Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File:                     adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier:          nr9rShCxUtlIz/odda+/J/6VPhyPHCvdh3p8P3oeO08=
Subject key identifier:   15:F8:83:64:15:7F:8B:38:44:8A:25:9C:5B:07:8E:6D:D0:32:1F:44
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer:       /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial:       019D265FC8DA014A0400692BBED4569CD535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number:          0577
Signing time:             Wed 25 Mar 2026 19:01:44 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:44 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:44 +0000
Files and hashes:         1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: m/mN8ykFfOsT8s/aiYAdajqwL3S0ZsqtWG4aKW90ZME=)
                          2: n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa (hash: TtS8MXUMjryS2KglqrPI9cFZLS1rb1BrcZ1YrWA74zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:c8:da:01:4a:04:00:69:2b:be:d4:56:9c:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
        Validity
            Not Before: Mar 25 19:01:44 2026 GMT
            Not After : Mar 26 19:01:44 2026 GMT
        Subject: CN=15f88364157f8b38448a259c5b078e6dd0321f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:ea:84:8d:b5:8b:a7:37:8c:f4:1a:b6:09:
                    f5:1f:dd:97:21:d0:cb:b3:f8:60:47:32:ec:f4:74:
                    f0:61:55:58:a6:7c:0e:0d:f6:54:48:f8:1f:cc:d1:
                    89:ed:b2:42:80:4e:c3:c1:04:76:bd:46:24:37:70:
                    1a:44:28:e9:06:a5:51:d5:f0:52:c1:1e:3e:49:ac:
                    e1:52:ac:dc:45:eb:08:52:75:38:0f:5b:d9:f6:e5:
                    af:8c:00:db:b8:d3:6d:f6:53:f7:d9:ea:d6:67:80:
                    ed:0a:a3:00:0c:ea:59:79:85:45:64:97:1c:95:6a:
                    ec:dd:16:ac:39:af:f2:03:02:8a:df:80:c8:68:8c:
                    e5:52:11:9e:e5:77:f6:0a:b2:10:37:af:4f:72:dd:
                    55:f2:c5:8e:3a:4a:5c:d8:fb:6e:17:77:25:8a:5b:
                    7d:fc:26:1f:ae:ad:5d:16:7d:40:57:bd:b9:bd:e3:
                    81:9f:67:20:c4:ef:e8:06:71:9d:47:32:9c:b8:b0:
                    78:15:1f:ca:b5:38:50:95:a4:86:20:d1:72:29:be:
                    38:d4:07:d4:12:be:4f:bd:a2:66:ea:dd:77:c1:8d:
                    1b:87:96:d0:e1:63:84:5c:2d:cf:12:05:7e:eb:5b:
                    82:ae:3c:f1:cf:7d:09:57:e1:d8:e8:dc:df:e4:c8:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F8:83:64:15:7F:8B:38:44:8A:25:9C:5B:07:8E:6D:D0:32:1F:44
            X509v3 Authority Key Identifier:
                keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:a6:b7:c7:f7:71:00:66:97:1d:19:f0:37:c8:3e:48:53:
         a9:62:69:4f:72:e1:f3:87:1b:8c:33:26:00:f0:57:2d:2c:d3:
         3b:8f:db:d1:cb:74:36:87:d7:e1:a6:76:3c:69:47:a0:32:46:
         b1:48:1f:82:41:0a:37:86:10:02:89:66:ba:5f:c8:0f:d9:7e:
         03:65:59:46:5a:ff:e5:81:bb:08:8e:4e:9c:b1:de:9a:1f:ab:
         b6:c7:b3:9d:57:aa:88:2d:1a:c6:3a:eb:53:a4:77:fe:02:a2:
         70:2f:d4:82:ff:47:ea:b8:d8:8f:d6:9c:a4:62:6c:a6:fd:db:
         87:17:6d:49:59:6c:99:b6:cd:e3:e3:61:cb:21:71:e7:60:31:
         88:4e:10:85:9c:0b:ff:8c:6a:4e:67:3a:e9:6a:a5:ec:c3:75:
         df:17:94:06:d3:8e:1c:e0:54:02:46:7a:21:58:ab:d0:6c:ea:
         5a:bf:ed:3d:63:1d:e9:3d:4b:6e:8f:3a:2d:60:a5:2b:f2:66:
         b6:d0:9f:de:a5:f9:1d:50:67:f9:cf:40:06:55:10:be:53:a1:
         ca:48:f0:4a:1f:77:d4:3e:7e:88:5f:9e:a1:bf:09:d4:cf:23:
         b9:bf:71:92:bf:c6:67:8a:88:a2:cd:4b:b5:92:8c:58:bd:36:
         35:5b:92:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8jaAUoEAGkrvtRWnNU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk
Yjc3ODcwHhcNMjYwMzI1MTkwMTQ0WhcNMjYwMzI2MTkwMTQ0WjAzMTEwLwYDVQQD
EygxNWY4ODM2NDE1N2Y4YjM4NDQ4YTI1OWM1YjA3OGU2ZGQwMzIxZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EzqhI21i6c3jPQatgn1H92XIdDL
s/hgRzLs9HTwYVVYpnwODfZUSPgfzNGJ7bJCgE7DwQR2vUYkN3AaRCjpBqVR1fBS
wR4+SazhUqzcResIUnU4D1vZ9uWvjADbuNNt9lP32erWZ4DtCqMADOpZeYVFZJcc
lWrs3RasOa/yAwKK34DIaIzlUhGe5Xf2CrIQN69Pct1V8sWOOkpc2PtuF3clilt9
/CYfrq1dFn1AV725veOBn2cgxO/oBnGdRzKcuLB4FR/KtThQlaSGINFyKb441AfU
Er5PvaJm6t13wY0bh5bQ4WOEXC3PEgV+61uCrjzxz30JV+HY6Nzf5MhkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX4g2QVf4s4RIolnFsHjm3QMh9EMB8GA1UdIwQY
MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt
NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz
LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMOmt8f3
cQBmlx0Z8DfIPkhTqWJpT3Lh84cbjDMmAPBXLSzTO4/b0ct0NofX4aZ2PGlHoDJG
sUgfgkEKN4YQAolmul/ID9l+A2VZRlr/5YG7CI5OnLHemh+rtseznVeqiC0axjrr
U6R3/gKicC/Ugv9H6rjYj9acpGJspv3bhxdtSVlsmbbN4+NhyyFx52AxiE4QhZwL
/4xqTmc66Wql7MN13xeUBtOOHOBUAkZ6IVir0GzqWr/tPWMd6T1Lbo86LWClK/Jm
ttCf3qX5HVBn+c9ABlUQvlOhykjwSh931D5+iF+eob8J1M8jub9xkr/GZ4qIos1L
tZKMWL02NVuSXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:17 2026 by rpki-client