Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File:                     u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier:          Y7mt45TeEe/Jq/k4DxzsB3fn80yJo+Isc5/EFmumh2U=
Subject key identifier:   61:12:83:04:B3:99:52:43:C9:52:B2:73:77:DC:AF:06:C3:E3:F5:5D
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer:       /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial:       019D273B11C74643B7FAB4DDB6E49FCCBCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number:          060D
Signing time:             Wed 25 Mar 2026 23:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:15 +0000
Files and hashes:         1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: 4sx/rpZbi3ytYvkyW5/Zl9fnv19PIqQ+SQ9OXFBQDBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:11:c7:46:43:b7:fa:b4:dd:b6:e4:9f:cc:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
        Validity
            Not Before: Mar 25 23:01:15 2026 GMT
            Not After : Mar 26 23:01:15 2026 GMT
        Subject: CN=61128304b3995243c952b27377dcaf06c3e3f55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:3b:21:28:8b:40:7f:64:f7:e5:a4:56:d7:
                    93:7f:81:8d:89:57:99:41:43:f4:e6:36:a5:d5:bc:
                    f1:b2:eb:58:ba:d4:32:51:e7:9b:41:cf:f5:a5:32:
                    64:e3:8d:fd:97:9b:54:5a:8d:bf:28:56:4e:c9:fe:
                    fd:91:7c:85:e9:65:59:a9:8c:95:87:a3:0d:c9:15:
                    e5:a6:c1:81:30:9c:c0:67:c9:87:c7:f7:30:e8:30:
                    e2:db:cd:11:34:ae:47:d7:27:65:bb:f0:ca:47:12:
                    77:cd:db:c7:fa:61:3f:d1:c0:a3:90:f5:38:9b:1e:
                    e0:87:58:15:68:7d:55:16:94:c9:46:96:ab:c0:e8:
                    81:d2:ea:08:ea:f7:2c:fb:01:fd:1d:ce:67:0e:6b:
                    98:5e:e3:e0:72:9b:bb:db:cf:17:d2:ea:7d:43:24:
                    14:3f:ba:fc:4f:f4:4c:bf:38:fd:bc:4e:39:cc:75:
                    9a:ee:21:65:fb:3e:e5:42:d9:e5:e4:fd:91:9a:62:
                    c6:96:b9:0c:39:67:2a:f4:c0:08:bc:30:1c:ac:68:
                    2a:ed:6b:fb:c5:46:26:f4:23:7c:fd:54:1f:09:a2:
                    01:04:dd:ec:00:d8:0b:29:7a:a9:38:3a:eb:cf:13:
                    0e:a5:41:6d:68:ab:e4:31:bb:6b:0b:71:f3:34:26:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:83:04:B3:99:52:43:C9:52:B2:73:77:DC:AF:06:C3:E3:F5:5D
            X509v3 Authority Key Identifier:
                keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:18:87:2f:c4:18:22:5e:39:9b:33:e6:c5:c8:15:56:44:44:
         61:95:c3:7d:fe:69:d3:15:eb:bf:b6:ac:77:d4:6f:bf:b0:8d:
         9b:35:6c:ce:4f:2e:c6:22:9e:66:41:b5:96:d9:76:01:96:9b:
         cd:b6:f4:d0:bd:d5:89:98:e1:f4:c3:cb:2f:cd:bc:a9:10:c9:
         16:c9:3b:09:66:6b:05:ea:1d:d2:79:e9:18:f5:fe:75:f5:80:
         b1:3e:34:4a:27:67:a9:7b:8d:a9:a4:15:6a:df:e2:3e:5f:58:
         51:04:27:da:e4:5c:3c:ab:57:fd:4a:8c:a4:9c:21:fe:62:82:
         26:02:99:c5:9f:16:d3:89:f6:d9:69:31:c3:20:9d:ea:44:07:
         dd:60:57:66:70:e9:9f:a6:91:98:72:ff:69:b8:d7:6e:c0:39:
         66:04:cb:6e:c8:16:4f:32:54:32:0c:c3:08:56:f5:2b:7f:05:
         65:b2:37:ea:4e:09:19:be:34:da:44:27:8a:a9:63:8a:54:59:
         51:e0:38:70:35:08:13:fe:d9:66:f2:fa:29:63:9a:46:75:7e:
         c7:b5:45:e4:7a:2a:50:f1:ba:6f:35:52:92:4b:86:bb:d7:e0:
         e5:5b:fe:b3:7c:d3:68:09:45:f1:bc:5a:44:2b:ab:7b:05:a4:
         11:00:9a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxHHRkO3+rTdtuSfzLzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGIxOTM4NjY4YjI3YjA1MmM2ODNkMWUyNjBjMGNkM2Q1
Njg3NWIwHhcNMjYwMzI1MjMwMTE1WhcNMjYwMzI2MjMwMTE1WjAzMTEwLwYDVQQD
Eyg2MTEyODMwNGIzOTk1MjQzYzk1MmIyNzM3N2RjYWYwNmMzZTNmNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvk7ISiLQH9k9+WkVteTf4GNiVeZ
QUP05jal1bzxsutYutQyUeebQc/1pTJk4439l5tUWo2/KFZOyf79kXyF6WVZqYyV
h6MNyRXlpsGBMJzAZ8mHx/cw6DDi280RNK5H1ydlu/DKRxJ3zdvH+mE/0cCjkPU4
mx7gh1gVaH1VFpTJRparwOiB0uoI6vcs+wH9Hc5nDmuYXuPgcpu7288X0up9QyQU
P7r8T/RMvzj9vE45zHWa7iFl+z7lQtnl5P2RmmLGlrkMOWcq9MAIvDAcrGgq7Wv7
xUYm9CN8/VQfCaIBBN3sANgLKXqpODrrzxMOpUFtaKvkMbtrC3HzNCbq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGESgwSzmVJDyVKyc3fcrwbD4/VdMB8GA1UdIwQY
MBaAFLtLGThmiyewUsaD0eJgwM09VodbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUt
YjNjNzQyNTQzZGRmLzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUtYjNjNzQyNTQzZGRm
LzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxiHL8QY
Il45mzPmxcgVVkREYZXDff5p0xXrv7asd9Rvv7CNmzVszk8uxiKeZkG1ltl2AZab
zbb00L3ViZjh9MPLL828qRDJFsk7CWZrBeod0nnpGPX+dfWAsT40SidnqXuNqaQV
at/iPl9YUQQn2uRcPKtX/UqMpJwh/mKCJgKZxZ8W04n22WkxwyCd6kQH3WBXZnDp
n6aRmHL/abjXbsA5ZgTLbsgWTzJUMgzDCFb1K38FZbI36k4JGb402kQniqljilRZ
UeA4cDUIE/7ZZvL6KWOaRnV+x7VF5HoqUPG6bzVSkkuGu9fg5Vv+s3zTaAlF8bxa
RCurewWkEQCakw==
-----END CERTIFICATE-----