Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft
File:                     uSlkIXfSedGfRHiNubyPENZdm9c.mft (raw, json)
Hash identifier:          DoxtJ/z2TWHaKbYfs7SPJaiGoqN2h6dti/A6FiWSBMg=
Subject key identifier:   69:06:EA:4F:53:A5:39:C5:4E:3B:4C:09:43:7F:3B:59:AA:09:3F:C4
Authority key identifier: B9:29:64:21:77:D2:79:D1:9F:44:78:8D:B9:BC:8F:10:D6:5D:9B:D7
Certificate issuer:       /CN=b929642177d279d19f44788db9bc8f10d65d9bd7
Certificate serial:       019D258414D86698D2E949FC71D44E8055D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSlkIXfSedGfRHiNubyPENZdm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft
Manifest number:          020B
Signing time:             Wed 25 Mar 2026 15:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:46 +0000
Files and hashes:         1: uSlkIXfSedGfRHiNubyPENZdm9c.crl (hash: SAfQzsDxZbfKI1sYpm7vzIb/yYxmACoSnrojOOilThg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSlkIXfSedGfRHiNubyPENZdm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:14:d8:66:98:d2:e9:49:fc:71:d4:4e:80:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b929642177d279d19f44788db9bc8f10d65d9bd7
        Validity
            Not Before: Mar 25 15:01:46 2026 GMT
            Not After : Mar 26 15:01:46 2026 GMT
        Subject: CN=6906ea4f53a539c54e3b4c09437f3b59aa093fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:30:57:ba:9f:59:08:18:ae:a6:18:e3:83:
                    dd:60:e0:a2:55:b3:bd:53:e0:6f:fb:aa:00:57:4c:
                    38:21:75:87:01:e3:84:ff:99:fc:4f:61:b6:c2:12:
                    c7:57:4c:19:ca:a3:31:c0:d4:f5:1e:d3:b1:50:2b:
                    a9:05:18:f1:67:31:a5:0d:72:78:8a:19:bd:37:10:
                    ee:42:ab:db:71:89:66:e5:58:2c:7f:ef:85:b8:4f:
                    ca:de:33:62:00:60:5a:fc:f5:12:71:58:2a:2c:0b:
                    48:75:2e:d1:93:b3:89:f1:cc:bb:29:2c:e7:7e:fe:
                    3a:49:2f:f5:ca:35:60:05:26:07:75:c1:cc:6f:de:
                    50:fa:f3:96:75:d4:e3:02:5a:6f:b6:3c:3b:7e:55:
                    49:f8:c3:2b:1a:7f:5d:0e:8e:1f:c5:5f:a3:61:2a:
                    96:fd:46:db:0d:1b:a0:ca:bf:5d:23:a9:8a:b0:e0:
                    62:1b:28:dc:f2:30:45:55:ad:47:12:26:2e:1e:82:
                    50:6a:45:c4:b4:82:e4:5e:ba:cb:5f:43:fe:3f:de:
                    30:f7:58:ed:11:67:c7:5d:7a:5a:05:aa:08:4c:5a:
                    02:5e:46:6c:b6:87:93:17:3f:65:97:f4:fb:6b:46:
                    fb:30:c1:00:2e:41:99:9e:b5:ac:32:6b:bb:94:b3:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:EA:4F:53:A5:39:C5:4E:3B:4C:09:43:7F:3B:59:AA:09:3F:C4
            X509v3 Authority Key Identifier:
                keyid:B9:29:64:21:77:D2:79:D1:9F:44:78:8D:B9:BC:8F:10:D6:5D:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSlkIXfSedGfRHiNubyPENZdm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:7d:98:c2:a6:d1:bf:68:3c:a2:5c:28:ab:ad:d3:3a:04:
         72:5b:1b:cd:34:0d:70:09:be:50:44:cd:ab:db:56:da:4e:df:
         ef:b2:c3:98:49:9e:93:a8:91:4a:48:58:1a:cf:89:a6:55:8d:
         7b:22:43:3a:28:d6:7a:bd:ef:33:6d:59:13:d1:34:30:0c:40:
         03:03:e9:22:46:7c:89:47:c5:47:f9:64:60:73:b0:72:3c:c5:
         b1:7b:b5:d2:de:a4:b1:17:76:41:81:0d:4f:75:77:c9:d5:54:
         59:f4:ec:1a:8d:a0:e3:00:99:23:2f:95:0a:c8:f9:3a:f8:b0:
         d3:63:91:aa:14:64:87:53:6f:ce:5e:7d:ce:cc:e6:2d:6a:f5:
         bc:d9:11:46:90:cd:43:36:8d:53:58:1e:97:93:5d:1c:d9:dc:
         c5:b3:dd:a7:f8:3b:97:5f:a5:6d:64:0b:b0:1c:eb:ab:75:82:
         26:df:77:0e:87:af:12:fd:c9:be:a4:7d:1c:28:dc:c6:d7:1f:
         50:f4:a6:87:91:0a:72:3c:7e:7c:5a:1b:d9:2f:7c:db:9d:96:
         f5:99:00:83:d0:a7:d9:12:55:c8:42:88:16:c5:b1:4a:5a:c9:
         f8:77:98:6e:d7:95:4d:c8:12:3d:7b:df:13:de:68:04:44:ac:
         1f:93:78:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhBTYZpjS6Un8cdROgFXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Mjk2NDIxNzdkMjc5ZDE5ZjQ0Nzg4ZGI5YmM4ZjEwZDY1
ZDliZDcwHhcNMjYwMzI1MTUwMTQ2WhcNMjYwMzI2MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg2OTA2ZWE0ZjUzYTUzOWM1NGUzYjRjMDk0MzdmM2I1OWFhMDkzZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/owV7qfWQgYrqYY44PdYOCiVbO9
U+Bv+6oAV0w4IXWHAeOE/5n8T2G2whLHV0wZyqMxwNT1HtOxUCupBRjxZzGlDXJ4
ihm9NxDuQqvbcYlm5Vgsf++FuE/K3jNiAGBa/PUScVgqLAtIdS7Rk7OJ8cy7KSzn
fv46SS/1yjVgBSYHdcHMb95Q+vOWddTjAlpvtjw7flVJ+MMrGn9dDo4fxV+jYSqW
/UbbDRugyr9dI6mKsOBiGyjc8jBFVa1HEiYuHoJQakXEtILkXrrLX0P+P94w91jt
EWfHXXpaBaoITFoCXkZstoeTFz9ll/T7a0b7MMEALkGZnrWsMmu7lLOSQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkG6k9TpTnFTjtMCUN/O1mqCT/EMB8GA1UdIwQY
MBaAFLkpZCF30nnRn0R4jbm8jxDWXZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVNsa0lYZlNlZEdmUkhpTnVieVBFTlpkbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lNjVjNzMtZWViMS00MDY0LWI2ZDQt
YjU2ZDBjNTNmZjA0LzEvdVNsa0lYZlNlZEdmUkhpTnVieVBFTlpkbTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lNjVjNzMtZWViMS00MDY0LWI2ZDQtYjU2ZDBjNTNmZjA0
LzEvdVNsa0lYZlNlZEdmUkhpTnVieVBFTlpkbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsR9mMKm
0b9oPKJcKKut0zoEclsbzTQNcAm+UETNq9tW2k7f77LDmEmek6iRSkhYGs+JplWN
eyJDOijWer3vM21ZE9E0MAxAAwPpIkZ8iUfFR/lkYHOwcjzFsXu10t6ksRd2QYEN
T3V3ydVUWfTsGo2g4wCZIy+VCsj5Oviw02ORqhRkh1Nvzl59zszmLWr1vNkRRpDN
QzaNU1gel5NdHNncxbPdp/g7l1+lbWQLsBzrq3WCJt93DoevEv3JvqR9HCjcxtcf
UPSmh5EKcjx+fFob2S98252W9ZkAg9Cn2RJVyEKIFsWxSlrJ+HeYbteVTcgSPXvf
E95oBESsH5N4zA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:04 2026 by rpki-client