEzeSYYeNYgvjjSscg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:a6:39:79:36:8b:04:e7:67:60:3c:06:62:02:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Validity
            Not Before: Mar 25 22:01:49 2026 GMT
            Not After : Mar 26 22:01:49 2026 GMT
        Subject: CN=ba06693aa79d2598dc7460070e97382a39b3056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:01:1e:ce:aa:4a:66:ee:b6:86:55:55:a5:
                    b0:10:dc:f0:50:2d:f8:e7:15:ef:4e:df:1b:0b:c1:
                    6f:70:db:e6:b2:01:55:b9:82:cf:07:d4:6e:ed:c6:
                    07:02:61:60:c5:62:92:20:2f:70:e2:56:45:28:16:
                    db:12:a1:a3:76:d7:7b:e2:33:ad:09:be:84:70:48:
                    84:65:7f:28:df:49:f6:8b:1a:65:33:1c:45:14:1d:
                    42:61:7a:c3:74:72:ce:6e:13:ac:5e:9a:39:d4:22:
                    91:3d:10:0f:b3:87:a9:05:19:93:5a:79:f2:77:40:
                    29:3d:99:ce:a3:e6:e4:06:fd:5d:44:76:d6:46:db:
                    3f:63:24:b5:0d:a7:e7:6a:a6:0a:bc:36:db:d9:72:
                    52:04:f9:71:fb:ad:ca:a9:76:a4:97:29:f8:91:7a:
                    65:b0:c1:98:bf:1b:e1:6b:b4:07:e2:5d:9e:dc:f2:
                    b7:ba:71:33:dc:da:21:86:99:7e:c8:a6:03:ef:96:
                    21:f8:2c:d8:ca:15:41:a5:d6:0a:63:e1:e1:03:57:
                    8c:bc:54:65:43:b6:a5:35:68:a7:97:d6:13:7c:ab:
                    ed:fb:bc:00:dc:01:73:62:c4:01:db:fc:dd:b6:26:
                    e5:21:c2:42:d0:7d:dc:62:7b:3e:47:83:d0:f7:52:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:69:3A:A7:9D:25:98:DC:74:60:07:0E:97:38:2A:39:B3:05:6B
            X509v3 Authority Key Identifier:
                keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:bc:11:10:d6:40:0c:3d:22:fe:74:be:88:30:aa:fa:28:
         f3:7c:73:c5:45:f4:9b:e1:ac:96:e3:7c:de:25:c6:84:f8:b1:
         36:44:97:1c:02:b0:ca:a5:1a:31:a1:06:09:3d:fe:d7:b2:c3:
         f1:50:7b:9e:1e:d3:ed:a7:b5:35:9d:09:6c:75:57:b2:f7:6a:
         2c:03:52:df:bf:73:61:ae:f2:b2:7d:f2:e9:5f:51:dc:6c:02:
         c0:1b:cd:6f:42:6b:05:ba:bd:d9:6b:dc:5d:15:07:06:b2:35:
         8f:78:2e:b8:03:30:f4:52:ab:39:d9:77:9c:1e:72:ba:40:24:
         53:c8:22:5f:a2:a6:80:ce:af:2b:10:67:3a:b7:67:95:d1:5f:
         92:e6:47:cd:ff:0f:60:a6:db:8d:48:e1:99:aa:34:c3:41:1e:
         b0:0b:0b:05:e5:ab:77:47:1d:38:df:b5:be:6a:c3:3d:d3:3b:
         13:cb:f0:c0:be:6a:b5:fb:eb:65:b0:ba:66:52:74:52:ba:51:
         99:1c:dd:7e:26:f0:80:5e:41:0c:42:6a:8d:0c:46:2d:67:c3:
         23:b4:7c:16:40:e2:e0:80:f6:67:fa:06:66:6e:75:4d:d4:4e:
         b2:4a:56:bd:53:a0:44:9b:e8:16:af:39:eb:ab:36:44:d1:49:
         8e:97:49:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKY5eTaLBOdnYDwGYgJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk
MzI1ZDkwHhcNMjYwMzI1MjIwMTQ5WhcNMjYwMzI2MjIwMTQ5WjAzMTEwLwYDVQQD
EyhiYTA2NjkzYWE3OWQyNTk4ZGM3NDYwMDcwZTk3MzgyYTM5YjMwNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQsBHs6qSmbutoZVVaWwENzwUC34
5xXvTt8bC8FvcNvmsgFVuYLPB9Ru7cYHAmFgxWKSIC9w4lZFKBbbEqGjdtd74jOt
Cb6EcEiEZX8o30n2ixplMxxFFB1CYXrDdHLObhOsXpo51CKRPRAPs4epBRmTWnny
d0ApPZnOo+bkBv1dRHbWRts/YyS1DafnaqYKvDbb2XJSBPlx+63KqXaklyn4kXpl
sMGYvxvha7QH4l2e3PK3unEz3Nohhpl+yKYD75Yh+CzYyhVBpdYKY+HhA1eMvFRl
Q7alNWinl9YTfKvt+7wA3AFzYsQB2/zdtiblIcJC0H3cYns+R4PQ91JNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoGaTqnnSWY3HRgBw6XOCo5swVrMB8GA1UdIwQY
MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt
ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj
LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq68ERDW
QAw9Iv50vogwqvoo83xzxUX0m+GsluN83iXGhPixNkSXHAKwyqUaMaEGCT3+17LD
8VB7nh7T7ae1NZ0JbHVXsvdqLANS379zYa7ysn3y6V9R3GwCwBvNb0JrBbq92Wvc
XRUHBrI1j3guuAMw9FKrOdl3nB5yukAkU8giX6KmgM6vKxBnOrdnldFfkuZHzf8P
YKbbjUjhmao0w0EesAsLBeWrd0cdON+1vmrDPdM7E8vwwL5qtfvrZbC6ZlJ0UrpR
mRzdfibwgF5BDEJqjQxGLWfDI7R8FkDi4ID2Z/oGZm51TdROskpWvVOgRJvoFq85
66s2RNFJjpdJNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:10 2026 by rpki-client