Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          UedURK3ybDTZh87CTg413DOLDEkXHjDSqjRAopApBa8=
Subject key identifier:   FF:0B:72:D0:5D:AB:FB:77:BE:4C:3F:CB:76:30:D0:7D:B1:F6:EE:91
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       019D2AE0F3B5DE0733CF42BA5CB70E1D9E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          07AF
Signing time:             Thu 26 Mar 2026 16:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:18 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: UnNMXpSrsZ+PiMgTFGOEeDQ4+x7JZ6GBFyaTGabn4gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:f3:b5:de:07:33:cf:42:ba:5c:b7:0e:1d:9e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Mar 26 16:01:18 2026 GMT
            Not After : Mar 27 16:01:18 2026 GMT
        Subject: CN=ff0b72d05dabfb77be4c3fcb7630d07db1f6ee91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:6f:13:54:1c:50:6e:9a:82:89:3b:0e:18:
                    cb:60:b7:50:e2:31:bb:94:cb:b9:7c:5b:76:9b:7a:
                    a6:6f:6e:38:e8:3d:27:48:6a:47:3e:9f:8d:ca:51:
                    bb:41:1d:79:a7:97:99:c3:0c:56:87:96:9f:60:a3:
                    13:45:2b:7e:7e:b8:e1:cb:76:9c:15:f9:d0:ad:49:
                    a1:94:55:7d:2e:4b:e7:3d:7e:ff:05:1e:82:09:9b:
                    58:22:fa:a9:8b:14:28:c8:63:c2:39:0c:63:8a:df:
                    c2:71:6e:5b:fe:e0:72:ea:59:b2:d9:ab:ea:62:30:
                    79:79:5c:3f:3d:44:a0:99:2b:99:ea:93:2e:39:9f:
                    04:0c:ad:cb:ef:bd:98:b8:32:51:34:0c:b4:ba:d6:
                    aa:b8:33:d3:0d:72:7c:3e:d5:1f:08:0f:23:65:0b:
                    b6:b1:22:8b:89:6a:4c:e7:4c:9b:11:5a:9e:31:69:
                    78:a8:88:83:cd:ff:30:24:fd:b5:fe:80:dd:f6:76:
                    db:61:e8:c1:10:60:d8:b6:f5:07:0f:ef:28:1f:54:
                    ae:de:98:04:ba:20:cd:d8:9e:5f:7c:c0:b4:b8:00:
                    d6:dd:11:d9:7d:65:34:8d:f8:7b:1f:09:10:fb:ac:
                    a8:03:ee:eb:f0:ef:60:ee:12:c6:76:57:85:8e:6a:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:72:D0:5D:AB:FB:77:BE:4C:3F:CB:76:30:D0:7D:B1:F6:EE:91
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:38:c6:dd:8e:da:71:e0:82:9c:40:45:77:31:de:f6:70:01:
         83:1b:e7:6f:72:98:d4:94:b3:d7:4f:9e:9e:4e:a8:1f:92:0a:
         35:56:29:6b:77:2a:21:ab:f1:a5:15:d7:64:65:f7:1e:bb:7c:
         7c:7b:02:bd:1b:a9:a5:a3:b5:6a:ea:a6:68:ee:72:31:d5:9b:
         0c:2a:c3:f0:16:7f:5c:e6:6b:55:52:dd:d7:34:61:f7:4d:f1:
         67:8e:d0:6c:af:bd:f0:91:cf:ca:20:75:aa:ab:39:cb:05:9d:
         02:26:6c:f0:15:20:7a:3c:cb:31:d9:60:36:a1:3d:78:dc:6e:
         97:55:aa:49:79:35:4c:4c:fd:c3:1a:19:97:c3:90:b3:d4:6f:
         ef:63:03:7d:42:1c:7a:7a:94:b6:40:f0:ab:94:87:f5:47:83:
         e6:fd:81:d9:7d:80:0b:71:21:29:19:7b:0e:25:7e:10:3e:58:
         3b:a7:4a:78:75:4b:ba:f8:0b:19:ce:ce:54:26:7a:da:ae:32:
         9f:79:56:6e:29:e8:3e:7e:e8:2b:1b:3d:bc:35:b8:78:dc:b4:
         79:be:8a:e8:ef:55:d1:ce:51:23:6d:c2:6a:ca:a2:b6:7f:2b:
         4e:89:96:1f:dd:37:ff:82:64:a5:d6:98:65:59:74:ce:68:12:
         54:cb:54:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4PO13gczz0K6XLcOHZ51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MmU0MTYwZDk4MDhmOTJmZmVmMDkzZTliMWI5YTA0MjFi
YWRhMzQwHhcNMjYwMzI2MTYwMTE4WhcNMjYwMzI3MTYwMTE4WjAzMTEwLwYDVQQD
EyhmZjBiNzJkMDVkYWJmYjc3YmU0YzNmY2I3NjMwZDA3ZGIxZjZlZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFFvE1QcUG6agok7DhjLYLdQ4jG7
lMu5fFt2m3qmb2446D0nSGpHPp+NylG7QR15p5eZwwxWh5afYKMTRSt+frjhy3ac
FfnQrUmhlFV9LkvnPX7/BR6CCZtYIvqpixQoyGPCOQxjit/CcW5b/uBy6lmy2avq
YjB5eVw/PUSgmSuZ6pMuOZ8EDK3L772YuDJRNAy0utaquDPTDXJ8PtUfCA8jZQu2
sSKLiWpM50ybEVqeMWl4qIiDzf8wJP21/oDd9nbbYejBEGDYtvUHD+8oH1Su3pgE
uiDN2J5ffMC0uADW3RHZfWU0jfh7HwkQ+6yoA+7r8O9g7hLGdleFjmoccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8LctBdq/t3vkw/y3Yw0H2x9u6RMB8GA1UdIwQY
MBaAFEguQWDZgI+S/+8JPpsbmgQhuto0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0M1QllObUFqNUxfN3drLW14dWFCQ0c2MmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjU4NzQtNzE1Yy00OTdmLThlZTUt
ZDQxMzM1ZjgwZGM5LzEvU0M1QllObUFqNUxfN3drLW14dWFCQ0c2MmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjU4NzQtNzE1Yy00OTdmLThlZTUtZDQxMzM1ZjgwZGM5
LzEvU0M1QllObUFqNUxfN3drLW14dWFCQ0c2MmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDjG3Y7a
ceCCnEBFdzHe9nABgxvnb3KY1JSz10+enk6oH5IKNVYpa3cqIavxpRXXZGX3Hrt8
fHsCvRuppaO1auqmaO5yMdWbDCrD8BZ/XOZrVVLd1zRh903xZ47QbK+98JHPyiB1
qqs5ywWdAiZs8BUgejzLMdlgNqE9eNxul1WqSXk1TEz9wxoZl8OQs9Rv72MDfUIc
enqUtkDwq5SH9UeD5v2B2X2AC3EhKRl7DiV+ED5YO6dKeHVLuvgLGc7OVCZ62q4y
n3lWbinoPn7oKxs9vDW4eNy0eb6K6O9V0c5RI23Casqitn8rTomWH903/4JkpdaY
ZVl0zmgSVMtUOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:10 2026 by rpki-client